Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/202D3D34CEFE11EF84837469762E951A.roa
File: 202D3D34CEFE11EF84837469762E951A.roa (raw, json)
Hash identifier: aUwxqI42VhzzDaTizQ6HPddTedorzz7+3FCeDYW79sg=
Subject key identifier: 44:F9:70:77:8F:9F:03:EB:A4:8C:6C:BA:C5:94:5F:69:2A:12:C0:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/202D3D34CEFE11EF84837469762E951A.roa
Signing time: Fri 10 Jan 2025 02:53:53 +0000
ROA not before: Fri 10 Jan 2025 02:53:49 +0000
ROA not after: Mon 27 Jan 2025 02:53:49 +0000
asID: 137547
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66751 (0x104bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:53:49 2025 GMT
Not After : Jan 27 02:53:49 2025 GMT
Subject: CN=67808bc1-89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:73:d8:a7:69:76:c9:81:5c:71:a0:ab:18:
16:12:e4:13:aa:e1:8b:46:56:a5:41:1f:52:1b:cc:
7c:c7:8b:18:ad:c1:3f:28:fd:35:8b:64:12:0a:c7:
af:96:9e:54:72:bd:48:44:28:e8:c1:e4:34:eb:9b:
65:e1:a0:1d:ec:d4:e0:c1:74:55:95:ab:fb:f0:88:
96:c3:76:3f:23:c0:8f:1e:c8:9e:6d:87:67:d1:18:
13:ec:48:04:95:fa:42:64:a4:2e:90:b7:72:f5:cc:
b0:a6:b1:6e:6b:30:99:10:44:6d:a4:a4:e0:d9:ed:
a7:86:b2:c5:7d:f9:fe:c8:a3:08:9a:ff:c9:2b:bf:
97:2f:8e:df:56:b8:0a:84:86:85:a2:9b:76:cd:29:
4f:63:fc:9b:13:e7:ce:65:6d:93:f4:76:6d:98:f7:
8f:34:ad:26:d8:bd:dd:2d:c8:20:d0:29:95:bf:b9:
f7:b4:ba:cd:e9:b8:51:de:0f:9d:c4:50:20:fd:d0:
d6:97:22:da:cd:71:c4:fa:79:b8:56:0e:21:ed:e7:
ad:0f:9a:95:95:65:28:d7:92:85:a4:90:45:73:cd:
76:e4:0d:93:0c:90:90:93:35:a9:fc:13:ef:2a:a1:
23:a0:30:20:06:03:f4:12:59:e2:d9:c8:ae:82:19:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:70:77:8F:9F:03:EB:A4:8C:6C:BA:C5:94:5F:69:2A:12:C0:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/202D3D34CEFE11EF84837469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5b:29:05:4f:86:65:7d:b0:1c:40:3d:02:3a:62:2c:9d:73:
32:f5:2d:ca:b0:74:72:fd:98:9f:a5:81:4a:95:9f:95:f0:a7:
b5:68:61:ce:d9:36:93:86:b1:42:1f:0a:0a:17:b2:fb:42:e6:
b0:e9:48:c7:d6:3a:3d:48:c1:70:66:5e:1d:d5:5c:fe:05:6e:
62:06:5e:81:70:68:9c:fc:07:c5:b7:64:0c:2e:e3:00:f5:ed:
46:71:4f:e8:fc:9e:9b:f0:e7:11:65:a4:c8:27:33:fe:5e:ab:
19:ac:12:ad:71:be:4a:8d:4e:7c:eb:8f:17:b5:10:ab:83:02:
6c:6f:51:33:d1:2b:7d:5c:9e:c3:fe:9c:6d:48:58:77:8d:42:
12:42:cd:5e:1c:99:ec:61:7b:7c:76:47:6d:d5:04:e8:dd:f2:
c1:6d:75:26:3e:34:38:75:fd:80:55:33:47:04:b7:83:db:b3:
31:09:90:d8:fc:cb:30:2c:c2:83:9a:41:47:69:98:05:ef:c6:
d6:0d:6f:b0:31:17:e6:07:e4:3c:50:6a:72:a0:59:b0:61:5e:
3c:77:2b:48:26:20:61:17:22:d5:36:41:6a:55:65:f2:fd:0b:
83:b3:27:40:cc:64:1d:81:0d:d9:c6:b6:3a:18:68:a3:c9:9a:
af:2b:9e:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQS/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDI1MzQ5WhcNMjUwMTI3MDI1MzQ5WjAYMRYw
FAYDVQQDEw02NzgwOGJjMS04OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsdJz2KdpdsmBXHGgqxgWEuQTquGLRlalQR9SG8x8x4sYrcE/KP01i2QS
Csevlp5Ucr1IRCjoweQ065tl4aAd7NTgwXRVlav78IiWw3Y/I8CPHsiebYdn0RgT
7EgElfpCZKQukLdy9cywprFuazCZEERtpKTg2e2nhrLFffn+yKMImv/JK7+XL47f
VrgKhIaFopt2zSlPY/ybE+fOZW2T9HZtmPePNK0m2L3dLcgg0CmVv7n3tLrN6bhR
3g+dxFAg/dDWlyLazXHE+nm4Vg4h7eetD5qVlWUo15KFpJBFc8125A2TDJCQkzWp
/BPvKqEjoDAgBgP0Elni2ciughl1zQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFET5
cHePnwPrpIxsusWUX2kqEsAsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMDJEM0QzNENFRkUxMUVGODQ4Mzc0Njk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPXSMA0GCSqGSIb3DQEBCwUA
A4IBAQAVWykFT4ZlfbAcQD0COmIsnXMy9S3KsHRy/ZifpYFKlZ+V8Ke1aGHO2TaT
hrFCHwoKF7L7Quaw6UjH1jo9SMFwZl4d1Vz+BW5iBl6BcGic/AfFt2QMLuMA9e1G
cU/o/J6b8OcRZaTIJzP+XqsZrBKtcb5KjU58648XtRCrgwJsb1Ez0St9XJ7D/pxt
SFh3jUISQs1eHJnsYXt8dkdt1QTo3fLBbXUmPjQ4df2AVTNHBLeD27MxCZDY/Msw
LMKDmkFHaZgF78bWDW+wMRfmB+Q8UGpyoFmwYV48dytIJiBhFyLVNkFqVWXy/QuD
sydAzGQdgQ3ZxrY6GGijyZqvK57B
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:34 2025 by rpki-client