Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49487124CE5F11EF9849C475762E951A.roa
File: 49487124CE5F11EF9849C475762E951A.roa (raw, json)
Hash identifier: QHIzToVcxarqHdTI7Y/LDpVa/UMoet1QLbr5kb2w0rA=
Subject key identifier: 33:52:18:54:7A:82:4A:47:E0:AA:3C:91:EB:5C:B8:4F:B6:28:23:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01030E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49487124CE5F11EF9849C475762E951A.roa
Signing time: Thu 09 Jan 2025 07:56:52 +0000
ROA not before: Thu 09 Jan 2025 07:56:48 +0000
ROA not after: Thu 16 Jan 2025 07:56:48 +0000
asID: 17561
IP address blocks: 156.238.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66318 (0x1030e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:56:48 2025 GMT
Not After : Jan 16 07:56:48 2025 GMT
Subject: CN=677f8144-e840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:87:92:08:1f:1a:1e:85:e0:60:22:28:38:
33:7c:39:cb:c8:70:a2:2f:7b:6c:95:f1:3b:85:7f:
62:ef:f1:30:52:26:98:1f:53:6a:e5:63:53:48:c4:
a8:3f:c3:14:01:50:f7:f8:3f:22:a7:96:6e:ca:d7:
7c:34:4d:b0:09:98:04:18:ac:96:de:68:25:97:55:
50:42:ae:58:26:d6:8d:c8:27:fd:de:0d:f1:db:9e:
51:74:2b:dc:2f:f3:41:bd:a6:1f:a7:29:57:50:b1:
a9:a5:a6:4e:a6:92:e9:01:e2:d4:6f:dd:20:fe:c7:
f6:b3:3e:49:1b:de:10:3c:c4:4b:a2:69:e0:e6:1e:
a8:91:f1:0f:ee:00:83:14:06:91:ce:90:27:c3:64:
88:92:73:61:2f:fd:ff:4a:61:62:5a:c2:bf:91:33:
c0:81:c8:56:f3:2d:8d:2a:3c:7a:63:5c:0a:a7:66:
20:a5:29:96:6c:78:72:1b:30:a0:d9:74:f5:79:60:
21:2b:fe:5e:68:c4:a7:da:95:60:1c:b6:da:13:da:
05:dd:af:3b:da:f6:f3:d5:57:60:45:12:f8:48:99:
1c:2f:45:4f:48:7e:29:d3:71:12:20:ee:89:54:02:
6b:a5:e1:54:7b:a9:ab:55:b7:e4:f1:83:a3:45:0f:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:18:54:7A:82:4A:47:E0:AA:3C:91:EB:5C:B8:4F:B6:28:23:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49487124CE5F11EF9849C475762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:8d:f1:f4:ab:18:81:a6:6f:61:f7:18:c4:58:85:73:43:38:
f6:a3:96:2e:ff:6d:82:9c:c7:27:72:0b:db:b9:ca:b0:1e:b8:
65:ff:ac:84:c0:87:7f:b2:ef:8a:91:f1:0d:7a:a7:95:1a:50:
28:05:0a:e3:e5:b6:d6:a1:33:0a:36:ac:cf:67:66:ae:48:a5:
f6:ae:1e:36:63:71:ae:e1:47:6d:19:9b:0a:e1:21:ed:b2:5c:
29:e5:60:61:11:a1:36:bb:e9:39:08:68:b0:84:be:c9:5d:a4:
c8:ca:cc:61:9d:7e:d4:f9:bf:f4:eb:d8:b5:2d:64:df:09:90:
1c:ee:a2:64:45:5b:a8:23:31:e6:ce:54:ad:7e:7d:27:1a:07:
03:bb:5a:23:16:5b:3c:9c:75:d8:e1:11:2c:d1:dc:46:9c:67:
e0:2c:d0:f0:0a:ec:9c:df:c5:f3:46:39:9a:b6:ef:e5:ad:67:
b2:29:9f:d7:4b:54:e9:ec:d5:a2:6b:2d:12:63:46:86:c8:68:
74:d4:f4:35:73:37:7b:c8:3c:10:3b:b3:aa:67:90:99:4b:9b:
b2:d6:2d:59:f2:e1:38:0d:60:a0:03:82:a1:eb:57:e2:af:71:
bf:f1:d7:ed:88:c2:ef:49:13:20:c5:92:f2:ac:e2:e1:0f:4d:
2e:ba:b4:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQMOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDc1NjQ4WhcNMjUwMTE2MDc1NjQ4WjAYMRYw
FAYDVQQDEw02NzdmODE0NC1lODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtgmHkggfGh6F4GAiKDgzfDnLyHCiL3tslfE7hX9i7/EwUiaYH1Nq5WNT
SMSoP8MUAVD3+D8ip5Zuytd8NE2wCZgEGKyW3mgll1VQQq5YJtaNyCf93g3x255R
dCvcL/NBvaYfpylXULGppaZOppLpAeLUb90g/sf2sz5JG94QPMRLomng5h6okfEP
7gCDFAaRzpAnw2SIknNhL/3/SmFiWsK/kTPAgchW8y2NKjx6Y1wKp2YgpSmWbHhy
GzCg2XT1eWAhK/5eaMSn2pVgHLbaE9oF3a872vbz1VdgRRL4SJkcL0VPSH4p03ES
IO6JVAJrpeFUe6mrVbfk8YOjRQ8WWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDNS
GFR6gkpH4Ko8ketcuE+2KCP0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTQ4NzEyNENFNUYxMUVGOTg0OUM0NzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO4gMA0GCSqGSIb3DQEBCwUA
A4IBAQCsjfH0qxiBpm9h9xjEWIVzQzj2o5Yu/22CnMcncgvbucqwHrhl/6yEwId/
su+KkfENeqeVGlAoBQrj5bbWoTMKNqzPZ2auSKX2rh42Y3Gu4UdtGZsK4SHtslwp
5WBhEaE2u+k5CGiwhL7JXaTIysxhnX7U+b/069i1LWTfCZAc7qJkRVuoIzHmzlSt
fn0nGgcDu1ojFls8nHXY4REs0dxGnGfgLNDwCuyc38XzRjmatu/lrWeyKZ/XS1Tp
7NWiay0SY0aGyGh01PQ1czd7yDwQO7OqZ5CZS5uy1i1Z8uE4DWCgA4Kh61fir3G/
8dftiMLvSRMgxZLyrOLhD00uurS+
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:35 2025 by rpki-client