Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00697784CAC011EF8D995C5A762E951A.roa
File: 00697784CAC011EF8D995C5A762E951A.roa (raw, json)
Hash identifier: Ob+AKvGF6VBK5Tfbm+rj2l3NxTR2SlW7PT3VeLqfE2Q=
Subject key identifier: C4:C4:3A:E7:0C:79:C0:44:E0:01:7F:25:F6:CE:54:52:D7:AF:61:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F716
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00697784CAC011EF8D995C5A762E951A.roa
Signing time: Sat 04 Jan 2025 17:19:06 +0000
ROA not before: Sun 05 Jan 2025 17:19:02 +0000
ROA not after: Thu 16 Jan 2025 17:19:02 +0000
asID: 5065
IP address blocks: 156.229.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63254 (0xf716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:19:02 2025 GMT
Not After : Jan 16 17:19:02 2025 GMT
Subject: CN=67796d8a-f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:1b:05:e6:a9:25:2c:27:87:61:ef:3a:77:
0d:65:a8:6c:46:62:79:05:0a:b5:1f:2d:12:79:e0:
0f:f5:56:bb:35:82:bb:89:de:8d:d8:2a:43:87:f0:
85:59:c5:44:f1:c1:82:b6:e9:3a:84:fb:fb:54:6b:
c0:30:7a:63:30:51:29:0b:8f:a7:2b:2b:b2:2f:0a:
b0:ae:a1:a9:16:80:c8:f7:08:96:d8:66:22:00:25:
ba:37:b9:68:38:a5:ec:91:48:a0:10:8e:dc:fc:da:
b4:25:7e:d5:0c:30:86:b2:b2:fe:2d:23:5f:88:01:
3d:45:16:fa:e3:12:ce:a5:16:22:0e:00:bf:82:f3:
0d:65:82:15:32:32:68:7b:33:6e:c6:b1:28:9a:84:
22:b1:2a:d0:e1:f4:49:8e:c9:cc:eb:26:2e:aa:f6:
3d:ab:ce:79:8a:8b:dc:d2:01:ee:98:29:c8:6a:26:
40:02:ee:c0:f5:51:d9:7e:6f:bf:e2:17:08:7a:dc:
d1:5c:14:e0:0d:b9:bc:99:7d:42:69:85:ab:75:73:
a4:ed:7c:72:15:6c:c8:79:6e:58:3e:e4:cd:75:c0:
22:92:18:be:93:14:67:bb:64:9a:be:ab:33:21:bd:
6b:87:74:56:1c:b4:50:90:80:56:93:75:41:b4:5c:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:3A:E7:0C:79:C0:44:E0:01:7F:25:F6:CE:54:52:D7:AF:61:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00697784CAC011EF8D995C5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
87:24:38:a0:93:a1:03:f4:c9:f8:97:a2:c1:31:e9:fd:e3:72:
d7:d2:a7:1f:c5:86:4d:29:c5:3a:2b:4b:1b:fe:76:4b:79:83:
92:c6:5e:76:c8:1f:13:e8:c0:6f:88:bc:e2:23:10:2f:9f:cf:
7d:f8:e0:92:00:2a:81:1e:62:b9:67:32:24:a0:ce:ca:80:44:
c8:ab:75:5d:50:35:cd:b8:22:09:e3:fe:16:8d:90:2c:62:0a:
f5:5f:f3:93:bd:89:4d:27:2b:6c:eb:70:c7:66:06:25:28:98:
b3:7f:ef:8c:a6:b8:da:67:25:cb:b4:e9:1e:0c:1a:96:ca:e3:
aa:0a:1a:09:5a:09:ab:95:f7:35:12:32:aa:6b:92:79:45:83:
10:82:52:50:94:cb:b2:86:c5:85:e4:ce:3f:e9:6f:8d:25:8a:
54:d3:a3:1c:c8:19:e5:fe:c6:a2:d0:e7:d2:2f:b3:7a:d9:7b:
76:60:51:e5:b0:2e:66:34:6e:0d:6f:95:60:f3:29:58:af:03:
82:69:fc:f3:16:15:5b:b9:f5:b2:b4:33:ae:7c:c7:fb:47:6b:
ea:dc:9e:b3:45:2f:f8:3f:e2:17:52:c0:e9:d0:87:72:1e:a4:
05:a0:dc:fa:67:dd:17:1c:6c:f5:1b:58:67:15:f3:1b:3d:93:
0c:32:b5:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPcWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTcxOTAyWhcNMjUwMTE2MTcxOTAyWjAYMRYw
FAYDVQQDEw02Nzc5NmQ4YS1mNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA75obBeapJSwnh2HvOncNZahsRmJ5BQq1Hy0SeeAP9Va7NYK7id6N2CpD
h/CFWcVE8cGCtuk6hPv7VGvAMHpjMFEpC4+nKyuyLwqwrqGpFoDI9wiW2GYiACW6
N7loOKXskUigEI7c/Nq0JX7VDDCGsrL+LSNfiAE9RRb64xLOpRYiDgC/gvMNZYIV
MjJoezNuxrEomoQisSrQ4fRJjsnM6yYuqvY9q855iovc0gHumCnIaiZAAu7A9VHZ
fm+/4hcIetzRXBTgDbm8mX1CaYWrdXOk7XxyFWzIeW5YPuTNdcAikhi+kxRnu2Sa
vqszIb1rh3RWHLRQkIBWk3VBtFwn9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMTE
OucMecBE4AF/JfbOVFLXr2GeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDY5Nzc4NENBQzAxMUVGOEQ5OTVDNUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU5MA0GCSqGSIb3DQEBCwUA
A4IBAQCHJDigk6ED9Mn4l6LBMen943LX0qcfxYZNKcU6K0sb/nZLeYOSxl52yB8T
6MBviLziIxAvn899+OCSACqBHmK5ZzIkoM7KgETIq3VdUDXNuCIJ4/4WjZAsYgr1
X/OTvYlNJyts63DHZgYlKJizf++MprjaZyXLtOkeDBqWyuOqChoJWgmrlfc1EjKq
a5J5RYMQglJQlMuyhsWF5M4/6W+NJYpU06McyBnl/sai0OfSL7N62Xt2YFHlsC5m
NG4Nb5Vg8ylYrwOCafzzFhVbufWytDOufMf7R2vq3J6zRS/4P+IXUsDp0IdyHqQF
oNz6Z90XHGz1G1hnFfMbPZMMMrWk
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:50 2025 by rpki-client