Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252C9DC0273211F0B8DE64B7DAE4EC9C.roa
File: 252C9DC0273211F0B8DE64B7DAE4EC9C.roa (raw, json)
Hash identifier: KXwEVuAaqtRwikON4IOtJMXJ9yYvlRzLE3Ewg6mSJ6w=
Subject key identifier: 2C:19:F3:9A:E4:77:75:F8:21:56:71:80:65:D2:6D:8B:1F:0B:76:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01515C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252C9DC0273211F0B8DE64B7DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:47:58 +0000
ROA not before: Fri 02 May 2025 08:47:53 +0000
ROA not after: Sun 11 May 2025 08:47:53 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86364 (0x1515c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:47:53 2025 GMT
Not After : May 11 08:47:53 2025 GMT
Subject: CN=681486be-d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:d8:b7:a3:38:b1:d1:37:0e:98:e3:01:d3:
b5:1a:2e:ba:3e:f2:d5:8d:76:89:24:e1:be:2f:18:
82:7f:48:d0:a0:bc:bc:20:42:23:83:21:ba:0f:00:
9a:02:b1:5f:3f:2f:47:d3:2a:98:13:6f:67:d9:de:
e3:92:a8:9f:b8:bc:43:ab:7b:df:bc:10:c6:cf:cb:
4e:c1:6d:31:77:a9:27:ee:94:c3:9a:75:36:9e:da:
cd:6a:a1:1d:ea:9e:f1:30:9c:87:ec:45:cd:8e:98:
28:15:1e:12:ba:fb:1d:a1:0e:47:cb:92:4c:11:16:
b9:09:f3:ee:1c:dc:e2:57:80:c9:46:92:ab:8a:ee:
c8:c3:a8:35:e6:a3:2b:d8:b5:d3:ab:84:a2:86:f5:
39:ab:24:57:1f:f4:38:1e:04:f2:40:6f:2e:fe:fc:
9a:1d:8c:d4:68:bf:33:7f:bd:b9:5b:1e:fc:e1:f7:
cf:e1:9a:fa:dc:c7:ba:dc:12:fc:ce:1c:e4:27:43:
57:d0:94:ca:14:89:aa:8d:85:26:53:91:28:83:a8:
38:73:d0:d8:51:b8:55:de:ef:4c:aa:a8:2d:d9:19:
3f:2e:21:f9:81:5c:5b:4b:e0:e4:8c:85:f1:39:82:
bc:15:2a:8d:50:de:27:d7:bb:22:95:96:d2:2a:4e:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:F3:9A:E4:77:75:F8:21:56:71:80:65:D2:6D:8B:1F:0B:76:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252C9DC0273211F0B8DE64B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3c:3c:d3:5f:5a:e4:69:b7:fe:19:79:6b:d6:30:ab:6f:4e:
52:d1:4a:be:70:88:e1:09:9f:62:88:16:fa:ab:44:7b:5e:92:
19:e1:0e:3b:08:db:46:50:26:96:5b:de:5f:0b:78:6f:e5:b1:
55:98:6e:9e:a2:ca:00:b3:84:b8:76:59:69:6f:04:38:85:e2:
21:0f:12:b2:61:81:ff:72:47:b4:a2:16:6d:6b:9a:11:16:6e:
4d:d3:f3:b6:ea:cd:d0:a9:00:eb:25:7a:45:2e:e8:09:35:55:
ee:35:e1:64:ea:ad:26:d1:53:7e:f1:0d:8c:69:0a:d8:4d:f5:
a5:09:79:ff:c8:49:e1:a2:16:17:b9:ab:d3:3d:60:56:5c:16:
6f:72:8e:3c:8c:bd:de:da:81:5f:67:02:56:a6:d1:1b:0a:ff:
71:f7:c8:22:fe:c2:89:4c:32:f6:d8:8e:6e:51:5e:47:3d:79:
b3:20:b7:0a:8b:8a:b2:07:df:1f:a7:f1:9e:74:53:77:24:69:
c3:45:ca:8a:c8:dc:e2:be:ce:b7:84:d8:0c:48:a8:7b:b9:ea:
ec:db:4e:35:c8:98:80:fd:af:19:70:1b:78:a0:ad:67:cb:c5:
20:7d:ea:06:d3:7d:a9:67:76:f3:a2:80:db:a8:0b:f0:15:b1:
7b:80:f5:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVFcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAyMDg0NzUzWhcNMjUwNTExMDg0NzUzWjAYMRYw
FAYDVQQDEw02ODE0ODZiZS1kOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0hPYt6M4sdE3DpjjAdO1Gi66PvLVjXaJJOG+LxiCf0jQoLy8IEIjgyG6
DwCaArFfPy9H0yqYE29n2d7jkqifuLxDq3vfvBDGz8tOwW0xd6kn7pTDmnU2ntrN
aqEd6p7xMJyH7EXNjpgoFR4SuvsdoQ5Hy5JMERa5CfPuHNziV4DJRpKriu7Iw6g1
5qMr2LXTq4SihvU5qyRXH/Q4HgTyQG8u/vyaHYzUaL8zf725Wx784ffP4Zr63Me6
3BL8zhzkJ0NX0JTKFImqjYUmU5Eog6g4c9DYUbhV3u9Mqqgt2Rk/LiH5gVxbS+Dk
jIXxOYK8FSqNUN4n17silZbSKk49WwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCwZ
85rkd3X4IVZxgGXSbYsfC3bmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNTJDOURDMDI3MzIxMUYwQjhERTY0QjdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5VMA0GCSqGSIb3DQEBCwUA
A4IBAQAbPDzTX1rkabf+GXlr1jCrb05S0Uq+cIjhCZ9iiBb6q0R7XpIZ4Q47CNtG
UCaWW95fC3hv5bFVmG6eosoAs4S4dllpbwQ4heIhDxKyYYH/cke0ohZta5oRFm5N
0/O26s3QqQDrJXpFLugJNVXuNeFk6q0m0VN+8Q2MaQrYTfWlCXn/yEnhohYXuavT
PWBWXBZvco48jL3e2oFfZwJWptEbCv9x98gi/sKJTDL22I5uUV5HPXmzILcKi4qy
B98fp/GedFN3JGnDRcqKyNzivs63hNgMSKh7uers2041yJiA/a8ZcBt4oK1ny8Ug
feoG032pZ3bzooDbqAvwFbF7gPVA
-----END CERTIFICATE-----
Generated at Sun May 11 19:36:09 2025 by rpki-client