Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4572FEBEB411EF91BC966D762E951A.roa
File: 4E4572FEBEB411EF91BC966D762E951A.roa (raw, json)
Hash identifier: 8PuePUxDR48FqIVZJ8SBMxCLJQRAQwoxMy2lfH9cC5g=
Subject key identifier: A3:B4:F7:67:5C:6B:2A:39:11:72:9B:CB:CE:43:89:9A:31:AF:7F:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E761
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4572FEBEB411EF91BC966D762E951A.roa
Signing time: Fri 20 Dec 2024 09:25:09 +0000
ROA not before: Fri 20 Dec 2024 09:25:05 +0000
ROA not after: Tue 28 Jan 2025 09:25:05 +0000
asID: 18779
IP address blocks: 156.240.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59233 (0xe761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:25:05 2024 GMT
Not After : Jan 28 09:25:05 2025 GMT
Subject: CN=676537f5-2648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:28:77:16:eb:5f:29:44:6c:19:2d:fa:f4:
e9:ba:71:6c:76:8b:3d:34:a5:10:ac:80:51:a4:e1:
81:29:c1:ab:de:a2:c6:84:cc:ae:21:4d:4b:d9:22:
4b:f5:4e:57:86:3a:20:4a:d1:20:1c:3f:1b:83:e2:
2a:c7:10:40:53:ce:62:7b:d3:61:b6:39:10:5d:7d:
ad:9c:b6:5a:7d:5a:b7:6f:95:ba:e2:d4:7c:5e:9b:
03:92:d7:c8:bb:09:b1:3e:e0:8f:04:99:d3:95:af:
a0:77:06:9d:e2:66:35:ec:1a:ce:26:90:a9:7b:c8:
8f:db:3a:d3:78:ec:48:33:af:15:ce:f5:27:7d:d8:
c2:df:ee:df:27:8f:d7:63:e7:4d:11:e0:32:9d:96:
62:2d:77:c9:0c:3b:af:3b:d7:aa:12:8a:49:9b:23:
33:c8:27:3b:64:21:b4:c3:ba:8d:f8:2f:0f:f2:26:
f5:c3:6d:d1:19:8f:08:8f:e7:83:fc:fe:f0:c6:4a:
37:35:5f:a1:c6:cb:5b:f4:af:30:4a:7a:f1:85:b1:
95:7b:f5:14:03:8e:18:35:e2:7d:ed:3a:18:85:b8:
71:71:7d:b4:ad:24:dd:dc:9f:49:f4:0a:c0:b1:76:
09:8b:be:f7:4c:7e:74:0d:84:60:2a:3d:09:e5:cb:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:F7:67:5C:6B:2A:39:11:72:9B:CB:CE:43:89:9A:31:AF:7F:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E4572FEBEB411EF91BC966D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.75.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1c:68:d8:39:dd:26:ca:ac:7e:0a:93:5f:98:6f:cb:ef:c6:
a5:26:eb:6c:fd:ad:ca:82:a8:1d:78:e0:09:e0:e7:b0:e2:f9:
74:1f:9a:9a:54:c9:16:3c:f4:78:d8:25:03:c1:1e:5c:9e:78:
9a:21:e0:90:06:9f:4d:5d:b4:1f:a5:70:ea:2a:4e:17:22:3c:
50:3e:7b:73:12:a0:0c:eb:57:c6:9e:55:a6:66:ba:20:80:8e:
73:6f:48:59:bd:ee:1c:24:31:52:55:81:17:df:24:74:e4:bf:
c0:a2:ce:23:70:46:0d:12:a3:7b:69:fb:7d:aa:5f:ab:5f:3f:
2b:f0:08:e6:c3:fd:19:8d:7f:4e:8d:3c:4d:31:b9:47:b1:11:
25:81:42:04:b0:9c:87:4f:d8:c4:d3:40:91:4d:44:69:b8:c7:
cc:84:90:25:3a:00:87:f7:de:a1:d6:ad:d7:6d:07:72:93:ec:
af:49:8c:37:85:30:49:6d:29:5b:fa:3b:ad:f8:34:ab:03:ea:
27:a6:3e:51:50:53:68:8d:b7:12:4e:76:59:c0:27:b8:22:7f:
d6:ca:73:fa:26:60:70:99:70:6e:a6:a6:80:71:85:98:5f:2d:
d3:21:75:a6:98:97:90:74:fc:e5:78:63:45:34:8d:cd:7a:7d:
9c:cf:67:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOdhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDkyNTA1WhcNMjUwMTI4MDkyNTA1WjAYMRYw
FAYDVQQDEw02NzY1MzdmNS0yNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwx8odxbrXylEbBkt+vTpunFsdos9NKUQrIBRpOGBKcGr3qLGhMyuIU1L
2SJL9U5XhjogStEgHD8bg+IqxxBAU85ie9NhtjkQXX2tnLZafVq3b5W64tR8XpsD
ktfIuwmxPuCPBJnTla+gdwad4mY17BrOJpCpe8iP2zrTeOxIM68VzvUnfdjC3+7f
J4/XY+dNEeAynZZiLXfJDDuvO9eqEopJmyMzyCc7ZCG0w7qN+C8P8ib1w23RGY8I
j+eD/P7wxko3NV+hxstb9K8wSnrxhbGVe/UUA44YNeJ97ToYhbhxcX20rSTd3J9J
9ArAsXYJi773TH50DYRgKj0J5cupoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKO0
92dcayo5EXKby85DiZoxr3+KMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RTQ1NzJGRUJFQjQxMUVGOTFCQzk2NkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBLMA0GCSqGSIb3DQEBCwUA
A4IBAQA2HGjYOd0myqx+CpNfmG/L78alJuts/a3KgqgdeOAJ4Oew4vl0H5qaVMkW
PPR42CUDwR5cnniaIeCQBp9NXbQfpXDqKk4XIjxQPntzEqAM61fGnlWmZroggI5z
b0hZve4cJDFSVYEX3yR05L/Aos4jcEYNEqN7aft9ql+rXz8r8Ajmw/0ZjX9OjTxN
MblHsRElgUIEsJyHT9jE00CRTURpuMfMhJAlOgCH996h1q3XbQdyk+yvSYw3hTBJ
bSlb+jut+DSrA+onpj5RUFNojbcSTnZZwCe4In/WynP6JmBwmXBupqaAcYWYXy3T
IXWmmJeQdPzleGNFNI3Nen2cz2dU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:15 2025 by rpki-client