Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27237EA0B21611EF93A5F690762E951A.roa
File: 27237EA0B21611EF93A5F690762E951A.roa (raw, json)
Hash identifier: 9EDkV7nnu41trf/Vg54dGTxWGbaBMhC22NFYwaMBWhA=
Subject key identifier: 09:C0:46:A4:F4:EB:F9:1F:22:13:33:40:A3:79:F8:AE:3F:AF:B3:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27237EA0B21611EF93A5F690762E951A.roa
Signing time: Wed 04 Dec 2024 08:02:49 +0000
ROA not before: Wed 04 Dec 2024 08:02:45 +0000
ROA not after: Thu 23 Jan 2025 08:02:45 +0000
asID: 63139
IP address blocks: 156.229.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57162 (0xdf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:02:45 2024 GMT
Not After : Jan 23 08:02:45 2025 GMT
Subject: CN=67500ca9-e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:e9:e4:c4:24:e0:bc:92:b1:33:7a:d5:da:
31:8e:34:d9:8c:17:c9:02:21:e1:33:76:8e:2e:dd:
bc:e8:e5:25:c7:a7:8d:37:18:62:bf:44:16:c7:d2:
14:3c:2f:06:79:e1:95:f0:d6:df:61:e4:23:55:75:
d2:2e:73:1d:92:59:dc:93:3d:b2:75:cd:f1:dd:69:
7c:1d:7d:8d:22:95:dd:bc:a4:ca:3f:66:58:4c:fb:
4e:f6:f6:f0:7e:21:f2:92:2c:e3:a3:96:c0:7b:9c:
e6:d9:f3:7c:51:5e:f5:52:60:eb:45:c2:80:24:2f:
37:ad:50:a9:ac:f8:42:8c:fc:01:66:38:30:87:6f:
4f:e0:32:0a:7a:21:97:cf:b8:0c:49:57:e3:b1:59:
a2:58:f1:58:e5:c1:61:9b:50:7b:4f:bd:2e:a7:8c:
14:80:9a:7d:72:9a:c5:83:b1:e1:96:70:39:0c:1f:
d5:a6:95:98:8d:2d:b7:c3:ca:eb:97:75:f3:74:33:
6c:1d:72:6c:af:27:cd:ea:53:ee:9c:d6:e3:5c:a4:
e2:29:bc:67:f8:a4:b8:c0:b1:51:f6:40:f2:63:44:
8b:1e:b4:38:20:9a:1b:cf:59:a3:8e:29:80:b5:d3:
98:13:0b:61:f6:c0:49:83:3c:28:92:23:79:c7:3f:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:46:A4:F4:EB:F9:1F:22:13:33:40:A3:79:F8:AE:3F:AF:B3:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27237EA0B21611EF93A5F690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:84:d7:34:6a:6e:be:b0:ea:86:d9:aa:6a:11:9b:58:ec:d9:
4f:7f:60:1a:fa:97:01:2e:61:f0:2c:48:4f:eb:1c:f1:11:a8:
b8:48:30:72:ce:5c:af:b8:e0:84:d8:63:1a:43:81:a7:76:1b:
8c:57:31:f9:b2:1d:4c:28:07:59:bc:02:72:cd:dd:d8:b0:05:
1c:6d:21:a4:05:4b:a1:3d:00:5d:61:67:81:e4:82:42:93:a6:
8e:29:21:1f:c2:d8:17:4f:cb:58:75:1a:0c:95:ce:74:62:1e:
7a:15:db:4f:67:26:d6:36:a9:d6:26:94:50:c0:c7:fe:43:18:
a4:b4:af:09:73:c9:57:ad:4e:19:9b:d1:17:33:45:47:8f:dc:
82:10:35:52:38:22:7e:d6:b2:28:dd:cf:66:c3:67:c0:45:6a:
54:66:6e:67:72:ff:be:ce:81:5d:af:11:f0:2e:bf:17:8c:88:
c5:61:28:fc:ad:9b:b8:d6:5c:66:ce:65:a5:16:7e:24:f7:66:
6e:81:62:99:09:51:f7:74:5e:eb:2c:0f:97:9f:09:77:03:8f:
ff:4c:bc:d0:a7:42:5e:1e:1d:4c:da:b4:b4:c1:d7:fd:58:ab:
c6:86:a6:a8:90:1a:81:83:a9:d9:08:4f:ec:ce:ad:46:09:e0:
1d:37:13:c5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAN9KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA0MDgwMjQ1WhcNMjUwMTIzMDgwMjQ1WjAYMRYw
FAYDVQQDEw02NzUwMGNhOS1lODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtyTp5MQk4LySsTN61doxjjTZjBfJAiHhM3aOLt286OUlx6eNNxhiv0QW
x9IUPC8GeeGV8NbfYeQjVXXSLnMdklnckz2ydc3x3Wl8HX2NIpXdvKTKP2ZYTPtO
9vbwfiHykizjo5bAe5zm2fN8UV71UmDrRcKAJC83rVCprPhCjPwBZjgwh29P4DIK
eiGXz7gMSVfjsVmiWPFY5cFhm1B7T70up4wUgJp9cprFg7HhlnA5DB/VppWYjS23
w8rrl3XzdDNsHXJsryfN6lPunNbjXKTiKbxn+KS4wLFR9kDyY0SLHrQ4IJobz1mj
jimAtdOYEwth9sBJgzwokiN5xz+xUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAnA
RqT06/kfIhMzQKN5+K4/r7P9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNzIzN0VBMEIyMTYxMUVGOTNBNUY2OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOUoMA0GCSqGSIb3DQEBCwUA
A4IBAQC4hNc0am6+sOqG2apqEZtY7NlPf2Aa+pcBLmHwLEhP6xzxEai4SDByzlyv
uOCE2GMaQ4GndhuMVzH5sh1MKAdZvAJyzd3YsAUcbSGkBUuhPQBdYWeB5IJCk6aO
KSEfwtgXT8tYdRoMlc50Yh56FdtPZybWNqnWJpRQwMf+QxiktK8Jc8lXrU4Zm9EX
M0VHj9yCEDVSOCJ+1rIo3c9mw2fARWpUZm5ncv++zoFdrxHwLr8XjIjFYSj8rZu4
1lxmzmWlFn4k92ZugWKZCVH3dF7rLA+Xnwl3A4//TLzQp0JeHh1M2rS0wdf9WKvG
hqaokBqBg6nZCE/szq1GCeAdNxPF
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:52 2025 by rpki-client