Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50AAD350C0FC11EF920F334C762E951A.roa
File: 50AAD350C0FC11EF920F334C762E951A.roa (raw, json)
Hash identifier: 2wMgaJLA9+rzeCIsxNoukqsyTnPCTnyxQH++rcnvCoY=
Subject key identifier: CC:47:C7:73:42:31:94:F1:E4:95:76:1F:70:C3:CD:3B:CE:46:A2:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50AAD350C0FC11EF920F334C762E951A.roa
Signing time: Mon 23 Dec 2024 07:05:39 +0000
ROA not before: Mon 23 Dec 2024 07:05:35 +0000
ROA not after: Fri 31 Jan 2025 07:05:35 +0000
asID: 203020
IP address blocks: 156.230.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59384 (0xe7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 07:05:35 2024 GMT
Not After : Jan 31 07:05:35 2025 GMT
Subject: CN=67690bc3-e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:29:d1:80:e3:9f:b0:19:c0:d5:ce:e2:1e:
3e:0f:bc:c6:ea:6b:bb:80:bb:42:13:62:f0:22:d9:
94:a0:0e:9e:c4:23:e3:ec:2e:d3:99:5b:9e:ee:c4:
1a:c7:c7:d9:1c:15:42:89:22:29:e9:fa:48:a1:47:
bb:7e:21:59:5b:a5:6b:18:af:cb:4e:36:8c:ad:07:
f0:58:42:ad:ac:27:61:b3:b5:51:68:b7:0e:dc:a4:
7c:81:f8:b4:5c:da:28:7c:b1:85:a9:e1:2b:f1:26:
72:2b:67:91:0f:90:d8:43:23:ac:0b:40:d4:8f:94:
da:b4:f3:26:76:84:98:8d:91:b5:60:95:e7:85:ac:
47:89:54:7d:2c:52:55:25:5e:52:56:35:d6:7a:64:
80:bd:43:a7:72:48:c2:a0:fe:70:32:1f:d9:11:8d:
1c:ce:c6:83:3f:d8:6f:f5:de:8c:91:7b:e9:3e:4d:
14:bc:cf:fb:bc:60:ee:c3:53:aa:72:3a:f3:13:d9:
80:fe:96:ac:0a:66:07:2c:14:b9:cf:5a:99:e8:f8:
48:17:08:c2:de:d0:a0:e5:a0:cc:5e:77:fe:1c:99:
47:8f:f2:dc:f2:76:83:6e:97:56:37:83:5f:2e:d2:
7a:0d:d7:32:27:b6:4d:c0:65:34:f2:9d:0e:87:27:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:C7:73:42:31:94:F1:E4:95:76:1F:70:C3:CD:3B:CE:46:A2:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50AAD350C0FC11EF920F334C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d5:12:b1:d6:fd:1b:b0:1b:b3:ef:84:d3:c7:36:5f:68:e8:
09:0b:31:ab:4a:3c:c2:ad:4e:d9:6f:64:28:0d:fc:4f:cf:b8:
8e:0f:c4:cc:f0:a9:ca:0d:f6:f7:3e:f6:6d:08:79:3c:e2:26:
71:58:f9:4c:a9:be:e0:a0:df:55:34:2a:0e:88:19:d3:f7:64:
21:a3:b1:f8:91:1b:99:10:f0:d8:9d:1d:d9:d0:4a:74:5d:e1:
83:cc:24:e6:67:85:15:dd:2d:e0:d9:7b:2e:85:61:23:d5:fb:
79:1d:45:e3:d9:f8:c2:44:d9:71:f1:be:ef:37:df:8d:12:9d:
63:4b:74:7e:be:96:2b:5f:a6:93:6c:30:89:85:bf:d4:7c:3b:
4e:a1:e0:64:ad:ad:53:89:05:9a:3e:53:14:6c:cd:4f:00:6f:
2e:be:da:f1:92:50:e6:a5:44:11:27:17:bf:3d:73:eb:d7:01:
cd:16:47:90:32:04:dd:c3:2f:2b:04:6c:de:c7:66:19:99:b1:
d0:53:cc:63:74:04:96:88:11:39:29:e3:04:75:b4:14:34:ba:
fe:b8:d2:11:b3:3e:9a:54:96:e0:1f:9d:a4:fc:99:e6:6c:de:
ac:b7:01:a6:77:1e:15:d3:1b:e6:dc:b5:9c:6e:b8:f2:3a:a9:
4c:d7:41:76
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOf4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIzMDcwNTM1WhcNMjUwMTMxMDcwNTM1WjAYMRYw
FAYDVQQDEw02NzY5MGJjMy1lMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxlQp0YDjn7AZwNXO4h4+D7zG6mu7gLtCE2LwItmUoA6exCPj7C7TmVue
7sQax8fZHBVCiSIp6fpIoUe7fiFZW6VrGK/LTjaMrQfwWEKtrCdhs7VRaLcO3KR8
gfi0XNoofLGFqeEr8SZyK2eRD5DYQyOsC0DUj5TatPMmdoSYjZG1YJXnhaxHiVR9
LFJVJV5SVjXWemSAvUOnckjCoP5wMh/ZEY0czsaDP9hv9d6MkXvpPk0UvM/7vGDu
w1OqcjrzE9mA/pasCmYHLBS5z1qZ6PhIFwjC3tCg5aDMXnf+HJlHj/Lc8naDbpdW
N4NfLtJ6DdcyJ7ZNwGU08p0OhyeC7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMxH
x3NCMZTx5JV2H3DDzTvORqLPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MEFBRDM1MEMwRkMxMUVGOTIwRjMzNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOY/MA0GCSqGSIb3DQEBCwUA
A4IBAQBe1RKx1v0bsBuz74TTxzZfaOgJCzGrSjzCrU7Zb2QoDfxPz7iOD8TM8KnK
Dfb3PvZtCHk84iZxWPlMqb7goN9VNCoOiBnT92Qho7H4kRuZEPDYnR3Z0Ep0XeGD
zCTmZ4UV3S3g2XsuhWEj1ft5HUXj2fjCRNlx8b7vN9+NEp1jS3R+vpYrX6aTbDCJ
hb/UfDtOoeBkra1TiQWaPlMUbM1PAG8uvtrxklDmpUQRJxe/PXPr1wHNFkeQMgTd
wy8rBGzex2YZmbHQU8xjdASWiBE5KeMEdbQUNLr+uNIRsz6aVJbgH52k/JnmbN6s
twGmdx4V0xvm3LWcbrjyOqlM10F2
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:03 2025 by rpki-client