Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/748B4EC0BD1011EF9BFCA39D762E951A.roa
File: 748B4EC0BD1011EF9BFCA39D762E951A.roa (raw, json)
Hash identifier: fo5X+8+OETHO8yOvbpTXJqEJlhAVafMCaj0ZsNeBIxY=
Subject key identifier: 2B:36:9C:5E:B8:D1:B6:EF:2C:28:4B:20:61:2E:C4:F9:86:7B:86:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E47C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/748B4EC0BD1011EF9BFCA39D762E951A.roa
Signing time: Wed 18 Dec 2024 07:19:44 +0000
ROA not before: Wed 18 Dec 2024 07:19:41 +0000
ROA not after: Thu 23 Jan 2025 07:19:41 +0000
asID: 203020
IP address blocks: 156.243.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58492 (0xe47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:19:41 2024 GMT
Not After : Jan 23 07:19:41 2025 GMT
Subject: CN=67627790-645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:5b:96:14:80:5e:3a:a0:1a:d3:e6:6f:f5:
82:a6:ee:7d:67:47:02:fa:b4:03:55:6c:5c:84:aa:
c6:22:07:82:13:2d:f5:3a:c2:9d:02:a0:36:48:10:
84:10:36:e0:28:a3:73:50:9b:bb:f7:39:bc:07:a3:
0c:bc:63:83:d3:3f:2a:62:55:95:c1:33:51:4d:f7:
25:13:7f:b7:69:70:da:0c:5a:9b:c2:87:1c:78:35:
6a:e6:99:58:4b:4d:6f:11:06:ec:d2:2b:3a:68:a5:
75:c0:a8:13:fb:76:ac:1b:42:2e:fb:48:b0:9d:b7:
ba:4c:2d:62:93:d4:d4:06:81:05:fe:53:fd:1f:77:
73:f9:ac:7f:0b:49:5a:1b:55:9d:6f:ae:0e:66:a7:
b6:b5:4e:6b:b2:d6:13:eb:ea:22:ba:5b:54:72:61:
96:48:bb:83:5b:63:e4:41:35:55:db:5a:a9:33:47:
35:38:d2:7e:e7:8d:40:4f:a1:d4:19:5b:b4:e9:01:
0c:ef:47:a0:3c:85:0a:18:42:aa:27:22:87:96:aa:
aa:f9:7f:5f:f8:7e:82:8c:2b:4d:b9:04:80:e2:ea:
ae:5b:29:b3:e3:56:7b:70:30:8d:c3:db:8f:25:0e:
1c:cd:2f:de:73:05:20:de:88:49:be:ee:e5:15:c0:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:9C:5E:B8:D1:B6:EF:2C:28:4B:20:61:2E:C4:F9:86:7B:86:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/748B4EC0BD1011EF9BFCA39D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:21:1b:2a:12:8d:92:8c:16:d4:ec:69:0a:a0:26:a2:00:08:
86:35:61:60:fa:45:b1:90:9b:5b:0d:e4:5d:7b:85:ae:fe:30:
62:32:d0:11:ce:02:85:cf:18:4e:4f:db:c6:5d:b1:c1:f7:00:
72:b0:b4:72:9f:92:d9:eb:78:0a:5b:18:10:c4:b2:a2:06:7f:
65:32:75:2f:97:f5:d9:ed:b7:82:bb:5b:c6:36:bf:7b:f2:79:
1a:d4:d0:de:11:2d:6f:b4:56:68:fe:bd:a4:06:3e:3b:90:92:
42:c6:f1:14:16:6d:4a:94:82:5b:04:5e:54:3e:c1:c2:b4:a1:
1d:3a:a3:ee:80:1b:ff:25:44:59:52:03:86:3c:84:68:17:9c:
43:88:29:24:bf:45:65:20:dd:38:7b:1e:46:13:6a:59:84:a5:
09:ad:b9:ad:46:53:2c:7e:9d:e7:49:aa:39:62:51:60:14:47:
3d:79:7d:59:8a:3d:7b:cf:da:d6:2a:07:7d:f6:0b:09:c2:1b:
9d:36:69:b2:bc:63:ed:75:72:0d:9c:36:e5:ac:ae:ce:83:c8:
f8:af:48:31:9f:cc:b9:78:ad:6c:c2:f7:fd:98:47:0b:8c:6e:
17:db:5c:91:82:09:4c:50:6e:e0:ba:09:c2:a6:94:97:60:36:
bd:48:c5:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOR8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE4MDcxOTQxWhcNMjUwMTIzMDcxOTQxWjAYMRYw
FAYDVQQDEw02NzYyNzc5MC02NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvqBblhSAXjqgGtPmb/WCpu59Z0cC+rQDVWxchKrGIgeCEy31OsKdAqA2
SBCEEDbgKKNzUJu79zm8B6MMvGOD0z8qYlWVwTNRTfclE3+3aXDaDFqbwocceDVq
5plYS01vEQbs0is6aKV1wKgT+3asG0Iu+0iwnbe6TC1ik9TUBoEF/lP9H3dz+ax/
C0laG1Wdb64OZqe2tU5rstYT6+oiultUcmGWSLuDW2PkQTVV21qpM0c1ONJ+541A
T6HUGVu06QEM70egPIUKGEKqJyKHlqqq+X9f+H6CjCtNuQSA4uquWymz41Z7cDCN
w9uPJQ4czS/ecwUg3ohJvu7lFcBjfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCs2
nF640bbvLChLIGEuxPmGe4bNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDhCNEVDMEJEMTAxMUVGOUJGQ0EzOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPOfMA0GCSqGSIb3DQEBCwUA
A4IBAQBgIRsqEo2SjBbU7GkKoCaiAAiGNWFg+kWxkJtbDeRde4Wu/jBiMtARzgKF
zxhOT9vGXbHB9wBysLRyn5LZ63gKWxgQxLKiBn9lMnUvl/XZ7beCu1vGNr978nka
1NDeES1vtFZo/r2kBj47kJJCxvEUFm1KlIJbBF5UPsHCtKEdOqPugBv/JURZUgOG
PIRoF5xDiCkkv0VlIN04ex5GE2pZhKUJrbmtRlMsfp3nSao5YlFgFEc9eX1Zij17
z9rWKgd99gsJwhudNmmyvGPtdXINnDblrK7Og8j4r0gxn8y5eK1swvf9mEcLjG4X
21yRgglMUG7gugnCppSXYDa9SMXl
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:09 2025 by rpki-client