Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F1BEF10F67811EF84080D90762E951A.roa
File: 2F1BEF10F67811EF84080D90762E951A.roa (raw, json)
Hash identifier: 7jHNkM3+eMhTT8f0FOIci6kadGF03oCJ+NM1PVGSX9A=
Subject key identifier: 28:90:DF:5E:4D:0A:37:88:4A:94:92:37:52:31:51:AF:15:81:D5:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013FB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F1BEF10F67811EF84080D90762E951A.roa
Signing time: Sat 01 Mar 2025 08:35:52 +0000
ROA not before: Sat 01 Mar 2025 08:35:48 +0000
ROA not after: Sun 30 Mar 2025 08:35:48 +0000
asID: 203020
IP address blocks: 156.252.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81849 (0x13fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 08:35:48 2025 GMT
Not After : Mar 30 08:35:48 2025 GMT
Subject: CN=67c2c6e8-cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:d1:fb:11:f3:d5:2b:d0:55:ed:4b:03:f9:
1a:11:0f:77:e0:c3:2e:09:ca:60:cc:ad:9a:84:2e:
91:77:d7:d2:e5:d5:d8:ac:fc:f4:f4:e4:e4:7f:91:
41:54:c7:66:2c:ca:12:fc:1d:fe:b3:0f:88:26:09:
42:46:40:3b:a7:73:df:49:c5:d2:08:b1:fe:ae:28:
1c:3e:e2:23:15:23:24:39:00:2d:c4:12:65:a7:d0:
0e:3a:51:cf:82:74:10:35:04:bd:1f:89:fd:6c:df:
34:08:83:db:4d:6b:19:bc:f4:3c:bf:0d:95:89:c3:
2d:1b:f4:51:f7:19:aa:bc:a2:0f:e1:5a:7a:f6:40:
58:20:a5:be:73:9c:c1:21:d7:69:b4:d2:98:6b:c7:
7a:7a:37:b5:34:23:18:2a:b8:0d:24:17:e1:83:99:
91:e5:aa:15:6e:3d:1a:e2:ee:7b:0d:6b:6e:bf:55:
a6:16:f3:9d:5a:f1:87:20:07:59:be:8a:46:cb:af:
e5:d0:2f:23:94:e5:bd:36:70:74:aa:76:7b:79:0a:
52:03:15:98:3f:cf:c0:9b:2b:81:fe:05:c6:2d:43:
e4:88:40:22:3f:ab:6d:3b:b4:69:e7:6b:d0:31:c5:
9a:c0:c9:35:fa:e9:93:72:a0:6e:40:a1:91:0a:8c:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:DF:5E:4D:0A:37:88:4A:94:92:37:52:31:51:AF:15:81:D5:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F1BEF10F67811EF84080D90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.224.0/22
Signature Algorithm: sha256WithRSAEncryption
96:cf:ff:80:e3:ff:81:f7:1f:0d:07:49:89:43:a8:d9:ca:65:
f0:34:d8:88:13:6a:12:69:b4:f5:54:da:70:d7:25:bd:10:3a:
bc:25:d2:f2:97:d3:21:2e:3d:11:0c:90:30:49:74:59:31:13:
82:0e:48:ff:a8:8d:55:90:4d:24:43:ea:1f:87:28:54:88:e9:
88:0c:d9:84:b5:a9:d9:77:07:e8:e7:0f:7f:2b:28:a0:23:b4:
db:b4:3f:d8:e6:9e:8a:8a:df:c6:01:2a:29:26:6e:2c:88:31:
67:ee:9f:ad:ec:e4:f0:db:e2:4f:7c:01:91:5e:4a:ee:58:a3:
f8:14:7a:d1:56:cd:83:30:1d:53:fa:ec:8b:f4:1f:52:a0:37:
d1:df:42:6d:7a:9b:6e:31:a2:6c:44:c4:5a:ce:9c:91:9b:fe:
79:1d:c6:90:15:26:95:1e:a4:52:24:07:4c:0e:cf:05:05:79:
16:c2:49:89:1a:4a:5d:30:1e:f3:eb:1a:53:21:54:57:53:0d:
6a:48:dc:04:1c:f5:a5:0d:ba:f0:f1:b4:16:86:ae:12:0a:73:
e2:23:f3:00:51:e0:7f:6a:50:f2:ca:1d:68:1e:0e:fa:7c:8a:
eb:44:8c:db:96:a1:1a:2d:e7:7c:b0:cf:49:8b:60:b7:93:bf:
ad:a5:b7:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT+5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAxMDgzNTQ4WhcNMjUwMzMwMDgzNTQ4WjAYMRYw
FAYDVQQDEw02N2MyYzZlOC1jZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtxfR+xHz1SvQVe1LA/kaEQ934MMuCcpgzK2ahC6Rd9fS5dXYrPz09OTk
f5FBVMdmLMoS/B3+sw+IJglCRkA7p3PfScXSCLH+rigcPuIjFSMkOQAtxBJlp9AO
OlHPgnQQNQS9H4n9bN80CIPbTWsZvPQ8vw2VicMtG/RR9xmqvKIP4Vp69kBYIKW+
c5zBIddptNKYa8d6eje1NCMYKrgNJBfhg5mR5aoVbj0a4u57DWtuv1WmFvOdWvGH
IAdZvopGy6/l0C8jlOW9NnB0qnZ7eQpSAxWYP8/AmyuB/gXGLUPkiEAiP6ttO7Rp
52vQMcWawMk1+umTcqBuQKGRCozH5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCiQ
315NCjeISpSSN1IxUa8VgdWTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjFCRUYxMEY2NzgxMUVGODQwODBEOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPzgMA0GCSqGSIb3DQEBCwUA
A4IBAQCWz/+A4/+B9x8NB0mJQ6jZymXwNNiIE2oSabT1VNpw1yW9EDq8JdLyl9Mh
Lj0RDJAwSXRZMROCDkj/qI1VkE0kQ+ofhyhUiOmIDNmEtanZdwfo5w9/KyigI7Tb
tD/Y5p6Kit/GASopJm4siDFn7p+t7OTw2+JPfAGRXkruWKP4FHrRVs2DMB1T+uyL
9B9SoDfR30JteptuMaJsRMRazpyRm/55HcaQFSaVHqRSJAdMDs8FBXkWwkmJGkpd
MB7z6xpTIVRXUw1qSNwEHPWlDbrw8bQWhq4SCnPiI/MAUeB/alDyyh1oHg76fIrr
RIzblqEaLed8sM9Ji2C3k7+tpbdA
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:48 2025 by rpki-client