Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D0F2BCCE5C11EFA0E66464762E951A.roa
File: 63D0F2BCCE5C11EFA0E66464762E951A.roa (raw, json)
Hash identifier: 2MMT7SUOfbfPHX2ETm6EVxCX1DPcKatbkGjSqM1L4eo=
Subject key identifier: 27:37:42:7C:58:DC:51:CF:94:53:4F:D6:10:B1:1D:07:9C:A5:DC:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D0F2BCCE5C11EFA0E66464762E951A.roa
Signing time: Thu 09 Jan 2025 07:36:08 +0000
ROA not before: Thu 09 Jan 2025 07:36:04 +0000
ROA not after: Wed 22 Jan 2025 07:36:04 +0000
asID: 5065
IP address blocks: 156.246.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66298 (0x102fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:36:04 2025 GMT
Not After : Jan 22 07:36:04 2025 GMT
Subject: CN=677f7c68-30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:51:c0:33:cc:96:aa:da:3b:3f:3a:f2:fc:
02:c2:98:2e:1e:19:58:11:ee:42:9a:61:d3:c9:eb:
99:67:33:75:0a:e0:4c:53:65:5f:52:d2:19:ac:e4:
b5:8a:4a:8a:76:f3:91:ad:7d:0d:38:61:06:37:24:
ae:0f:c6:78:9c:70:e0:68:cf:a3:54:cb:b3:80:35:
22:ea:36:b2:00:ec:87:69:04:b9:97:38:44:be:57:
ec:39:13:52:11:1d:f8:6d:ed:41:8f:d0:90:48:bc:
29:f8:7c:05:38:a2:68:11:62:c4:c6:38:d6:69:09:
35:d6:18:d5:b2:c4:c3:c7:e5:12:69:b4:fe:6f:45:
bd:4d:c9:79:6f:e7:80:9d:86:ca:db:f9:d2:b1:10:
de:ff:19:c8:f5:c2:b5:e3:a2:5b:93:2b:6b:2f:8a:
80:d5:4a:bb:59:d4:23:65:29:f3:2d:73:48:e0:2a:
7f:b7:5a:a0:81:68:71:52:0e:11:1b:b3:78:be:77:
89:63:cc:34:77:b0:df:d4:20:9c:7c:0e:ee:28:af:
2e:11:6f:a7:9d:f6:af:55:29:72:ac:06:f0:d9:1e:
32:2c:11:20:e0:41:d8:ee:5c:9b:cc:d4:26:61:9b:
e1:ba:6c:9c:67:7e:2f:f6:da:f1:f1:e9:d3:92:35:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:42:7C:58:DC:51:CF:94:53:4F:D6:10:B1:1D:07:9C:A5:DC:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D0F2BCCE5C11EFA0E66464762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.86.0/24
Signature Algorithm: sha256WithRSAEncryption
91:01:1a:9d:72:ac:d9:eb:93:55:5f:20:38:ba:74:78:63:07:
86:e8:6b:05:09:93:a8:f4:14:6c:06:1d:c3:22:ac:c5:51:6c:
52:f5:15:6f:af:dd:e6:5c:1d:7d:76:16:98:6b:48:a3:4e:98:
8b:44:cf:89:f9:54:46:5d:bf:f5:3e:32:f0:d2:56:90:e5:58:
b9:9b:ca:72:e7:bd:b4:87:ee:39:fd:cb:48:b3:39:9c:60:a1:
9f:4c:21:67:0f:86:a5:f3:91:08:5c:bc:d0:8a:0b:c7:b5:6b:
f1:81:ce:77:5a:ea:f4:a2:4c:75:1e:03:86:6e:bd:bb:c3:a0:
2c:b1:4a:a9:4b:b6:c3:10:69:51:71:22:bc:ad:48:4e:21:ed:
97:12:7e:ff:8a:d6:12:e4:34:ba:b8:98:47:09:04:d7:71:1b:
4f:a7:3b:fa:86:5a:a5:18:88:e8:3e:78:54:17:e2:e3:91:71:
e4:b3:7d:92:d1:ea:dc:ed:73:4c:d9:51:76:20:9c:f2:3f:a0:
15:11:d9:32:4f:f4:63:ae:2f:6d:cf:c0:1d:2a:64:20:8c:9d:
d2:cc:4f:20:ea:1e:e7:67:06:56:65:fe:20:a0:75:93:c1:2a:
5e:d0:31:50:98:58:f2:1a:68:15:c2:83:a8:c1:4c:a9:0a:8f:
a9:6a:24:8e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQL6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDczNjA0WhcNMjUwMTIyMDczNjA0WjAYMRYw
FAYDVQQDEw02NzdmN2M2OC0zMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1uJRwDPMlqraOz868vwCwpguHhlYEe5CmmHTyeuZZzN1CuBMU2VfUtIZ
rOS1ikqKdvORrX0NOGEGNySuD8Z4nHDgaM+jVMuzgDUi6jayAOyHaQS5lzhEvlfs
ORNSER34be1Bj9CQSLwp+HwFOKJoEWLExjjWaQk11hjVssTDx+USabT+b0W9Tcl5
b+eAnYbK2/nSsRDe/xnI9cK146JbkytrL4qA1Uq7WdQjZSnzLXNI4Cp/t1qggWhx
Ug4RG7N4vneJY8w0d7Df1CCcfA7uKK8uEW+nnfavVSlyrAbw2R4yLBEg4EHY7lyb
zNQmYZvhumycZ34v9trx8enTkjVkEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCc3
QnxY3FHPlFNP1hCxHQecpdx4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0QwRjJCQ0NFNUMxMUVGQTBFNjY0NjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPZWMA0GCSqGSIb3DQEBCwUA
A4IBAQCRARqdcqzZ65NVXyA4unR4YweG6GsFCZOo9BRsBh3DIqzFUWxS9RVvr93m
XB19dhaYa0ijTpiLRM+J+VRGXb/1PjLw0laQ5Vi5m8py5720h+45/ctIszmcYKGf
TCFnD4al85EIXLzQigvHtWvxgc53Wur0okx1HgOGbr27w6AssUqpS7bDEGlRcSK8
rUhOIe2XEn7/itYS5DS6uJhHCQTXcRtPpzv6hlqlGIjoPnhUF+LjkXHks32S0erc
7XNM2VF2IJzyP6AVEdkyT/Rjri9tz8AdKmQgjJ3SzE8g6h7nZwZWZf4goHWTwSpe
0DFQmFjyGmgVwoOowUypCo+paiSO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:07 2025 by rpki-client