Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AE2F22CC2211EFA371B8A4762E951A.roa
File: 25AE2F22CC2211EFA371B8A4762E951A.roa (raw, json)
Hash identifier: Am0RLRXb+o0LPiz8+nyTChEsS9cBKGgHhIwGEC0rquU=
Subject key identifier: BB:71:22:FA:3E:CA:84:C6:BF:A0:B6:3A:5E:E6:9B:CD:39:36:2F:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AE2F22CC2211EFA371B8A4762E951A.roa
Signing time: Mon 06 Jan 2025 11:34:11 +0000
ROA not before: Mon 06 Jan 2025 11:34:06 +0000
ROA not after: Wed 15 Jan 2025 11:34:06 +0000
asID: 40065
IP address blocks: 156.243.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63667 (0xf8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:34:06 2025 GMT
Not After : Jan 15 11:34:06 2025 GMT
Subject: CN=677bbfb3-6574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:68:69:3f:6c:ab:bd:00:87:d2:f7:50:1e:
79:41:aa:99:52:a8:a1:3c:8e:3d:44:72:42:ac:dd:
37:b6:82:35:2f:97:79:78:0f:5d:c6:26:f7:7b:da:
23:45:d1:ff:3a:60:90:f9:c6:51:bd:4f:9f:f4:e8:
96:7d:ec:bc:9f:af:50:2e:a4:1d:3f:a1:12:d6:64:
89:66:dd:dc:fe:64:cd:68:8d:38:f2:fd:0c:e8:7d:
6d:b1:40:24:d0:8e:b5:d3:ee:c2:58:f6:fe:87:20:
c9:85:8f:5a:9e:fd:22:a7:81:e1:4c:01:04:ad:fb:
2d:02:33:55:38:35:96:85:06:31:51:b7:87:d1:9e:
bb:8c:d6:b1:94:c4:cc:59:c4:f9:b1:ff:d8:36:9f:
a0:de:96:dd:4a:9f:10:97:1a:b5:68:54:74:a9:76:
82:f3:08:e9:1d:36:a2:99:87:db:a1:0a:b1:ea:e1:
5a:29:8a:9b:76:63:02:c5:bd:93:b0:19:17:45:b1:
03:9e:1a:d2:a9:64:f6:2f:24:8f:8e:ff:1a:c9:cf:
0a:a6:76:82:33:a9:11:b5:1c:88:41:bf:07:2f:7f:
3f:9a:65:30:3b:4b:f7:fe:d0:6f:09:61:76:28:64:
9e:be:85:3f:46:a6:8f:0a:9c:ff:d4:ff:0e:82:35:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:22:FA:3E:CA:84:C6:BF:A0:B6:3A:5E:E6:9B:CD:39:36:2F:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25AE2F22CC2211EFA371B8A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:86:28:00:48:39:8a:25:45:57:d6:f2:62:5b:09:92:ce:2c:
12:a2:2c:02:de:20:89:27:e9:65:58:cf:d9:85:09:e1:f1:ad:
eb:d8:18:cc:8f:d2:e9:51:7f:d9:d1:5c:b8:52:42:8c:5d:ef:
db:5c:05:7b:5a:39:c9:99:a5:eb:f5:b6:0d:aa:e5:28:bb:d2:
2c:fe:8f:8c:3a:2a:4c:c9:87:b0:29:26:66:14:2d:fe:9a:76:
05:56:ab:44:ef:2a:ea:f2:64:7c:59:2a:89:7b:4b:ee:97:d9:
20:8c:cc:7a:b0:38:20:f4:83:a9:8b:56:43:94:7e:e9:69:14:
31:aa:ac:ad:d6:ea:46:27:42:24:b0:1f:b1:41:b2:e9:52:61:
a4:7e:69:7a:44:7a:bb:6a:16:78:47:a1:3f:3e:6e:32:a3:c1:
be:26:82:b6:5f:03:e0:79:7f:80:c2:15:6a:bc:21:1f:c9:06:
c9:4d:2c:3a:2b:0d:30:59:dd:3b:6b:f6:03:21:6f:01:05:91:
ff:26:5b:30:38:34:08:b7:b4:28:4d:1b:1c:6c:20:25:eb:1b:
05:e7:74:36:37:00:39:87:c5:60:2c:e7:9f:83:68:8b:8a:61:
1c:61:07:9e:ee:64:ba:dd:24:97:28:23:aa:d8:2b:06:52:14:
c9:fc:15:9d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPizMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MTEzNDA2WhcNMjUwMTE1MTEzNDA2WjAYMRYw
FAYDVQQDEw02NzdiYmZiMy02NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAts1oaT9sq70Ah9L3UB55QaqZUqihPI49RHJCrN03toI1L5d5eA9dxib3
e9ojRdH/OmCQ+cZRvU+f9OiWfey8n69QLqQdP6ES1mSJZt3c/mTNaI048v0M6H1t
sUAk0I610+7CWPb+hyDJhY9anv0ip4HhTAEErfstAjNVODWWhQYxUbeH0Z67jNax
lMTMWcT5sf/YNp+g3pbdSp8Qlxq1aFR0qXaC8wjpHTaimYfboQqx6uFaKYqbdmMC
xb2TsBkXRbEDnhrSqWT2LySPjv8ayc8KpnaCM6kRtRyIQb8HL38/mmUwO0v3/tBv
CWF2KGSevoU/RqaPCpz/1P8OgjWQAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLtx
Ivo+yoTGv6C2Ol7mm805Ni+ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNUFFMkYyMkNDMjIxMUVGQTM3MUI4QTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPMEMA0GCSqGSIb3DQEBCwUA
A4IBAQCxhigASDmKJUVX1vJiWwmSziwSoiwC3iCJJ+llWM/ZhQnh8a3r2BjMj9Lp
UX/Z0Vy4UkKMXe/bXAV7WjnJmaXr9bYNquUou9Is/o+MOipMyYewKSZmFC3+mnYF
VqtE7yrq8mR8WSqJe0vul9kgjMx6sDgg9IOpi1ZDlH7paRQxqqyt1upGJ0IksB+x
QbLpUmGkfml6RHq7ahZ4R6E/Pm4yo8G+JoK2XwPgeX+AwhVqvCEfyQbJTSw6Kw0w
Wd07a/YDIW8BBZH/JlswODQIt7QoTRscbCAl6xsF53Q2NwA5h8VgLOefg2iLimEc
YQee7mS63SSXKCOq2CsGUhTJ/BWd
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:11 2025 by rpki-client