Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F19525C213C211F09DE465A5762E951A.roa
File: F19525C213C211F09DE465A5762E951A.roa (raw, json)
Hash identifier: wdFmtM+pJvauciGDsF+fscRY46L5T16r498H/7nDSn4=
Subject key identifier: 78:0F:A8:14:3C:10:97:A4:F4:52:61:5B:A6:FB:69:09:6E:01:55:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F19525C213C211F09DE465A5762E951A.roa
Signing time: Mon 07 Apr 2025 15:14:05 +0000
ROA not before: Mon 07 Apr 2025 15:14:00 +0000
ROA not after: Sun 11 May 2025 15:14:00 +0000
asID: 60223
IP address blocks: 156.253.252.0/24 maxlen: 24
156.253.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84610 (0x14a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 15:14:00 2025 GMT
Not After : May 11 15:14:00 2025 GMT
Subject: CN=67f3ebbd-17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:a0:2a:13:bc:aa:c8:bf:7c:90:c4:08:07:
ae:43:86:4b:09:fe:7d:3a:7a:96:e7:5d:37:f9:cd:
4c:32:e8:28:90:2c:31:1a:bf:df:59:1d:00:a2:ed:
0a:6e:d9:bf:67:6f:bf:75:a5:a6:57:06:dd:f5:e6:
ce:7e:75:dc:b9:2c:69:b4:3c:2e:3b:08:fe:27:04:
3d:a5:3f:cb:47:cc:33:c1:9c:c5:1f:0f:47:e1:ab:
e0:51:38:6e:f4:88:af:5c:8c:44:1e:eb:1d:81:c8:
31:8b:2b:d4:63:b8:d7:36:75:a7:41:ec:e1:49:77:
b6:13:b1:d8:eb:7b:11:ee:87:1c:5e:72:1d:19:a6:
43:8a:42:6c:02:0c:cb:40:61:08:7e:48:c9:f0:d3:
94:de:ce:a2:4b:8f:6d:74:8e:c6:e5:d9:32:69:0c:
08:eb:30:6b:0c:6f:47:61:dd:9b:ef:21:da:f9:ae:
f7:bb:41:ee:9f:a9:39:12:7b:76:b0:1b:ec:ec:6c:
88:04:1e:5f:97:9a:0b:0b:4f:17:5d:29:68:f7:86:
b5:0d:e2:10:75:56:ef:73:fe:d5:2a:45:09:dc:2e:
64:96:55:71:a1:de:e4:68:55:79:55:dc:de:47:3b:
62:dd:0b:71:e3:36:d0:e4:b8:a4:83:43:7d:66:c1:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:A8:14:3C:10:97:A4:F4:52:61:5B:A6:FB:69:09:6E:01:55:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F19525C213C211F09DE465A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.252.0/23
Signature Algorithm: sha256WithRSAEncryption
14:48:5f:78:f9:a2:d1:29:62:03:ab:83:09:fd:cc:76:16:a3:
2c:44:55:96:73:01:58:4d:d5:77:cb:81:f6:85:a6:57:9d:cc:
15:a3:46:a4:96:a1:31:c1:3d:42:ed:89:a4:8e:e7:90:fd:64:
dc:96:45:d7:e0:31:b9:cf:86:90:b4:95:6f:7e:ec:7c:82:b8:
30:15:eb:72:0c:3f:2d:b0:d2:46:06:89:7c:f2:c3:dd:48:c1:
0d:0e:78:92:b0:f5:41:d4:d8:58:1f:26:b6:6d:3e:ea:52:7b:
4e:66:90:bd:e0:0e:1d:04:2f:3a:6d:f9:2c:57:8a:ba:3f:91:
77:b0:51:e1:24:91:a0:a2:11:e0:55:0e:3a:0f:ec:e4:93:f2:
fb:56:9e:17:e4:3f:21:b1:fc:5d:21:56:e4:df:b1:6f:7a:96:
f1:53:3b:c8:4b:8f:b4:10:ca:27:8e:ba:8b:5f:4e:2f:eb:77:
45:1d:d5:0b:08:90:ac:b5:76:a7:bb:aa:d8:ec:f6:ba:99:7f:
55:ba:c4:67:7f:b4:42:42:cc:3a:79:7a:81:7f:91:a0:85:f9:
de:d1:b2:ce:ca:74:4f:4d:af:59:55:0b:93:82:41:41:0d:eb:
99:ae:0d:af:6e:fa:a4:8b:9e:8d:92:5e:13:46:ba:ba:6c:00:
3c:b9:50:d7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTUxNDAwWhcNMjUwNTExMTUxNDAwWjAYMRYw
FAYDVQQDEw02N2YzZWJiZC0xN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyHSgKhO8qsi/fJDECAeuQ4ZLCf59OnqW5103+c1MMugokCwxGr/fWR0A
ou0Kbtm/Z2+/daWmVwbd9ebOfnXcuSxptDwuOwj+JwQ9pT/LR8wzwZzFHw9H4avg
UThu9IivXIxEHusdgcgxiyvUY7jXNnWnQezhSXe2E7HY63sR7occXnIdGaZDikJs
AgzLQGEIfkjJ8NOU3s6iS49tdI7G5dkyaQwI6zBrDG9HYd2b7yHa+a73u0Hun6k5
Ent2sBvs7GyIBB5fl5oLC08XXSlo94a1DeIQdVbvc/7VKkUJ3C5kllVxod7kaFV5
VdzeRzti3Qtx4zbQ5Likg0N9ZsG4IQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHgP
qBQ8EJek9FJhW6b7aQluAVXwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMTk1MjVDMjEzQzIxMUYwOURFNDY1QTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP38MA0GCSqGSIb3DQEBCwUA
A4IBAQAUSF94+aLRKWIDq4MJ/cx2FqMsRFWWcwFYTdV3y4H2haZXncwVo0aklqEx
wT1C7YmkjueQ/WTclkXX4DG5z4aQtJVvfux8grgwFetyDD8tsNJGBol88sPdSMEN
DniSsPVB1NhYHya2bT7qUntOZpC94A4dBC86bfksV4q6P5F3sFHhJJGgohHgVQ46
D+zkk/L7Vp4X5D8hsfxdIVbk37FvepbxUzvIS4+0EMonjrqLX04v63dFHdULCJCs
tXanu6rY7Pa6mX9VusRnf7RCQsw6eXqBf5Gghfne0bLOynRPTa9ZVQuTgkFBDeuZ
rg2vbvqki56Nkl4TRrq6bAA8uVDX
-----END CERTIFICATE-----
Generated at Wed May 14 17:25:06 2025 by rpki-client