Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A4A2CD8E11EF97C837BF762E951A.roa
File: 6D17A4A2CD8E11EF97C837BF762E951A.roa (raw, json)
Hash identifier: kuteBN2rsxjt1224rYq3KIYsq3HXBuiSg78vaAH+AJI=
Subject key identifier: F8:D7:49:83:F4:84:44:C7:9A:01:97:18:65:EA:46:62:C8:63:13:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010051
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A4A2CD8E11EF97C837BF762E951A.roa
Signing time: Wed 08 Jan 2025 07:01:47 +0000
ROA not before: Wed 08 Jan 2025 07:01:43 +0000
ROA not after: Mon 20 Jan 2025 07:01:43 +0000
asID: 395793
IP address blocks: 156.243.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65617 (0x10051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 07:01:43 2025 GMT
Not After : Jan 20 07:01:43 2025 GMT
Subject: CN=677e22db-b86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:79:c9:18:8a:3c:92:6b:2f:7f:63:e4:a9:
50:f1:8c:28:55:74:12:ba:b5:9f:ea:fd:61:d4:e2:
de:76:3f:7d:40:1d:0c:98:51:f6:a2:e6:98:2f:66:
61:e8:a1:16:4c:ca:63:58:cc:9e:47:63:58:82:01:
96:73:b8:02:e4:32:ec:a7:88:17:c3:88:c3:78:80:
0f:8e:6f:91:74:8a:27:6f:63:ee:41:0d:1d:2a:03:
4f:57:db:64:81:67:a3:46:db:7a:61:d9:57:e4:61:
7d:d4:79:07:3b:33:11:70:46:28:99:78:9e:11:57:
97:36:79:8c:30:7a:98:d4:bb:7f:e3:ef:91:8b:2d:
b4:0c:ef:c8:b3:6e:a5:e0:5d:3b:7e:58:b3:81:b5:
1f:d7:4e:70:2f:cc:51:4e:6b:80:47:13:c8:07:9a:
26:2e:fa:75:a0:0c:95:9c:41:19:b9:c5:e5:7e:03:
da:69:69:c9:78:70:60:b1:cc:60:94:81:4c:ac:44:
97:cd:3e:0f:13:bd:4e:b8:7b:57:aa:08:de:3c:b0:
5e:e3:98:8d:3e:34:6a:33:05:d4:e3:07:a8:14:a8:
ef:5e:db:49:bf:f0:de:63:ec:4d:ae:41:26:a9:90:
c9:f3:22:6a:4f:70:6e:e9:d1:5d:e5:41:16:e8:da:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:49:83:F4:84:44:C7:9A:01:97:18:65:EA:46:62:C8:63:13:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A4A2CD8E11EF97C837BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:83:ad:4b:26:e7:76:e2:5e:64:bf:d1:8b:cd:67:89:da:af:
1b:28:61:ae:db:69:92:00:89:43:64:bb:e8:c9:91:ec:e3:d2:
d3:40:48:10:21:2a:76:e8:09:ec:d5:66:f9:bc:e0:57:02:df:
c3:d7:51:6f:f2:dd:17:95:d4:e3:ec:63:7d:c9:ba:47:9b:95:
fc:b0:b7:2a:20:e9:47:59:71:3c:5f:64:1a:15:4d:1a:ac:58:
ef:98:e9:3a:ff:54:e9:93:6c:98:57:dc:51:e6:52:0a:ca:e2:
47:69:fb:0c:4a:56:3d:7f:6a:b6:10:c2:0b:a6:46:4e:d5:d2:
0a:51:9a:7f:ba:6d:bb:ce:5a:1d:f1:3a:c6:e4:ad:b7:2e:a8:
e3:5f:90:e5:be:72:74:ec:03:b5:23:3d:86:b3:62:6b:7a:b4:
80:43:d3:8b:ea:db:9e:54:cb:70:e1:09:a7:52:d8:14:fc:6e:
ac:66:db:bc:52:ad:d7:c7:a4:b2:a3:df:a2:37:2c:6d:84:ff:
72:c3:2e:00:2c:6c:af:fc:c3:e1:80:ef:5d:45:a7:1a:d5:6c:
05:dc:a9:d5:7d:e1:75:5a:c1:5b:63:41:8d:a7:f8:c4:6e:a3:
8b:19:7f:9f:5f:cb:7b:e5:d7:55:1c:65:25:df:54:0e:44:f6:
74:63:db:d9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQBRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDcwMTQzWhcNMjUwMTIwMDcwMTQzWjAYMRYw
FAYDVQQDEw02NzdlMjJkYi1iODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9N5yRiKPJJrL39j5KlQ8YwoVXQSurWf6v1h1OLedj99QB0MmFH2ouaY
L2Zh6KEWTMpjWMyeR2NYggGWc7gC5DLsp4gXw4jDeIAPjm+RdIonb2PuQQ0dKgNP
V9tkgWejRtt6YdlX5GF91HkHOzMRcEYomXieEVeXNnmMMHqY1Lt/4++Riy20DO/I
s26l4F07flizgbUf105wL8xRTmuARxPIB5omLvp1oAyVnEEZucXlfgPaaWnJeHBg
scxglIFMrESXzT4PE71OuHtXqgjePLBe45iNPjRqMwXU4weoFKjvXttJv/DeY+xN
rkEmqZDJ8yJqT3Bu6dFd5UEW6NqdXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPjX
SYP0hETHmgGXGGXqRmLIYxMrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RDE3QTRBMkNEOEUxMUVGOTdDODM3QkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPfMA0GCSqGSIb3DQEBCwUA
A4IBAQAeg61LJud24l5kv9GLzWeJ2q8bKGGu22mSAIlDZLvoyZHs49LTQEgQISp2
6Ans1Wb5vOBXAt/D11Fv8t0XldTj7GN9ybpHm5X8sLcqIOlHWXE8X2QaFU0arFjv
mOk6/1Tpk2yYV9xR5lIKyuJHafsMSlY9f2q2EMILpkZO1dIKUZp/um27zlod8TrG
5K23LqjjX5DlvnJ07AO1Iz2Gs2JrerSAQ9OL6tueVMtw4QmnUtgU/G6sZtu8Uq3X
x6Syo9+iNyxthP9ywy4ALGyv/MPhgO9dRaca1WwF3KnVfeF1WsFbY0GNp/jEbqOL
GX+fX8t75ddVHGUl31QORPZ0Y9vZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:40 2025 by rpki-client