Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91F13AB024C611F087FC6186DAE4EC9C.roa
File: 91F13AB024C611F087FC6186DAE4EC9C.roa (raw, json)
Hash identifier: quJ/Fl9TVGGixQM3hSDWn/tv1ERV7cnCfbklCBTKxoI=
Subject key identifier: 27:CB:93:98:B8:21:3E:1F:9C:ED:E0:D0:C4:2F:D5:B4:45:37:5F:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01500B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91F13AB024C611F087FC6186DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 06:52:52 +0000
ROA not before: Tue 29 Apr 2025 06:52:48 +0000
ROA not after: Thu 08 May 2025 06:52:48 +0000
asID: 328608
IP address blocks: 156.229.172.0/23 maxlen: 24
156.229.174.0/24 maxlen: 24
156.243.134.0/23 maxlen: 24
156.243.136.0/23 maxlen: 24
156.243.138.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
156.243.146.0/23 maxlen: 24
156.243.148.0/23 maxlen: 24
156.244.204.0/22 maxlen: 24
156.244.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86027 (0x1500b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:52:48 2025 GMT
Not After : May 8 06:52:48 2025 GMT
Subject: CN=68107744-c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:98:7e:d2:47:b5:c9:4f:d7:3c:2a:eb:d8:
e9:5e:5c:91:58:99:44:53:6c:1d:78:cc:f1:2a:3e:
d3:87:48:6b:9f:79:ad:26:c2:3e:24:0e:c8:ab:29:
e8:82:be:f1:79:0a:43:c1:3b:ed:51:4f:cb:44:3f:
52:4d:a7:3f:28:11:0a:31:9d:b1:66:7b:3c:79:c9:
78:df:e5:2c:b5:60:dc:15:04:05:f7:c0:1e:06:6d:
57:a5:c0:0a:0c:37:d9:a1:ac:e5:cb:09:41:a3:f3:
b4:08:5b:5b:90:0a:6f:9b:d6:15:38:8c:ea:18:5e:
da:9e:6f:2d:ba:b5:e9:c2:d4:9c:f3:cf:8d:d9:4b:
03:e4:32:80:ff:55:de:46:f0:74:37:20:93:79:b6:
46:26:5f:3b:4d:4f:a5:ba:55:14:0a:fd:77:56:64:
73:c4:49:f2:0e:76:b5:d0:98:71:0b:ba:38:19:9a:
0c:3e:c4:69:c5:f7:89:64:32:1e:3a:db:1d:b2:7a:
ed:07:a8:3d:8f:34:4a:62:49:3e:2f:20:6f:2b:9b:
e1:3e:a3:eb:68:6a:2e:a2:4a:c6:21:e9:c4:76:0d:
22:f1:2a:63:d3:a8:69:72:85:88:71:fc:cc:5f:ec:
21:7a:2a:b4:ef:d6:68:82:a4:0e:48:b6:59:9c:71:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CB:93:98:B8:21:3E:1F:9C:ED:E0:D0:C4:2F:D5:B4:45:37:5F:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91F13AB024C611F087FC6186DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.172.0-156.229.174.255
156.243.134.0-156.243.138.255
156.243.145.0-156.243.149.255
156.244.204.0-156.244.208.255
Signature Algorithm: sha256WithRSAEncryption
39:a8:03:62:10:88:cf:79:08:96:0f:fc:88:66:6f:c7:39:f2:
57:8c:53:9e:63:28:5b:a5:34:eb:6a:f4:9c:c4:7d:f2:98:14:
38:8a:da:4e:45:aa:ab:61:b0:36:42:2d:01:49:53:2c:bf:fc:
13:36:38:4c:17:99:5a:c9:7b:22:3f:34:43:60:5e:c9:f5:7d:
d4:6d:c1:18:91:d1:3e:84:ae:79:66:36:16:fc:f2:a9:b1:3d:
91:5d:a7:fa:f0:c5:e7:1a:eb:e1:77:86:9b:eb:ba:88:0e:11:
df:bc:79:df:3e:8b:80:46:ac:bc:24:87:45:34:51:2a:52:41:
74:a3:a6:d0:61:6d:fd:8b:ad:dd:c4:0a:1b:27:0f:b9:4f:e9:
58:be:3f:82:fc:e0:d4:b3:c4:13:54:a1:0f:c9:8c:a6:16:76:
98:d0:be:dd:5d:c1:de:6d:e6:63:b4:5d:d3:92:cd:0b:71:e3:
1f:18:e8:26:11:ca:20:bf:46:5b:94:9d:21:a9:41:63:df:7c:
63:f7:f7:47:88:26:bf:a4:a6:6d:f2:b6:21:df:42:73:92:e9:
67:0e:98:ec:d0:3e:38:80:40:63:cc:97:0e:6a:6a:d1:e0:5f:
1a:c9:94:cf:3d:99:99:2e:d1:ca:e0:c4:53:0d:9c:dd:0c:b5:
26:c5:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:41:12 2025 by rpki-client