Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454DDAC4C2A11F0AA4E1FADDAE4EC9C.roa
File: 5454DDAC4C2A11F0AA4E1FADDAE4EC9C.roa (raw, json)
Hash identifier: 2ZPMmUMnxDjKI0Jj1mVqhPX+arfP1AFS+ldx5IU0c+w=
Subject key identifier: 70:7D:DB:58:9B:F1:B4:AA:3F:8F:F2:8B:4C:74:D5:9C:C8:AD:0A:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454DDAC4C2A11F0AA4E1FADDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 09:55:14 +0000
ROA not before: Wed 18 Jun 2025 09:55:09 +0000
ROA not after: Wed 02 Jul 2025 09:55:09 +0000
asID: 138915
IP address blocks: 156.244.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89290 (0x15cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 09:55:09 2025 GMT
Not After : Jul 2 09:55:09 2025 GMT
Subject: CN=68528d02-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:52:32:30:5e:9c:9e:6b:01:86:3a:79:65:
b7:4d:25:f7:d3:50:ab:dd:18:d4:84:8b:8f:6c:66:
25:56:4a:07:31:9e:e9:7e:bf:f9:a6:4e:03:c3:4e:
0a:86:0e:48:69:78:d2:07:76:44:92:40:be:cf:29:
21:4a:e7:3a:5a:96:d5:c2:48:06:03:45:b6:5f:97:
b2:e7:49:1e:b0:75:4f:d5:ae:4c:73:ca:be:aa:db:
e1:be:17:ec:6e:95:65:9b:28:7c:a9:89:45:42:bf:
d1:9e:9c:5e:fb:44:3d:09:03:4b:2d:d4:bb:80:42:
e7:a6:18:02:42:f5:79:2b:b1:6e:62:4e:6a:c5:c5:
91:9e:03:2d:90:d3:ed:a2:49:bd:a1:18:66:5d:fc:
bc:d8:99:e7:e0:15:94:00:e4:fe:c4:8b:98:6e:8d:
c0:35:06:e1:21:a5:b2:aa:8d:6e:4a:a1:74:00:d4:
64:b5:97:a1:55:8d:74:51:97:7e:00:d6:e6:8b:ea:
51:ee:12:24:c6:32:3f:b4:c2:e8:66:b6:55:5f:4d:
7f:f7:53:fd:df:3d:94:ae:5f:4a:24:e4:1f:84:e6:
03:aa:45:a3:e4:79:04:95:9a:75:44:06:60:c1:c9:
5e:96:42:a1:15:13:4c:a5:a9:01:83:73:55:88:e2:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:DB:58:9B:F1:B4:AA:3F:8F:F2:8B:4C:74:D5:9C:C8:AD:0A:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5454DDAC4C2A11F0AA4E1FADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ca:60:f3:37:65:06:7a:3e:46:4c:ca:d3:0e:b7:37:fe:d7:
10:68:32:bc:01:87:d7:97:1e:dc:40:99:29:86:94:da:e5:7e:
cf:d3:b7:fe:b7:fa:93:46:4e:6f:24:ee:51:66:a5:a5:15:34:
3c:4a:17:1c:bb:9a:a6:49:73:a3:14:49:64:1a:0f:19:6a:9c:
fd:5e:ac:e2:63:df:26:67:88:9d:0a:67:ab:33:20:a3:4e:8c:
b1:72:5a:37:1e:9f:db:44:70:90:81:d8:ff:ee:97:bb:e0:f8:
22:b9:7f:99:18:39:7c:63:cc:79:c1:f0:1d:4e:03:39:d4:68:
53:e4:58:7b:d6:d8:c5:61:88:5d:74:51:79:eb:4e:0a:93:0e:
53:ff:0a:29:97:3e:7c:f4:b6:c5:bc:7c:21:4c:52:c8:70:54:
8c:43:6b:40:d0:64:d1:64:fb:d4:e6:c1:f5:73:bc:63:95:0d:
cc:88:47:42:db:1d:39:35:fb:ff:7c:8e:a6:55:0f:ca:2a:87:
21:31:fa:c4:6e:7f:7a:44:96:79:8f:30:09:fa:15:3f:fe:2d:
76:ef:ce:a7:71:94:5a:5d:5d:2f:57:f4:ac:2f:7a:ad:fd:5d:
02:8b:07:98:d6:a1:d4:1d:1e:d5:52:9c:57:36:c2:62:a5:6a:
2a:02:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:17:56 2025 by rpki-client