Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C38E6F86259111F0B3573BD6DAE4EC9C.roa
File: C38E6F86259111F0B3573BD6DAE4EC9C.roa (raw, json)
Hash identifier: 6iL7/i6LwlmgiwGU9pMFW7yjle+/fg1YWiX+JUcIm3g=
Subject key identifier: 19:4E:70:13:8F:29:C1:A8:40:C4:A0:B1:C3:EF:3B:26:42:D9:8E:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015065
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C38E6F86259111F0B3573BD6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:07:23 +0000
ROA not before: Wed 30 Apr 2025 07:07:18 +0000
ROA not after: Fri 09 May 2025 07:07:18 +0000
asID: 9009
IP address blocks: 156.246.35.0/24 maxlen: 24
156.246.36.0/24 maxlen: 24
156.246.39.0/24 maxlen: 24
156.246.42.0/24 maxlen: 24
156.246.44.0/24 maxlen: 24
156.246.47.0/24 maxlen: 24
156.246.53.0/24 maxlen: 24
156.246.54.0/24 maxlen: 24
156.246.60.0/24 maxlen: 24
156.246.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86117 (0x15065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 07:07:18 2025 GMT
Not After : May 9 07:07:18 2025 GMT
Subject: CN=6811cc2b-67be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:59:fb:5c:ef:0a:3f:41:ae:c0:69:df:37:
9a:58:5f:6e:2d:09:57:15:db:15:e9:b3:84:45:95:
0a:4c:89:06:1a:a6:f1:8d:89:ac:28:52:bd:95:57:
ed:61:64:b1:a2:a6:67:9c:6d:5b:3a:1f:69:a7:a2:
aa:63:76:3d:2d:ca:5b:f7:0d:07:47:90:48:99:88:
6b:79:2a:82:3a:45:ad:bd:94:c3:e1:72:29:87:e2:
fe:0f:34:cf:ea:7b:06:bf:24:f0:29:1c:3f:73:04:
50:57:f7:c0:00:de:71:89:6f:70:73:3c:ce:a0:fb:
87:bb:80:10:3c:29:97:db:a3:c0:22:12:e7:fb:f2:
38:73:ff:be:30:eb:40:6a:df:1f:49:57:0e:c3:90:
5e:e4:d9:9f:18:6c:13:6e:2a:9c:66:8d:2a:6c:55:
98:e8:67:4b:35:96:86:74:f1:32:81:52:fe:8d:6f:
3f:8c:54:a2:bf:00:1f:b5:36:80:28:16:2c:2e:90:
b9:28:3d:b8:27:db:e0:ee:15:79:a6:90:47:6f:ca:
8b:2c:2e:f4:c4:08:e9:e6:35:cc:56:05:fa:fc:72:
e3:84:81:12:04:b5:9e:89:18:a6:18:dc:23:73:d0:
da:7e:95:4a:83:6a:45:79:96:a9:14:4a:c7:84:66:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:70:13:8F:29:C1:A8:40:C4:A0:B1:C3:EF:3B:26:42:D9:8E:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C38E6F86259111F0B3573BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.35.0-156.246.36.255
156.246.39.0/24
156.246.42.0/24
156.246.44.0/24
156.246.47.0/24
156.246.53.0-156.246.54.255
156.246.60.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d4:e2:26:f8:c7:84:d5:88:e9:58:1e:53:3f:c0:e3:f9:51:
ff:8f:33:d5:a6:27:e5:7c:65:27:48:3a:4b:4c:c5:1a:16:11:
f5:b7:af:90:47:ab:e1:1c:b2:b7:10:95:f4:f0:13:a0:3f:c9:
07:2d:a4:c4:30:e7:01:6f:0b:9a:b4:26:59:a7:06:1d:48:a5:
8c:79:c5:78:3a:50:0c:53:f4:1b:e6:c9:93:29:62:be:ae:3a:
38:db:2f:bd:87:a8:e9:6a:a6:2b:29:03:72:81:fd:70:4b:1a:
e3:ac:1f:89:2a:9d:24:86:65:7e:58:29:79:4b:92:24:18:8f:
26:fd:98:3b:67:75:65:90:be:63:7d:e4:d2:8f:dd:fc:20:34:
6c:2d:c4:a1:95:7c:83:0d:dc:ac:ad:fb:e6:47:ae:fc:72:c4:
c8:95:f7:41:47:1f:80:d2:98:dc:d0:28:0e:28:d3:0f:a0:51:
96:89:cc:04:92:7f:66:a5:c6:97:1f:90:e8:0f:f5:df:ae:b7:
a3:80:6a:df:19:79:e6:c9:0a:ad:39:77:f6:90:2e:72:14:f4:
4d:8e:e7:40:c1:47:2a:4c:11:63:2f:7c:02:86:6d:ae:8a:43:
c4:3f:af:48:68:2e:3e:ee:83:ca:54:a2:b1:1b:2b:ee:61:14:
5c:33:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:36 2025 by rpki-client