Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F68DED2BDD811EF80B5A686762E951A.roa
File: 4F68DED2BDD811EF80B5A686762E951A.roa (raw, json)
Hash identifier: ErUZO0p6+tdgHoO81A4DRoLZlaQO7rqGRm4JAAVuLw8=
Subject key identifier: 75:1D:5D:E4:13:69:4E:56:16:0F:B7:55:07:84:64:8B:F9:02:B4:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F68DED2BDD811EF80B5A686762E951A.roa
Signing time: Thu 19 Dec 2024 07:10:21 +0000
ROA not before: Thu 19 Dec 2024 07:10:18 +0000
ROA not after: Fri 24 Jan 2025 07:10:18 +0000
asID: 395793
IP address blocks: 156.228.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58805 (0xe5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:10:18 2024 GMT
Not After : Jan 24 07:10:18 2025 GMT
Subject: CN=6763c6dd-50ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:00:65:ef:d2:d1:f5:3f:0c:9f:94:a5:fe:
e8:00:c9:0c:04:5b:18:4f:1a:12:97:15:41:88:cf:
bd:bf:3f:13:b9:53:10:3f:f6:40:1c:02:52:b0:89:
f8:58:85:81:d2:c0:01:b0:ac:98:ae:8c:cc:9c:50:
8b:91:e2:60:07:3f:42:2d:44:1c:ec:46:b4:64:9c:
46:3f:d5:ec:87:51:4e:5c:16:21:de:5d:9a:15:cf:
b7:e3:e4:7a:a3:5d:66:09:79:be:3c:f7:ad:11:c6:
f4:16:94:77:a2:7f:ff:36:d6:f9:15:84:44:47:78:
36:ee:e0:98:33:9a:8e:4e:61:82:88:18:1e:bd:28:
4e:78:ec:a0:f0:0d:8a:8a:83:40:a8:ac:b0:fe:c7:
47:49:07:0e:60:db:92:0c:db:42:37:13:fd:f1:02:
b7:cf:36:59:d3:03:3c:69:13:03:b7:4a:d8:bf:6a:
3f:4e:c0:e3:c1:cd:27:5c:05:95:d6:06:09:62:38:
89:e7:57:2b:fa:1f:aa:69:9d:1a:50:6c:8e:01:04:
fb:9e:83:65:07:87:2f:06:01:0a:e7:9e:15:f8:f9:
33:66:de:60:a2:c3:93:16:b6:0d:73:90:3c:6b:17:
4a:0c:bc:e7:fe:d5:f9:75:92:97:e8:fa:f3:c8:af:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:5D:E4:13:69:4E:56:16:0F:B7:55:07:84:64:8B:F9:02:B4:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F68DED2BDD811EF80B5A686762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.210.0/23
Signature Algorithm: sha256WithRSAEncryption
42:30:31:de:23:0a:55:14:66:d3:80:99:c7:b6:a5:0a:ec:b4:
cf:0d:99:be:57:70:1d:69:a0:d6:78:71:a6:7c:6d:34:ab:dd:
77:60:e3:3d:2b:98:37:7d:84:4a:de:cf:2f:93:e6:38:f1:9b:
52:11:88:88:cf:4b:77:23:77:1d:0e:cf:14:3b:6e:11:3a:8c:
3e:f7:f3:dc:46:a3:c5:95:65:a5:03:19:e8:d5:f7:03:1c:2a:
d2:d0:3c:b5:b3:4a:b3:f2:21:3a:2b:7e:73:58:f1:b7:24:76:
73:4f:9c:fb:b9:41:9d:3e:c4:7b:11:31:7c:1d:30:4c:f1:d1:
f1:f8:8a:55:02:4e:91:9f:0a:60:2d:5f:af:80:0d:a7:7e:24:
20:c7:99:b7:90:e1:05:a6:bc:d8:80:7c:15:d2:56:e9:7d:cf:
7f:94:09:b5:f2:21:10:9f:36:5b:a2:3b:23:ea:6b:4c:5f:55:
5a:4d:8b:4c:e6:6f:3c:95:2d:62:a4:a5:c8:69:44:1c:cd:8d:
ad:69:fd:46:d9:47:3a:7b:bd:25:e7:b1:7a:82:6f:79:78:2a:
17:ad:7b:08:f1:4d:fd:9c:cd:51:4f:06:4f:71:0f:0b:f6:81:
2e:cb:85:0a:82:1a:95:01:d2:52:51:01:b9:c0:87:bf:4a:bd:
d0:64:eb:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOW1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDcxMDE4WhcNMjUwMTI0MDcxMDE4WjAYMRYw
FAYDVQQDEw02NzYzYzZkZC01MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYcAZe/S0fU/DJ+Upf7oAMkMBFsYTxoSlxVBiM+9vz8TuVMQP/ZAHAJS
sIn4WIWB0sABsKyYrozMnFCLkeJgBz9CLUQc7Ea0ZJxGP9Xsh1FOXBYh3l2aFc+3
4+R6o11mCXm+PPetEcb0FpR3on//Ntb5FYRER3g27uCYM5qOTmGCiBgevShOeOyg
8A2KioNAqKyw/sdHSQcOYNuSDNtCNxP98QK3zzZZ0wM8aRMDt0rYv2o/TsDjwc0n
XAWV1gYJYjiJ51cr+h+qaZ0aUGyOAQT7noNlB4cvBgEK554V+PkzZt5gosOTFrYN
c5A8axdKDLzn/tX5dZKX6PrzyK9HrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHUd
XeQTaU5WFg+3VQeEZIv5ArRNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RjY4REVEMkJERDgxMUVGODBCNUE2ODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOTSMA0GCSqGSIb3DQEBCwUA
A4IBAQBCMDHeIwpVFGbTgJnHtqUK7LTPDZm+V3AdaaDWeHGmfG00q913YOM9K5g3
fYRK3s8vk+Y48ZtSEYiIz0t3I3cdDs8UO24ROow+9/PcRqPFlWWlAxno1fcDHCrS
0Dy1s0qz8iE6K35zWPG3JHZzT5z7uUGdPsR7ETF8HTBM8dHx+IpVAk6RnwpgLV+v
gA2nfiQgx5m3kOEFprzYgHwV0lbpfc9/lAm18iEQnzZbojsj6mtMX1VaTYtM5m88
lS1ipKXIaUQczY2taf1G2Uc6e70l57F6gm95eCoXrXsI8U39nM1RTwZPcQ8L9oEu
y4UKghqVAdJSUQG5wIe/Sr3QZOts
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:33 2025 by rpki-client