Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769F40E6505811F0A27484E0DAE4EC9C.roa
File: 769F40E6505811F0A27484E0DAE4EC9C.roa (raw, json)
Hash identifier: AhIcj40Mam2NqdIxWytaCL3uYIoglbZq5wIvJ7JF0Lo=
Subject key identifier: 97:1B:ED:D1:39:F5:C9:7B:83:C4:BE:59:09:17:44:2C:02:05:69:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769F40E6505811F0A27484E0DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 17:35:33 +0000
ROA not before: Mon 23 Jun 2025 17:35:28 +0000
ROA not after: Tue 01 Jul 2025 17:35:28 +0000
asID: 135097
IP address blocks: 156.250.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89643 (0x15e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 17:35:28 2025 GMT
Not After : Jul 1 17:35:28 2025 GMT
Subject: CN=68599065-e679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:25:26:e3:a6:51:1f:b4:ee:e2:08:f8:ce:
0a:30:03:1b:ae:99:07:32:c8:f3:77:9a:97:5b:e1:
62:55:f7:86:1f:6c:cb:d6:90:03:89:81:81:71:a8:
2a:71:85:8e:9f:b5:cb:79:03:60:4e:47:bf:e1:a4:
9a:20:bd:2e:72:dd:54:53:9a:de:63:49:b0:ee:d5:
7c:0f:b3:78:3d:1f:3e:30:35:76:52:e7:13:2d:ac:
8d:e9:e6:54:55:18:f4:cf:ba:8b:09:48:85:c5:81:
6c:ec:eb:29:f1:ef:f2:e4:e7:f8:ee:7b:5c:6e:d1:
5c:65:b4:86:bb:17:ea:cb:86:23:8b:bc:de:68:86:
65:13:ec:09:4a:2a:d5:59:c5:00:7f:ff:d0:44:63:
10:c6:e3:89:26:c4:7a:8f:26:7d:63:0a:fa:f0:bf:
5c:e6:8d:6f:1d:bc:6f:65:df:33:53:ce:52:28:ff:
c2:83:ed:85:60:42:4b:c2:d7:d1:3c:da:71:91:bc:
ee:6d:ec:ba:40:95:8e:2f:31:fa:d1:8a:96:09:c1:
f9:d7:22:b5:bb:c4:f7:62:7d:a9:53:6b:be:8d:d8:
f6:5a:fe:33:3e:4e:95:9d:61:e4:c8:80:b0:85:68:
5e:c4:e4:97:55:19:47:c1:2e:9e:a1:df:0a:23:86:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:ED:D1:39:F5:C9:7B:83:C4:BE:59:09:17:44:2C:02:05:69:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769F40E6505811F0A27484E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:5b:f7:45:31:44:c2:c0:88:0d:3a:1c:b2:bf:5d:ed:33:e9:
09:4a:97:63:3e:e5:0e:d9:cb:d5:e8:db:57:a4:66:94:85:87:
46:e3:db:0e:e9:df:70:e2:29:36:66:a4:a2:30:b1:85:46:c1:
ec:8b:4c:c7:f1:eb:22:e7:06:76:85:a0:33:f9:9b:c8:37:be:
eb:a7:cf:7e:92:d7:3a:34:33:e5:bb:a5:45:e3:9f:66:15:58:
59:c0:f0:c1:20:7f:4f:22:f1:e9:7d:03:76:0c:fc:43:1c:bb:
d7:72:d5:8f:29:30:2d:4f:56:9a:ee:55:5a:fb:3d:5d:7c:07:
0a:34:cc:97:55:39:4d:48:c4:41:2f:ec:c0:02:88:33:f9:03:
ca:95:76:97:ad:7a:60:e2:27:ca:14:38:b5:a7:bc:68:06:20:
a4:72:d8:2b:a5:61:6d:23:5d:29:8e:de:68:a3:c8:6e:bd:ea:
64:b7:a6:c8:21:1d:54:69:38:3a:66:00:c5:15:79:e6:ec:76:
d8:5a:5a:51:df:9b:2f:59:b5:8f:18:ec:06:ae:ef:20:99:a0:
a3:aa:cd:ea:f7:28:1b:3a:ac:3b:0c:e5:65:7e:51:45:f9:7f:
1d:c9:a5:35:da:35:c0:1e:c0:8b:8a:6a:a9:c9:d8:2d:6e:b7:
ff:ce:b8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:54:45 2025 by rpki-client