Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED7AEF8C05B11EF94E5814C762E951A.roa
File: 1ED7AEF8C05B11EF94E5814C762E951A.roa (raw, json)
Hash identifier: 8L0TdC69/fsr4mqIRbJma2b4KuLwPA+FQZhVvlEURvk=
Subject key identifier: 2E:B1:C7:E3:41:53:D0:9C:69:E8:47:27:14:F0:5B:12:5A:03:D3:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED7AEF8C05B11EF94E5814C762E951A.roa
Signing time: Sun 22 Dec 2024 11:51:46 +0000
ROA not before: Sun 22 Dec 2024 11:51:43 +0000
ROA not after: Wed 29 Jan 2025 11:51:43 +0000
asID: 61112
IP address blocks: 156.229.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59371 (0xe7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 22 11:51:43 2024 GMT
Not After : Jan 29 11:51:43 2025 GMT
Subject: CN=6767fd52-f262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:5f:2b:6c:e0:ef:94:1d:d4:cf:17:e3:0d:
0b:38:fd:33:05:de:c4:7b:96:4b:d0:d8:66:84:e2:
48:73:0c:a8:35:b0:a9:af:5c:d6:2b:2d:24:b5:06:
2c:d2:82:5f:01:72:94:a3:e8:bb:b0:e3:a0:e3:f6:
0e:2f:d1:78:bd:4f:98:b9:4b:43:d2:53:c9:de:84:
fa:36:55:f8:62:82:9c:ec:fb:51:31:d3:df:c2:e6:
05:01:d6:c8:75:e1:09:4e:4f:06:f8:20:84:f0:72:
01:79:13:61:c3:99:cf:9f:83:2f:3c:b2:c8:88:91:
df:db:61:f6:39:bf:74:1e:06:8e:5e:10:58:84:94:
3a:7c:53:db:cc:92:84:bd:9b:64:23:b2:d2:54:7f:
bc:70:65:bc:c0:5b:47:f9:16:83:d8:69:52:8f:99:
8b:d2:cd:e2:92:b8:b7:43:c9:1a:26:ea:6b:05:d4:
4e:a6:af:6a:2f:90:92:e4:a3:a1:9e:09:ba:0d:0c:
cc:75:67:27:51:53:33:75:b1:ac:aa:cc:44:1e:8b:
a4:8d:66:19:bd:e3:08:c2:0e:ea:3a:80:dd:1e:cc:
f1:87:6f:9c:d7:b9:24:9d:21:89:8e:d5:1f:df:1d:
2e:8c:5f:7f:7b:23:89:83:ea:28:96:fc:74:47:a9:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:C7:E3:41:53:D0:9C:69:E8:47:27:14:F0:5B:12:5A:03:D3:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED7AEF8C05B11EF94E5814C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/22
Signature Algorithm: sha256WithRSAEncryption
52:be:52:71:ce:5c:8e:4d:c2:27:b1:d2:d7:ed:5a:87:60:54:
17:d5:b8:08:14:35:d6:51:c3:ea:88:30:a2:55:76:2d:fe:07:
38:c2:8e:61:7c:2b:56:74:3a:04:f5:94:c5:bf:88:57:c3:d5:
88:7c:d1:9f:da:47:45:d5:95:5d:14:2f:46:e1:c1:60:8b:75:
60:cf:43:d2:b9:22:16:2f:08:1c:b9:0a:f6:d7:e6:24:59:83:
dd:06:24:54:23:04:19:46:a3:72:33:f4:9d:30:9c:f8:de:b4:
b9:5c:1a:3e:0a:f0:7d:d6:ff:8e:f7:7d:fc:0b:39:3f:73:0a:
99:7f:99:e0:48:84:31:d3:72:11:a3:b5:3e:94:c4:ac:aa:27:
16:f9:94:31:ed:49:bc:10:f8:b0:53:6d:4f:84:34:99:29:8d:
f2:62:50:41:f2:e3:9f:f1:96:bf:07:85:6d:d5:47:27:ee:53:
67:96:db:b0:f9:5e:0a:2c:df:46:a4:dd:36:f2:4a:83:36:19:
59:41:e4:d3:72:7c:5f:2f:a4:61:80:21:6f:1b:8b:93:6e:c5:
4d:e4:6b:76:db:65:5c:cd:5b:62:1e:04:5b:cf:36:d8:0a:64:
d5:8c:1c:20:ba:59:58:cf:c1:56:d2:3e:56:4b:49:64:ad:06:
66:c9:44:5f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOfrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIyMTE1MTQzWhcNMjUwMTI5MTE1MTQzWjAYMRYw
FAYDVQQDEw02NzY3ZmQ1Mi1mMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5ClfK2zg75Qd1M8X4w0LOP0zBd7Ee5ZL0NhmhOJIcwyoNbCpr1zWKy0k
tQYs0oJfAXKUo+i7sOOg4/YOL9F4vU+YuUtD0lPJ3oT6NlX4YoKc7PtRMdPfwuYF
AdbIdeEJTk8G+CCE8HIBeRNhw5nPn4MvPLLIiJHf22H2Ob90HgaOXhBYhJQ6fFPb
zJKEvZtkI7LSVH+8cGW8wFtH+RaD2GlSj5mL0s3ikri3Q8kaJuprBdROpq9qL5CS
5KOhngm6DQzMdWcnUVMzdbGsqsxEHoukjWYZveMIwg7qOoDdHszxh2+c17kknSGJ
jtUf3x0ujF9/eyOJg+oolvx0R6n5YQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC6x
x+NBU9CcaehHJxTwWxJaA9OsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRUQ3QUVGOEMwNUIxMUVGOTRFNTgxNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOWgMA0GCSqGSIb3DQEBCwUA
A4IBAQBSvlJxzlyOTcInsdLX7VqHYFQX1bgIFDXWUcPqiDCiVXYt/gc4wo5hfCtW
dDoE9ZTFv4hXw9WIfNGf2kdF1ZVdFC9G4cFgi3Vgz0PSuSIWLwgcuQr21+YkWYPd
BiRUIwQZRqNyM/SdMJz43rS5XBo+CvB91v+O9338Czk/cwqZf5ngSIQx03IRo7U+
lMSsqicW+ZQx7Um8EPiwU21PhDSZKY3yYlBB8uOf8Za/B4Vt1Ucn7lNnltuw+V4K
LN9GpN028kqDNhlZQeTTcnxfL6RhgCFvG4uTbsVN5Gt222VczVtiHgRbzzbYCmTV
jBwgullYz8FW0j5WS0lkrQZmyURf
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:31 2025 by rpki-client