Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4743B8B2114311F087192193762E951A.roa
File: 4743B8B2114311F087192193762E951A.roa (raw, json)
Hash identifier: 36Cbqyg9uK2Z2j8K3U3ef+G9qNvIhpCPxe88/k9qzqY=
Subject key identifier: 91:8E:B0:CC:9A:BE:89:39:6B:4C:90:98:8F:97:D7:F9:05:84:C3:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4743B8B2114311F087192193762E951A.roa
Signing time: Fri 04 Apr 2025 10:55:10 +0000
ROA not before: Fri 04 Apr 2025 10:55:06 +0000
ROA not after: Thu 08 May 2025 10:55:06 +0000
asID: 44559
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.238.26.0/24 maxlen: 24
156.238.27.0/24 maxlen: 24
156.238.32.0/24 maxlen: 24
156.238.33.0/24 maxlen: 24
156.238.34.0/24 maxlen: 24
156.238.35.0/24 maxlen: 24
156.238.36.0/24 maxlen: 24
156.238.37.0/24 maxlen: 24
156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.246.21.0/24 maxlen: 24
156.246.23.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
156.246.87.0/24 maxlen: 24
156.247.16.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84505 (0x14a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 4 10:55:06 2025 GMT
Not After : May 8 10:55:06 2025 GMT
Subject: CN=67efba8e-387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:b1:7c:34:f4:db:28:9f:71:d7:3b:81:3a:
11:8b:6f:a1:73:2a:02:c2:26:c3:88:74:70:cb:f8:
60:4f:7d:1a:e5:67:59:46:ed:f1:5b:07:28:c9:45:
da:01:10:f7:d1:08:86:81:52:fe:76:53:b7:e0:b9:
76:16:94:7a:65:c9:65:34:a3:35:ac:fa:4a:0a:83:
28:8f:71:8c:03:ce:cd:c0:ea:b5:82:7e:b9:eb:41:
7d:fa:04:4e:51:c8:2c:72:3c:52:75:f6:bf:78:da:
7e:31:75:0e:06:9b:49:ef:c3:a5:59:96:88:5c:25:
41:3b:b1:71:56:23:38:14:67:39:91:5f:42:49:7e:
93:1e:5b:61:27:fe:97:42:4a:31:6d:9d:6c:e5:e0:
9f:05:7f:8f:1a:61:f1:0b:aa:96:b6:e1:50:e0:63:
7e:5d:99:79:fa:50:0d:77:b6:34:d2:11:42:81:7c:
13:b3:79:0d:b4:60:5d:7e:91:04:83:40:18:46:06:
97:07:0a:9d:e8:bd:97:b4:19:3c:91:35:a5:50:8f:
ee:37:38:13:a5:42:20:60:e0:37:1a:d2:bf:92:76:
ad:fa:3c:2c:92:89:7b:fa:a4:c3:3a:2d:74:b1:52:
81:11:bd:f3:b1:3c:97:5b:24:da:fb:d8:8a:b0:16:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:B0:CC:9A:BE:89:39:6B:4C:90:98:8F:97:D7:F9:05:84:C3:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4743B8B2114311F087192193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/22
156.238.32.0/21
156.246.21.0/24
156.246.23.0/24
156.246.31.0/24
156.246.87.0/24
156.247.16.0/24
156.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
11:00:6d:97:62:30:0c:b0:53:d7:ff:fb:fe:45:0f:c3:52:a3:
1a:5e:5b:79:ed:53:5c:b9:6f:22:45:33:da:93:1f:99:55:ac:
81:fe:c9:fe:11:ec:ac:f9:09:11:db:33:ff:59:88:5f:0f:4c:
96:b1:f1:1d:1a:d1:13:ac:8d:d3:80:26:a4:68:ed:68:ce:70:
2f:95:07:f2:0f:de:a8:53:36:3c:b5:f3:33:2e:ba:37:a4:d5:
1c:c4:80:3b:8c:8d:a6:29:7b:1e:85:d7:4c:0c:94:66:40:04:
14:b2:c7:c8:03:fa:5b:fb:3b:8b:e1:de:33:67:4f:e3:34:3b:
b7:4a:25:47:ee:97:d2:bc:48:46:44:31:9d:62:2f:a2:ff:41:
ae:30:94:eb:b2:62:59:20:c7:ea:40:47:84:9f:89:81:01:a6:
af:74:43:06:1e:84:07:ee:56:d7:7e:a9:24:4c:60:58:86:9a:
b3:c4:82:00:aa:fe:44:ee:98:54:1a:75:46:94:47:d3:55:9b:
39:3c:2c:78:47:38:68:e7:8f:0f:47:92:aa:c4:23:f8:83:72:
e2:31:1c:c6:c0:b3:f5:fd:b2:60:9e:ea:67:b8:8c:7e:93:8f:
83:3d:7f:1e:99:c6:1e:91:9b:e4:fc:6d:5c:f5:73:57:49:60:
99:43:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:51:32 2025 by rpki-client