Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51419134CE7911EFB2763A9A762E951A.roa
File: 51419134CE7911EFB2763A9A762E951A.roa (raw, json)
Hash identifier: JO8Y1e2uW2Ij4t940JcO6c6IW51qZj8N9cK7UBo8K28=
Subject key identifier: 35:0A:34:21:BB:BC:91:61:6C:7B:E4:E6:FE:DA:72:A8:B9:68:8F:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010332
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51419134CE7911EFB2763A9A762E951A.roa
Signing time: Thu 09 Jan 2025 11:03:12 +0000
ROA not before: Thu 09 Jan 2025 11:03:08 +0000
ROA not after: Wed 22 Jan 2025 11:03:08 +0000
asID: 22773
IP address blocks: 156.237.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66354 (0x10332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:03:08 2025 GMT
Not After : Jan 22 11:03:08 2025 GMT
Subject: CN=677facf0-976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:2a:0f:9e:43:1d:3d:6c:7e:2e:81:3e:01:
58:bf:e8:a3:97:75:c4:aa:b0:00:09:73:36:aa:40:
2f:0f:70:2e:13:35:20:9c:f3:05:ca:db:94:51:7b:
01:e9:0f:47:09:29:3b:2f:dc:24:97:df:dc:bc:ef:
8a:63:64:ba:78:28:8a:75:4a:40:0a:ee:0a:7f:d1:
db:b5:7e:f3:8b:81:b6:0c:be:76:ef:c5:b8:64:c7:
6d:ea:c0:de:43:d1:d3:87:3b:82:a5:8d:e9:56:22:
d7:a6:81:0d:1a:61:2b:cd:1e:94:d3:4f:a7:86:aa:
86:2f:1d:06:ad:c5:46:8f:5d:28:ca:31:86:3c:80:
5e:90:e5:1a:a5:c2:d9:6d:cd:81:41:9b:10:25:49:
a9:ae:e4:36:e4:0a:f3:bc:60:0c:3e:1e:8c:c6:f1:
95:6f:4f:78:0e:40:5d:e9:b4:93:d8:3b:1f:18:d5:
3b:b6:34:85:b7:0d:cf:fd:e3:a7:de:ec:70:df:be:
81:0f:82:9e:8d:54:65:89:cd:4e:84:16:76:36:90:
6e:b7:f4:93:ce:74:d6:83:fb:17:d6:2e:cf:7c:6b:
51:3a:ff:49:8e:06:10:3c:3e:23:bc:6c:95:15:0c:
82:4d:26:90:97:9a:36:dc:4a:eb:57:48:6c:d5:81:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:34:21:BB:BC:91:61:6C:7B:E4:E6:FE:DA:72:A8:B9:68:8F:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51419134CE7911EFB2763A9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cf:d5:c4:e6:dd:c3:46:0b:e6:0c:0f:b4:c5:d0:bf:45:f2:
4e:b0:c1:f2:95:42:bf:27:a7:1f:5e:35:41:29:b3:35:27:35:
4e:98:78:f3:a9:49:de:91:95:f9:ea:ca:3b:1c:8e:a0:39:9a:
a8:2f:6a:fc:4a:9c:3a:70:24:84:96:64:98:fa:17:06:b4:c0:
9a:d6:f4:6d:d1:87:b2:f2:96:af:8f:4c:02:b4:cb:c5:68:ef:
b3:ea:ce:73:f4:dd:5c:5a:6f:e5:85:b0:f6:52:21:1d:e8:35:
00:26:99:8c:7e:d4:55:a8:c8:20:ea:2f:b2:68:9c:d7:1e:cd:
2d:69:07:97:87:01:ed:2a:3e:44:97:d8:7e:39:d6:56:fb:13:
72:4c:b0:7a:74:18:ce:50:ad:2d:ce:37:c6:30:64:96:d9:bc:
f6:ec:a7:31:67:15:8a:a6:27:1e:ff:bd:cb:61:66:4c:72:35:
ad:d0:eb:b0:34:e4:34:fe:68:ee:62:5a:90:93:14:30:fe:4c:
15:9e:4d:cd:6e:4d:b6:68:85:c4:e4:f1:f3:8e:76:3c:79:1c:
5f:05:a7:08:40:f9:b2:1a:80:24:49:e3:c9:b2:6d:40:80:c1:
0b:a4:82:fb:30:b7:15:94:f8:41:c1:0e:ff:b3:be:5a:00:9a:
23:13:03:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQMyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTEwMzA4WhcNMjUwMTIyMTEwMzA4WjAYMRYw
FAYDVQQDEw02NzdmYWNmMC05NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApooqD55DHT1sfi6BPgFYv+ijl3XEqrAACXM2qkAvD3AuEzUgnPMFytuU
UXsB6Q9HCSk7L9wkl9/cvO+KY2S6eCiKdUpACu4Kf9HbtX7zi4G2DL5278W4ZMdt
6sDeQ9HThzuCpY3pViLXpoENGmErzR6U00+nhqqGLx0GrcVGj10oyjGGPIBekOUa
pcLZbc2BQZsQJUmpruQ25ArzvGAMPh6MxvGVb094DkBd6bST2DsfGNU7tjSFtw3P
/eOn3uxw376BD4KejVRlic1OhBZ2NpBut/STznTWg/sX1i7PfGtROv9JjgYQPD4j
vGyVFQyCTSaQl5o23ErrV0hs1YHIeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDUK
NCG7vJFhbHvk5v7acqi5aI+cMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MTQxOTEzNENFNzkxMUVGQjI3NjNBOUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO0AMA0GCSqGSIb3DQEBCwUA
A4IBAQBYz9XE5t3DRgvmDA+0xdC/RfJOsMHylUK/J6cfXjVBKbM1JzVOmHjzqUne
kZX56so7HI6gOZqoL2r8Spw6cCSElmSY+hcGtMCa1vRt0Yey8pavj0wCtMvFaO+z
6s5z9N1cWm/lhbD2UiEd6DUAJpmMftRVqMgg6i+yaJzXHs0taQeXhwHtKj5El9h+
OdZW+xNyTLB6dBjOUK0tzjfGMGSW2bz27KcxZxWKpice/73LYWZMcjWt0OuwNOQ0
/mjuYlqQkxQw/kwVnk3Nbk22aIXE5PHzjnY8eRxfBacIQPmyGoAkSePJsm1AgMEL
pIL7MLcVlPhBwQ7/s75aAJojEwNC
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:02 2025 by rpki-client