Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6360AF0EF5CE11EFA17BE282762E951A.roa
File: 6360AF0EF5CE11EFA17BE282762E951A.roa (raw, json)
Hash identifier: O2sJOWnVJmr657rvWR2KAEBxTJ9PUO0yDq8mUem2nN0=
Subject key identifier: D6:18:16:CA:48:29:95:86:92:BB:8C:B0:EE:61:57:46:3C:74:32:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6360AF0EF5CE11EFA17BE282762E951A.roa
Signing time: Fri 28 Feb 2025 12:20:25 +0000
ROA not before: Fri 28 Feb 2025 12:20:21 +0000
ROA not after: Sun 30 Mar 2025 12:20:21 +0000
asID: 203020
IP address blocks: 156.253.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81277 (0x13d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:20:21 2025 GMT
Not After : Mar 30 12:20:21 2025 GMT
Subject: CN=67c1aa09-f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:44:5c:11:24:07:0a:7c:1e:e7:b2:05:6b:
e8:ac:23:1e:92:3b:1d:49:5b:f4:ef:0b:4a:62:cb:
e8:3e:98:77:76:e4:8f:76:8e:3c:86:56:ee:00:09:
04:8f:c3:79:0b:ea:85:a8:d8:48:76:e6:38:fe:61:
04:f6:18:47:f9:c7:62:5e:3c:22:29:4a:29:23:a0:
d7:da:5d:19:9b:0f:a2:5f:52:64:68:0e:d0:de:e6:
c1:eb:0e:a4:04:9b:0b:96:e7:6d:32:67:24:db:bd:
10:b2:a3:13:ac:1e:03:9c:1e:c4:19:3c:df:a8:bd:
d3:fd:5e:58:d3:dc:c6:72:fa:51:6e:1e:29:fb:0b:
f4:70:c3:c0:3b:5c:fd:94:27:9f:97:f4:59:9f:cb:
22:b4:db:42:ea:e8:5d:25:18:ef:e1:fc:ef:45:6d:
fb:56:c3:e0:f6:ae:d4:f1:19:74:94:d3:c9:e2:5c:
ee:4b:28:c4:b3:05:bd:93:34:2c:28:e9:eb:b0:40:
28:be:f1:ab:7c:c3:09:bc:25:7f:40:30:cb:19:5e:
37:24:19:fa:0e:bb:c3:8b:50:d1:6f:82:a1:c3:ef:
af:b6:69:89:16:80:85:e2:38:cb:be:79:5e:12:35:
59:d8:93:9a:e4:ac:53:7e:7e:38:04:b0:bc:11:22:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:16:CA:48:29:95:86:92:BB:8C:B0:EE:61:57:46:3C:74:32:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6360AF0EF5CE11EFA17BE282762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:7e:7e:ac:16:eb:24:22:63:9d:54:c9:ae:d7:e5:20:56:7f:
45:9d:87:7d:8c:1b:fe:0e:91:5b:99:f3:7c:e8:10:d5:70:9f:
24:46:e9:67:b5:5c:eb:9c:87:f5:a4:9f:c0:de:5e:a4:d6:7f:
3d:77:e2:0a:27:ff:f5:4e:b0:67:77:d9:05:05:cb:60:a3:41:
33:4f:d7:38:14:e3:85:22:5e:1a:72:d9:f9:4b:2d:f2:a5:2a:
c8:da:60:97:a9:dd:98:18:d3:39:4c:02:17:42:62:1c:28:8f:
47:dc:1c:7e:75:31:98:3f:ec:49:b1:c3:5c:0a:fc:19:84:84:
6e:3c:13:fb:39:cf:9d:be:a8:36:df:43:d0:d9:ed:73:0f:04:
95:35:95:8d:ef:d2:4e:a4:89:af:7e:13:48:72:94:7e:2d:0b:
8b:ba:41:00:80:63:33:5f:45:05:62:03:da:fc:79:60:d2:1c:
b7:5e:b5:34:75:5b:ee:7d:03:5f:ef:73:21:31:af:a7:11:2e:
d3:88:1e:9a:e5:59:1d:77:aa:40:14:05:73:87:08:2e:fd:38:
34:a2:4b:bd:74:f5:5d:61:78:01:43:bf:3a:64:d3:7a:5d:33:
b6:7b:92:68:1b:e3:86:59:3d:bd:ef:72:53:80:ce:7b:41:0f:
c0:0a:67:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT19MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTIyMDIxWhcNMjUwMzMwMTIyMDIxWjAYMRYw
FAYDVQQDEw02N2MxYWEwOS1mOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzktEXBEkBwp8HueyBWvorCMekjsdSVv07wtKYsvoPph3duSPdo48hlbu
AAkEj8N5C+qFqNhIduY4/mEE9hhH+cdiXjwiKUopI6DX2l0Zmw+iX1JkaA7Q3ubB
6w6kBJsLludtMmck270QsqMTrB4DnB7EGTzfqL3T/V5Y09zGcvpRbh4p+wv0cMPA
O1z9lCefl/RZn8sitNtC6uhdJRjv4fzvRW37VsPg9q7U8Rl0lNPJ4lzuSyjEswW9
kzQsKOnrsEAovvGrfMMJvCV/QDDLGV43JBn6DrvDi1DRb4Khw++vtmmJFoCF4jjL
vnleEjVZ2JOa5KxTfn44BLC8ESJ7VQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNYY
FspIKZWGkruMsO5hV0Y8dDJpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzYwQUYwRUY1Q0UxMUVGQTE3QkUyODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP3KMA0GCSqGSIb3DQEBCwUA
A4IBAQBPfn6sFuskImOdVMmu1+UgVn9FnYd9jBv+DpFbmfN86BDVcJ8kRulntVzr
nIf1pJ/A3l6k1n89d+IKJ//1TrBnd9kFBctgo0EzT9c4FOOFIl4actn5Sy3ypSrI
2mCXqd2YGNM5TAIXQmIcKI9H3Bx+dTGYP+xJscNcCvwZhIRuPBP7Oc+dvqg230PQ
2e1zDwSVNZWN79JOpImvfhNIcpR+LQuLukEAgGMzX0UFYgPa/Hlg0hy3XrU0dVvu
fQNf73MhMa+nES7TiB6a5Vkdd6pAFAVzhwgu/Tg0oku9dPVdYXgBQ786ZNN6XTO2
e5JoG+OGWT2973JTgM57QQ/ACmdo
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:23 2025 by rpki-client