Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF1AF2EB21911EF87E456A6762E951A.roa
File: 6EF1AF2EB21911EF87E456A6762E951A.roa (raw, json)
Hash identifier: fuLgPBW8+fEO8ShY9sbvq9LVfIDzibJdbmL6mEnGHk0=
Subject key identifier: 16:51:41:A2:9C:A8:85:B5:29:82:C4:53:B1:A3:66:0D:6C:6E:C3:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF1AF2EB21911EF87E456A6762E951A.roa
Signing time: Wed 04 Dec 2024 08:26:18 +0000
ROA not before: Wed 04 Dec 2024 08:26:14 +0000
ROA not after: Thu 23 Jan 2025 08:26:14 +0000
asID: 63139
IP address blocks: 156.229.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57202 (0xdf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:26:14 2024 GMT
Not After : Jan 23 08:26:14 2025 GMT
Subject: CN=6750122a-b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:8a:d5:ff:e1:b0:13:75:09:8c:f7:ee:a3:
f9:0c:cf:d7:0b:d1:90:78:10:75:fe:d6:ed:3c:ff:
f6:69:49:3a:f3:dd:84:ad:3e:dc:af:4f:f9:1f:a6:
07:0f:25:52:ad:05:ea:7d:ce:03:24:6c:b0:e5:a1:
e8:14:71:c9:bd:92:6c:5c:e9:cb:8b:58:a0:41:7c:
f3:fc:10:96:5c:2a:a7:8c:b5:14:88:62:f9:1e:30:
5f:f1:f4:e1:c4:3d:cc:4b:64:df:2c:9d:23:5d:0f:
14:ee:1c:01:48:65:c9:e0:e1:76:44:0e:4c:31:94:
97:67:59:e3:57:77:af:31:49:37:69:2f:26:ed:92:
95:0a:6f:91:15:40:9c:d3:7c:8c:1b:b4:ad:aa:ba:
af:61:35:18:fc:bc:ae:2f:a3:90:cc:1b:d9:97:76:
8b:75:a0:ed:e5:32:3c:32:25:ba:1b:f4:7a:a5:c2:
57:f6:bf:9c:e0:8c:8b:f6:20:bb:2a:79:6f:f5:7d:
50:e2:77:c4:9c:0b:ab:2b:11:8b:8a:9a:9c:af:09:
b2:d7:cd:f8:e7:3e:41:fd:ea:1f:7c:64:7a:55:43:
eb:c6:66:9d:aa:02:5b:21:5d:c8:4e:4b:c9:4a:14:
ef:fd:36:ae:4b:4d:e9:ec:a8:02:3f:5b:6a:82:d7:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:41:A2:9C:A8:85:B5:29:82:C4:53:B1:A3:66:0D:6C:6E:C3:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF1AF2EB21911EF87E456A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:0c:d4:37:83:d9:ca:f5:33:01:86:1a:07:6d:a5:ec:cb:50:
3a:60:e6:cf:5e:dd:75:b3:c4:82:8a:31:14:22:18:2e:e3:00:
38:a5:46:db:dc:44:82:22:f5:2a:8b:dc:88:a9:df:a3:a3:b4:
b2:95:3a:b9:d8:66:a9:3c:94:24:8a:a4:44:11:c4:fa:1f:7a:
da:6e:41:be:a1:1f:e7:56:9d:ce:30:dd:d4:3a:3a:2c:b5:92:
5b:9a:f9:5c:37:2c:ac:83:98:a1:ab:67:5b:61:ab:d7:87:31:
43:ae:3f:10:9f:54:57:18:2c:20:3d:d3:6d:a0:35:c1:aa:fc:
b3:73:42:f2:d7:5a:64:2e:aa:ba:2c:24:29:43:00:20:74:69:
d6:b8:5d:93:fa:2c:bb:da:6a:a8:28:2c:ea:98:60:4b:d4:78:
bc:a8:15:ae:04:b6:e2:48:f9:25:92:28:90:32:c4:3d:4d:6a:
5d:84:1d:c9:a8:fa:93:4c:9c:17:5e:ed:3b:d0:87:41:a6:45:
3a:54:dc:1f:43:74:c7:fa:1c:01:3a:7d:5f:74:5f:37:b5:96:
b0:3b:54:d0:62:80:9c:ba:5d:7e:cf:f9:ae:eb:c6:57:0f:2d:
4d:8e:9f:ea:73:c8:44:3c:6f:ea:10:8b:ce:11:6b:1a:fa:03:
06:8f:cb:1e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAN9yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA0MDgyNjE0WhcNMjUwMTIzMDgyNjE0WjAYMRYw
FAYDVQQDEw02NzUwMTIyYS1iOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA20uK1f/hsBN1CYz37qP5DM/XC9GQeBB1/tbtPP/2aUk6892ErT7cr0/5
H6YHDyVSrQXqfc4DJGyw5aHoFHHJvZJsXOnLi1igQXzz/BCWXCqnjLUUiGL5HjBf
8fThxD3MS2TfLJ0jXQ8U7hwBSGXJ4OF2RA5MMZSXZ1njV3evMUk3aS8m7ZKVCm+R
FUCc03yMG7StqrqvYTUY/LyuL6OQzBvZl3aLdaDt5TI8MiW6G/R6pcJX9r+c4IyL
9iC7Knlv9X1Q4nfEnAurKxGLipqcrwmy18345z5B/eoffGR6VUPrxmadqgJbIV3I
TkvJShTv/TauS03p7KgCP1tqgtcHgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBZR
QaKcqIW1KYLEU7GjZg1sbsN2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RUYxQUYyRUIyMTkxMUVGODdFNDU2QTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOVAMA0GCSqGSIb3DQEBCwUA
A4IBAQB/DNQ3g9nK9TMBhhoHbaXsy1A6YObPXt11s8SCijEUIhgu4wA4pUbb3ESC
IvUqi9yIqd+jo7SylTq52GapPJQkiqREEcT6H3rabkG+oR/nVp3OMN3UOjostZJb
mvlcNyysg5ihq2dbYavXhzFDrj8Qn1RXGCwgPdNtoDXBqvyzc0Ly11pkLqq6LCQp
QwAgdGnWuF2T+iy72mqoKCzqmGBL1Hi8qBWuBLbiSPklkiiQMsQ9TWpdhB3JqPqT
TJwXXu070IdBpkU6VNwfQ3TH+hwBOn1fdF83tZawO1TQYoCcul1+z/mu68ZXDy1N
jp/qc8hEPG/qEIvOEWsa+gMGj8se
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:32 2025 by rpki-client