Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26813210CD9311EF8307E45E762E951A.roa
File: 26813210CD9311EF8307E45E762E951A.roa (raw, json)
Hash identifier: 00F9cIvvbA9IpIh9jUl/jcq3VyfAt4BthfHrbK2jiGc=
Subject key identifier: 40:FF:F1:80:D8:4E:48:1C:26:AA:FE:49:22:B3:79:87:89:60:33:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010067
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26813210CD9311EF8307E45E762E951A.roa
Signing time: Wed 08 Jan 2025 07:35:36 +0000
ROA not before: Wed 08 Jan 2025 07:35:32 +0000
ROA not after: Sun 02 Feb 2025 07:35:32 +0000
asID: 5065
IP address blocks: 156.229.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65639 (0x10067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 07:35:32 2025 GMT
Not After : Feb 2 07:35:32 2025 GMT
Subject: CN=677e2ac8-20c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:3c:75:35:9a:a9:69:8e:cf:ad:ca:52:3c:
fb:2d:c3:b2:67:47:21:1d:8d:86:45:f8:8a:0d:fb:
3a:05:a1:b1:4e:b6:41:39:3b:b8:fb:7e:d5:04:83:
68:24:90:63:41:27:30:b5:62:f2:ca:d8:8e:f9:44:
a3:89:16:cd:a3:19:05:56:5f:6a:90:55:03:ff:26:
e8:9e:ef:60:4d:00:79:2d:69:d9:14:e6:f5:54:e8:
c5:af:49:a5:82:33:e6:6f:62:80:b0:18:ab:6d:dd:
43:18:03:6c:e4:62:0c:ae:d8:3c:77:1d:d5:bb:79:
f4:a2:f8:a2:41:24:28:37:33:e2:b4:1b:04:dc:3c:
80:9f:f4:b2:85:44:5c:98:b3:d2:94:0c:aa:7b:b7:
63:d9:d0:f1:7c:04:df:03:0d:12:e7:73:cc:51:2f:
fd:fc:7f:8e:02:26:a6:d1:6b:3a:3a:ce:b4:7c:bf:
a4:c1:a8:90:ce:4c:1a:6a:f5:0c:5d:16:49:db:8d:
11:f7:8a:93:7e:4e:25:28:f2:0e:4f:b5:b4:f0:df:
fd:ce:2f:bc:1e:a2:9b:08:32:e2:01:1a:e8:78:c1:
7f:3b:12:21:37:30:f7:1d:be:d3:66:c6:81:88:16:
68:ed:2b:3f:d7:80:bb:44:00:2c:7c:81:3d:96:47:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:F1:80:D8:4E:48:1C:26:AA:FE:49:22:B3:79:87:89:60:33:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26813210CD9311EF8307E45E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.55.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:4d:f6:53:54:75:c6:38:07:14:95:ca:c7:49:65:09:2c:
0c:02:d0:9b:74:ee:a6:d6:68:28:7a:0b:80:13:99:94:ad:a6:
90:2b:26:e6:26:7a:81:2a:96:75:44:af:1b:dc:97:c3:31:42:
cc:58:c8:2d:84:0a:ca:eb:1a:f2:f5:81:f4:64:b0:05:92:4f:
d4:ca:98:06:ec:fb:83:d3:70:91:0c:da:33:e6:3c:ab:e8:e1:
7f:20:bb:25:1c:83:5c:84:85:1f:a6:f6:2d:f7:32:03:ce:42:
d1:ba:16:06:65:f7:a5:f4:3f:0e:ff:63:1c:f7:39:1e:90:2b:
a0:77:e6:88:95:2a:39:7e:e2:8a:64:da:19:dc:cc:63:99:4f:
96:ed:81:dd:f5:0b:d1:46:ca:bc:37:ba:31:ae:02:78:de:8f:
e2:3f:80:b7:a2:ed:29:fc:c0:21:70:55:30:03:47:f3:7e:af:
fa:3b:65:c8:36:73:aa:ca:3c:b9:ff:0c:04:7f:25:5d:b9:ff:
20:b6:12:52:95:0a:a0:0d:fc:47:fb:72:77:98:2b:9f:ca:99:
8f:dd:11:74:73:03:15:d6:6d:33:b2:49:47:4c:b7:e2:41:dc:
3f:9f:95:3f:d1:4a:ae:76:9a:56:b7:c5:b0:0f:39:c0:e0:f1:
92:4a:1a:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQBnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDczNTMyWhcNMjUwMjAyMDczNTMyWjAYMRYw
FAYDVQQDEw02NzdlMmFjOC0yMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr8U8dTWaqWmOz63KUjz7LcOyZ0chHY2GRfiKDfs6BaGxTrZBOTu4+37V
BINoJJBjQScwtWLyytiO+USjiRbNoxkFVl9qkFUD/ybonu9gTQB5LWnZFOb1VOjF
r0mlgjPmb2KAsBirbd1DGANs5GIMrtg8dx3Vu3n0oviiQSQoNzPitBsE3DyAn/Sy
hURcmLPSlAyqe7dj2dDxfATfAw0S53PMUS/9/H+OAiam0Ws6Os60fL+kwaiQzkwa
avUMXRZJ240R94qTfk4lKPIOT7W08N/9zi+8HqKbCDLiARroeMF/OxIhNzD3Hb7T
ZsaBiBZo7Ss/14C7RAAsfIE9lke/WwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFED/
8YDYTkgcJqr+SSKzeYeJYDMIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNjgxMzIxMENEOTMxMUVGODMwN0U0NUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU3MA0GCSqGSIb3DQEBCwUA
A4IBAQBo/k32U1R1xjgHFJXKx0llCSwMAtCbdO6m1mgoeguAE5mUraaQKybmJnqB
KpZ1RK8b3JfDMULMWMgthArK6xry9YH0ZLAFkk/UypgG7PuD03CRDNoz5jyr6OF/
ILslHINchIUfpvYt9zIDzkLRuhYGZfel9D8O/2Mc9zkekCugd+aIlSo5fuKKZNoZ
3MxjmU+W7YHd9QvRRsq8N7oxrgJ43o/iP4C3ou0p/MAhcFUwA0fzfq/6O2XINnOq
yjy5/wwEfyVduf8gthJSlQqgDfxH+3J3mCufypmP3RF0cwMV1m0zsklHTLfiQdw/
n5U/0UqudppWt8WwDznA4PGSShoM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:37 2025 by rpki-client