Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F8C630CF0011EFB27E8178762E951A.roa
File: 13F8C630CF0011EFB27E8178762E951A.roa (raw, json)
Hash identifier: E6/m1l7PsAR9WGOGlCzCgMSXyBE9AhKSffsKfQ0uLSA=
Subject key identifier: 22:94:53:1D:5A:FB:5B:D9:E7:D2:14:49:0B:04:79:6C:51:B3:AA:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F8C630CF0011EFB27E8178762E951A.roa
Signing time: Fri 10 Jan 2025 03:07:51 +0000
ROA not before: Fri 10 Jan 2025 03:07:47 +0000
ROA not after: Mon 27 Jan 2025 03:07:47 +0000
asID: 62468
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66765 (0x104cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 03:07:47 2025 GMT
Not After : Jan 27 03:07:47 2025 GMT
Subject: CN=67808f07-fb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:34:61:ef:d7:c6:68:60:28:4b:3f:e7:7c:
35:cc:24:3f:7c:a9:1a:43:0f:d2:ca:2c:56:60:11:
6c:97:fc:32:b9:80:b1:44:4c:9d:c0:e2:9b:3b:be:
ed:16:98:20:e4:f3:be:47:56:0e:7c:cb:5b:30:ef:
50:53:99:3c:a9:8c:9d:d4:b5:b1:20:58:87:0d:de:
c2:1f:23:af:d8:a1:ed:62:33:e1:01:f0:bd:b6:99:
09:d5:41:e4:1f:1e:5e:f5:76:0f:4d:1d:a3:d8:12:
41:4c:3a:62:35:21:0d:ab:a1:6c:0d:19:75:b7:41:
2e:e5:4f:6f:7f:7e:0e:44:7b:76:e8:a6:d6:05:ac:
2a:11:93:d9:26:62:b0:9a:ee:80:0c:8a:26:42:a8:
b8:91:b2:be:ee:10:fa:d0:33:a3:df:2e:8e:77:dc:
d9:4c:af:1d:5d:53:3e:5d:df:bb:0d:85:1c:36:f5:
54:6d:84:f0:bf:6b:7b:6d:60:e1:85:ae:96:63:88:
05:ea:64:80:c2:86:6b:c9:34:59:51:ea:8d:ae:98:
5b:1e:ee:12:ce:80:43:bf:71:84:c8:a1:6b:5c:00:
76:de:b5:a0:de:a7:20:1b:e3:32:e6:a0:3c:4c:03:
c4:78:e5:90:3e:c1:60:8c:84:8e:9a:d9:71:67:9b:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:53:1D:5A:FB:5B:D9:E7:D2:14:49:0B:04:79:6C:51:B3:AA:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13F8C630CF0011EFB27E8178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:5f:3d:fa:83:75:f1:a8:97:11:b3:0f:3e:3b:f4:7c:a4:70:
bc:be:9a:57:71:fc:3f:c3:65:65:b1:4e:cc:8f:e9:13:a3:6b:
91:b2:5f:f7:10:77:b7:43:15:9b:65:2b:f5:a6:54:db:f7:f5:
e0:a7:8d:36:ef:53:f2:c0:78:0d:c7:5e:d5:8b:de:a6:36:ce:
8a:10:7e:ec:0b:3b:ae:d4:7a:ef:71:56:30:09:5f:c4:3d:bd:
a3:51:4f:a7:13:69:a6:d1:76:fa:5d:88:94:5a:fe:e6:52:d6:
ad:74:99:91:50:ce:52:2c:66:e3:88:64:db:b8:f4:b0:66:da:
ff:4e:c5:56:13:03:f6:99:4d:71:4c:e5:37:70:f2:ed:de:26:
35:68:17:b4:54:57:47:e3:ac:dc:1f:b4:d6:e8:d1:78:70:28:
9a:45:10:24:0c:1a:b8:b3:f1:58:ab:f4:f0:99:60:72:ac:a5:
2d:7f:28:b9:fc:93:f9:5e:15:9e:82:52:a7:87:d5:dc:32:a5:
19:ad:c6:bd:01:86:da:92:12:b1:d2:a3:0b:5a:72:23:14:3f:
2c:c5:e6:ce:22:75:49:f5:93:d6:f3:1b:d3:45:93:99:f5:72:
e8:4a:c6:dc:8a:8d:bc:51:03:85:66:7d:38:e1:5c:30:ac:a9:
15:14:77:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQTNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDMwNzQ3WhcNMjUwMTI3MDMwNzQ3WjAYMRYw
FAYDVQQDEw02NzgwOGYwNy1mYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Z40Ye/XxmhgKEs/53w1zCQ/fKkaQw/SyixWYBFsl/wyuYCxREydwOKb
O77tFpgg5PO+R1YOfMtbMO9QU5k8qYyd1LWxIFiHDd7CHyOv2KHtYjPhAfC9tpkJ
1UHkHx5e9XYPTR2j2BJBTDpiNSENq6FsDRl1t0Eu5U9vf34ORHt26KbWBawqEZPZ
JmKwmu6ADIomQqi4kbK+7hD60DOj3y6Od9zZTK8dXVM+Xd+7DYUcNvVUbYTwv2t7
bWDhha6WY4gF6mSAwoZryTRZUeqNrphbHu4SzoBDv3GEyKFrXAB23rWg3qcgG+My
5qA8TAPEeOWQPsFgjISOmtlxZ5tXqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCKU
Ux1a+1vZ59IUSQsEeWxRs6r/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xM0Y4QzYzMENGMDAxMUVGQjI3RTgxNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQBuXz36g3XxqJcRsw8+O/R8pHC8vppXcfw/w2VlsU7Mj+kTo2uRsl/3EHe3
QxWbZSv1plTb9/Xgp40271PywHgNx17Vi96mNs6KEH7sCzuu1HrvcVYwCV/EPb2j
UU+nE2mm0Xb6XYiUWv7mUtatdJmRUM5SLGbjiGTbuPSwZtr/TsVWEwP2mU1xTOU3
cPLt3iY1aBe0VFdH46zcH7TW6NF4cCiaRRAkDBq4s/FYq/TwmWByrKUtfyi5/JP5
XhWeglKnh9XcMqUZrca9AYbakhKx0qMLWnIjFD8sxebOInVJ9ZPW8xvTRZOZ9XLo
Ssbcio28UQOFZn044VwwrKkVFHfc
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:09 2025 by rpki-client