
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4AB64464C2E11F08D2821CCDAE4EC9C.roa
File: C4AB64464C2E11F08D2821CCDAE4EC9C.roa (raw, json)
Hash identifier: NfVIdG2x4jNqTANOl8fC0cieQyHRWmBtj3PMXSjtTig=
Subject key identifier: 77:E2:EE:3F:24:CF:88:6C:8D:19:F1:F3:12:A6:6B:9B:1F:F6:D8:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4AB64464C2E11F08D2821CCDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 10:27:00 +0000
ROA not before: Wed 18 Jun 2025 10:26:55 +0000
ROA not after: Wed 02 Jul 2025 10:26:55 +0000
asID: 138915
IP address blocks: 156.244.61.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89292 (0x15ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 10:26:55 2025 GMT
Not After : Jul 2 10:26:55 2025 GMT
Subject: CN=68529474-d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:5f:e8:0d:ed:9c:b7:24:12:b5:c6:32:7c:
f3:6d:1e:69:84:2d:7c:12:4f:c1:d8:59:46:45:10:
1b:31:b8:67:18:4d:40:60:4d:bf:2e:0a:f8:8d:24:
2c:e1:c7:ef:f1:9f:cd:29:b0:c3:45:c3:19:fb:07:
78:15:a6:d2:a6:39:bf:95:27:7f:62:08:d1:f5:63:
94:2d:26:8f:f3:e5:72:3a:c7:59:00:df:68:5a:af:
df:ca:da:6e:19:e4:12:15:ea:9d:b8:5c:e7:a5:c9:
77:e8:15:fc:84:cb:1e:7e:54:61:14:97:30:3b:8f:
d5:29:76:d7:0e:91:29:29:24:94:c4:8e:f1:af:36:
21:5f:61:9e:41:32:ba:87:2e:3e:fb:61:50:e3:e9:
7e:30:49:84:a8:1b:4e:c4:a0:ed:6c:4f:76:3c:f4:
dc:fa:a6:b3:ac:3c:78:e3:db:10:f1:3e:6f:68:6c:
35:68:26:34:12:aa:f2:d0:e0:d0:b1:eb:cb:26:32:
84:b2:07:27:41:2e:39:00:46:77:34:be:77:d9:0f:
32:d1:a0:5a:8f:38:e4:e3:3b:b1:cd:b1:53:22:63:
0b:7f:31:1f:f6:19:fb:9a:cf:4a:a4:28:c1:da:19:
2b:d8:a6:54:46:90:a4:d3:0d:34:ea:60:c1:99:24:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:EE:3F:24:CF:88:6C:8D:19:F1:F3:12:A6:6B:9B:1F:F6:D8:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4AB64464C2E11F08D2821CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.61.0-156.244.63.255
Signature Algorithm: sha256WithRSAEncryption
57:7e:e5:25:c4:32:7f:76:9a:10:30:45:bd:f1:e7:3b:58:14:
44:3b:f3:10:8e:79:c2:1c:75:6c:a4:a8:65:5f:ea:d6:57:70:
02:fc:c0:21:72:a0:a3:f7:ff:85:72:f1:a4:47:6a:0f:fc:5c:
63:6e:54:21:f9:47:dd:cc:9d:80:8d:2d:b6:4f:bc:57:9a:4f:
12:a5:6e:40:7e:9e:0b:06:6c:04:aa:6a:a8:9b:b1:79:fc:2d:
ca:ce:b6:44:93:2d:e8:3b:3c:b4:c4:2b:82:3a:18:e7:3c:ed:
07:36:ee:a9:8f:8d:bd:f8:44:00:77:d9:55:d4:84:d0:ba:ae:
0e:01:84:6b:c5:14:e7:3a:aa:0a:73:b2:86:1c:1c:23:d5:6f:
e0:64:0f:79:42:7a:2f:61:30:02:d8:d8:88:6f:00:03:15:9a:
7e:ca:ee:bb:b0:6a:04:2b:d8:bd:9a:57:6e:c4:70:41:14:7d:
56:07:ef:ed:f0:38:21:69:35:43:bf:ba:08:2e:71:58:9b:0b:
1a:c4:c5:55:84:ed:a7:33:23:c7:aa:6a:1b:4a:fa:6c:9f:e9:
f3:bf:e6:14:8a:5a:5d:4a:f7:d1:5d:8a:6c:f6:aa:25:96:e8:
1e:b2:3a:ea:45:6f:ff:ba:6c:f2:5b:6f:9f:13:2e:4b:90:60:
85:15:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:20:40 2025 by rpki-client