Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F790CE5224CC11F0B43229AFDAE4EC9C.roa
File: F790CE5224CC11F0B43229AFDAE4EC9C.roa (raw, json)
Hash identifier: 91BmGvGXI5prgzeKZ/qVSMKBPtTphz+vKUtdA+8GR5k=
Subject key identifier: 26:D8:46:01:7D:D8:56:C8:35:3D:65:5F:E1:D6:A1:EE:E4:62:15:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015021
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F790CE5224CC11F0B43229AFDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:38:40 +0000
ROA not before: Tue 29 Apr 2025 07:38:35 +0000
ROA not after: Fri 09 May 2025 07:38:35 +0000
asID: 203020
IP address blocks: 156.228.12.0/24 maxlen: 24
156.228.25.0/24 maxlen: 24
156.243.247.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.180.0/23 maxlen: 24
156.253.182.0/23 maxlen: 24
156.253.194.0/23 maxlen: 24
156.253.196.0/23 maxlen: 24
156.253.198.0/23 maxlen: 24
156.253.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86049 (0x15021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 07:38:35 2025 GMT
Not After : May 9 07:38:35 2025 GMT
Subject: CN=68108200-7aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:d5:53:f4:a6:44:c0:71:05:4e:70:95:22:
ef:1c:aa:78:5e:7b:fe:69:66:e6:55:1f:01:4d:c5:
8a:ab:99:92:16:aa:71:e6:ff:60:a7:f2:fa:e9:b1:
7b:7a:45:85:f6:ca:42:86:a1:a2:74:10:a0:39:19:
8f:eb:7c:b4:2b:51:6b:0f:f1:27:92:9d:82:57:c1:
d5:91:d9:6f:83:7c:62:ef:12:10:1f:ac:3f:86:e7:
57:98:58:65:73:1d:ec:02:6b:d7:6a:10:e5:3d:d2:
50:7e:13:fb:39:32:2f:52:84:55:ca:c9:5e:1f:c5:
4d:23:30:18:72:d3:90:43:28:b4:01:95:e2:89:53:
3b:b4:ec:9a:32:f2:24:a4:89:93:3e:4c:2e:6a:ef:
e4:d6:ae:df:3b:a9:10:35:21:13:cd:98:ec:7d:cc:
51:cb:f0:37:38:2b:9e:ee:54:df:63:44:00:7b:c0:
07:bf:c2:18:74:fb:16:8f:38:4e:74:8b:76:f3:ab:
84:76:86:bd:b9:56:f9:8a:45:da:6e:68:5f:41:fb:
7b:67:81:43:00:1b:81:98:5f:a0:af:0f:12:95:f9:
a7:96:b0:47:8c:e7:e4:d7:29:5c:f0:65:3b:dd:ea:
f9:b7:94:f0:af:60:4f:df:c2:f9:d3:10:a8:08:ff:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:46:01:7D:D8:56:C8:35:3D:65:5F:E1:D6:A1:EE:E4:62:15:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F790CE5224CC11F0B43229AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.12.0/24
156.228.25.0/24
156.243.247.0/24
156.253.163.0/24
156.253.180.0/22
156.253.194.0-156.253.199.255
156.253.206.0/23
Signature Algorithm: sha256WithRSAEncryption
90:ee:0c:91:e0:f7:ff:1c:4d:fd:2e:fd:03:3e:36:ba:cd:19:
20:bf:85:39:46:3d:74:2c:8d:fc:30:01:c8:67:05:c5:94:8b:
59:ed:fc:0d:4e:9a:67:ff:b0:92:59:6d:ea:29:27:81:2b:fb:
82:50:19:5a:45:b1:d8:8b:f4:1e:6c:32:61:bc:b7:c4:10:f3:
8a:8a:a7:f7:e9:da:69:42:13:ef:a7:63:3a:a9:90:80:f8:df:
c8:28:0f:bd:ab:4b:fc:c0:7e:55:66:57:78:a2:e4:0c:d5:68:
70:61:74:d7:8e:17:0a:f4:42:33:92:77:56:6d:0f:a0:e0:d8:
b4:d0:23:9d:79:24:50:96:2d:22:c4:e4:8c:08:c8:0b:8d:bc:
d4:78:17:ff:56:86:f9:13:b9:46:d1:ab:57:19:e5:b9:86:b6:
a0:5d:8e:b5:91:bd:08:83:5e:e1:fc:83:37:a4:1f:ca:91:5f:
8e:6a:04:cb:32:f5:4e:9a:fc:4a:7b:8d:00:bf:0e:a8:d7:38:
6c:ab:31:9d:d8:2b:2c:40:99:36:47:a2:11:fe:a2:44:6c:fa:
8c:69:c0:7e:8f:fe:4b:50:8f:07:71:e6:9c:e5:29:47:4a:c2:
93:4c:3e:ab:0d:ad:84:1e:2f:5c:ab:5a:b2:5f:f8:3c:98:bc:
87:47:d9:d3
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAVAhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI5MDczODM1WhcNMjUwNTA5MDczODM1WjAYMRYw
FAYDVQQDEw02ODEwODIwMC03YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn8zVU/SmRMBxBU5wlSLvHKp4Xnv+aWbmVR8BTcWKq5mSFqpx5v9gp/L6
6bF7ekWF9spChqGidBCgORmP63y0K1FrD/Enkp2CV8HVkdlvg3xi7xIQH6w/hudX
mFhlcx3sAmvXahDlPdJQfhP7OTIvUoRVysleH8VNIzAYctOQQyi0AZXiiVM7tOya
MvIkpImTPkwuau/k1q7fO6kQNSETzZjsfcxRy/A3OCue7lTfY0QAe8AHv8IYdPsW
jzhOdIt286uEdoa9uVb5ikXabmhfQft7Z4FDABuBmF+grw8SlfmnlrBHjOfk1ylc
8GU73er5t5Twr2BP38L50xCoCP85fQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFCbY
RgF92FbINT1lX+HWoe7kYhXDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNzkwQ0U1MjI0Q0MxMUYwQjQzMjI5QUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAnOQMAwQAnOQZAwQAnPP3AwQA
nP2jAwQCnP20MAwDBAGc/cIDBAOc/cADBAGc/c4wDQYJKoZIhvcNAQELBQADggEB
AJDuDJHg9/8cTf0u/QM+NrrNGSC/hTlGPXQsjfwwAchnBcWUi1nt/A1Ommf/sJJZ
beopJ4Er+4JQGVpFsdiL9B5sMmG8t8QQ84qKp/fp2mlCE++nYzqpkID438goD72r
S/zAflVmV3ii5AzVaHBhdNeOFwr0QjOSd1ZtD6Dg2LTQI515JFCWLSLE5IwIyAuN
vNR4F/9WhvkTuUbRq1cZ5bmGtqBdjrWRvQiDXuH8gzekH8qRX45qBMsy9U6a/Ep7
jQC/DqjXOGyrMZ3YKyxAmTZHohH+okRs+oxpwH6P/ktQjwdx5pzlKUdKwpNMPqsN
rYQeL1yrWrJf+DyYvIdH2dM=
-----END CERTIFICATE-----
Generated at Sun May 11 12:50:23 2025 by rpki-client