Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95692CCC273011F0942E1CADDAE4EC9C.roa
File: 95692CCC273011F0942E1CADDAE4EC9C.roa (raw, json)
Hash identifier: Pxl78mixeDxASSW2XbV8XPC5BsdkChwsvJZBIjYL3Hk=
Subject key identifier: EE:C9:AF:10:92:D9:01:CA:39:FC:78:7C:C1:54:03:A0:18:6A:9F:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015156
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95692CCC273011F0942E1CADDAE4EC9C.roa
Signing time: Fri 02 May 2025 08:36:47 +0000
ROA not before: Fri 02 May 2025 08:36:42 +0000
ROA not after: Sun 11 May 2025 08:36:42 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86358 (0x15156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:36:42 2025 GMT
Not After : May 11 08:36:42 2025 GMT
Subject: CN=6814841f-3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:01:7b:30:50:1f:bc:b9:ca:28:47:f2:71:
37:ba:7c:db:47:df:3d:61:af:53:22:2e:9e:b9:93:
01:e4:a5:71:34:b0:44:fb:ff:28:ec:27:b0:13:12:
fa:aa:ba:27:62:89:6e:ad:59:64:0f:af:36:fe:35:
8d:9d:ab:b8:23:bd:a9:56:f6:aa:2e:35:4e:ca:4d:
b6:8a:9d:31:d1:c8:81:5c:11:25:21:b9:a4:ad:3d:
ec:08:19:07:02:58:8c:59:15:d1:6e:68:3f:84:f1:
12:01:70:54:bd:45:92:59:fd:36:8d:4f:f1:4a:d1:
ea:2a:a7:8c:e9:72:b8:49:a6:df:42:c2:cf:62:5b:
0c:30:b5:73:79:bf:96:dd:80:0e:ad:13:14:a0:91:
12:61:0f:e9:87:88:3d:59:3a:dc:c8:0c:f9:d7:d1:
55:8d:c1:f2:57:0e:2b:fb:e8:bb:8a:ca:e6:71:84:
81:c9:89:48:42:c8:3b:5b:77:35:d0:2a:21:5e:35:
37:5f:5c:09:32:b9:58:d9:fe:68:35:23:93:fe:47:
1e:e3:0f:d8:10:f4:fc:53:c9:b8:6b:2d:97:66:0f:
c0:16:c8:b6:75:f2:ff:4f:a8:16:f2:06:d0:a8:76:
90:30:1b:6d:b4:f3:2f:e2:20:80:15:64:74:98:f2:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:AF:10:92:D9:01:CA:39:FC:78:7C:C1:54:03:A0:18:6A:9F:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95692CCC273011F0942E1CADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:34:4d:c8:cd:19:4a:e2:e5:3a:4f:0e:56:ea:b3:bd:c7:51:
11:73:83:37:7a:8f:ca:03:a6:49:01:0d:00:36:d7:34:db:8f:
37:f7:fa:3e:f8:54:b3:6f:21:3c:97:27:05:c7:bc:37:d4:c0:
16:f6:7e:d8:22:d5:4c:e7:40:29:33:50:8c:1e:73:cc:01:59:
d4:ae:f4:db:f0:93:2c:1b:a7:fb:1e:c5:41:bd:f1:43:b7:6a:
fb:09:f2:8d:37:f1:89:f8:9a:b4:12:c6:60:81:2e:94:3c:75:
d9:83:39:fa:d6:24:6c:cc:29:f8:ad:b6:05:f9:d8:31:8d:0b:
9f:09:82:b8:64:09:b3:0f:30:0f:68:64:df:17:6a:31:ee:3c:
1c:59:96:ef:d6:a5:2d:e6:a0:51:06:3c:c9:0d:d0:db:41:72:
33:c7:2a:71:19:80:7c:27:7d:00:d4:32:f0:fb:e8:a5:76:19:
49:1c:d7:aa:6a:f9:38:20:83:b3:60:27:c7:db:dd:d4:32:7d:
9b:66:be:60:bd:aa:10:d9:14:3c:1a:8f:38:bd:8f:74:98:2a:
fa:c5:94:95:42:cc:2f:6b:58:68:5a:c7:54:29:ea:56:5c:f1:
c3:20:a1:45:e9:1f:b8:55:ad:b0:c7:a3:75:b1:df:cd:44:db:
c6:cf:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:26:01 2025 by rpki-client