Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9488265011F08AC1F7D7DAE4EC9C.roa
File: FA4D9488265011F08AC1F7D7DAE4EC9C.roa (raw, json)
Hash identifier: cVxWG87i/518vSqBw4qX+VJzqvapi1YPMcYmqeR6QMk=
Subject key identifier: 69:E1:3B:DC:3C:33:BD:9C:70:52:61:9D:7A:FB:53:D8:C2:46:03:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015110
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9488265011F08AC1F7D7DAE4EC9C.roa
Signing time: Thu 01 May 2025 05:56:09 +0000
ROA not before: Thu 01 May 2025 05:56:04 +0000
ROA not after: Fri 09 May 2025 05:56:04 +0000
asID: 9009
IP address blocks: 156.246.35.0/24 maxlen: 24
156.246.36.0/24 maxlen: 24
156.246.39.0/24 maxlen: 24
156.246.42.0/24 maxlen: 24
156.246.44.0/24 maxlen: 24
156.246.47.0/24 maxlen: 24
156.246.53.0/24 maxlen: 24
156.246.54.0/24 maxlen: 24
156.246.60.0/24 maxlen: 24
156.246.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86288 (0x15110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 05:56:04 2025 GMT
Not After : May 9 05:56:04 2025 GMT
Subject: CN=68130cf9-e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:c5:7b:d9:b9:21:3d:82:69:01:48:2b:6b:
5a:21:3e:43:7d:1e:66:f8:60:09:23:7d:c4:55:15:
82:8a:93:e0:9a:3d:cf:c9:23:88:33:01:37:0d:fe:
6a:96:0c:fa:5f:35:6f:91:8e:f3:99:42:22:13:06:
e7:bf:5c:1a:11:d7:4c:05:ac:2d:57:f1:2e:4e:d7:
4b:35:2b:42:2b:5e:4f:5f:9e:4f:81:38:b8:a8:8c:
bc:85:61:0d:89:5e:6f:e1:3e:48:b2:2a:17:62:1f:
14:bd:61:67:a3:98:cf:a8:d5:d7:7f:30:da:5a:d9:
42:4e:83:1a:84:5b:f0:7c:cb:1f:9d:17:06:62:d2:
3f:6e:e0:c5:6f:3e:91:80:0f:8c:5c:c3:f5:78:ba:
62:95:47:3a:c9:c0:6c:cb:30:6e:ad:ee:7a:c7:da:
e5:b3:7f:8c:1d:54:c4:5d:2b:ef:11:05:10:d7:e7:
a1:0b:e3:12:f6:8a:bc:72:1f:4b:9e:0c:72:45:4c:
a0:5d:eb:a3:c0:66:fd:fe:a1:04:a5:50:60:85:70:
dd:53:64:95:27:32:72:d9:c7:c1:ea:e4:8d:e0:7b:
e1:58:da:9f:00:dd:59:32:f6:50:ae:08:2f:f9:b2:
5f:f0:8e:bc:9e:69:95:6a:7f:f6:c9:7f:f1:71:d1:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E1:3B:DC:3C:33:BD:9C:70:52:61:9D:7A:FB:53:D8:C2:46:03:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA4D9488265011F08AC1F7D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.35.0-156.246.36.255
156.246.39.0/24
156.246.42.0/24
156.246.44.0/24
156.246.47.0/24
156.246.53.0-156.246.54.255
156.246.60.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:3b:93:cd:f2:fd:32:9f:59:ad:ec:f2:4f:07:b1:62:fe:e2:
cb:97:9a:a3:60:34:d3:83:d6:2f:e6:9e:04:46:67:c0:65:d1:
c2:e6:93:78:81:c8:df:d6:b2:38:35:10:07:ef:fa:c0:9e:df:
66:03:30:1d:fd:46:a2:66:97:05:26:c8:1f:0d:c6:1f:55:34:
6c:8e:d6:20:b2:10:86:e1:9c:3b:a0:ea:2c:c7:d6:21:cb:42:
d1:ab:fe:dc:52:b4:9b:8c:61:45:f1:2a:0e:fe:96:6c:fa:5c:
7d:9c:de:6a:30:f9:8b:d2:d1:e7:1d:87:ca:71:80:05:25:65:
93:7a:60:06:5f:96:0f:c0:b8:9c:c9:41:0b:1d:28:07:06:ad:
83:41:6e:60:21:1c:fc:41:8b:c7:bb:14:63:35:f1:1b:8a:a9:
d5:37:6c:77:0a:8a:5c:e7:58:f1:9b:31:71:7b:3f:e6:7e:57:
1b:4b:e9:6d:39:3f:cb:ff:fd:2e:8d:e1:39:e7:06:17:01:d3:
bd:b0:37:68:82:c5:e0:a3:91:a0:66:23:63:84:a1:a4:04:92:
50:16:26:05:49:08:28:7a:a7:3a:77:f4:67:02:66:8d:bd:69:
25:d3:10:b0:fa:64:ae:a6:0e:27:e7:82:14:98:13:cb:29:23:
23:3d:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:43:44 2025 by rpki-client