Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE7E2E8CE7A11EF803EDCA0762E951A.roa
File: 7BE7E2E8CE7A11EF803EDCA0762E951A.roa (raw, json)
Hash identifier: TyONr+A97crQ4Xh3nJgkb+WE23Lv07r8vYi5rJkkSjs=
Subject key identifier: B8:F3:FA:2C:D9:11:3A:4C:DC:1C:71:26:94:F3:89:FB:2E:6B:EF:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010343
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE7E2E8CE7A11EF803EDCA0762E951A.roa
Signing time: Thu 09 Jan 2025 11:11:33 +0000
ROA not before: Thu 09 Jan 2025 11:11:30 +0000
ROA not after: Wed 22 Jan 2025 11:11:30 +0000
asID: 22773
IP address blocks: 156.238.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66371 (0x10343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:11:30 2025 GMT
Not After : Jan 22 11:11:30 2025 GMT
Subject: CN=677faee5-7898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:b6:b9:3b:a6:f2:fc:75:13:44:b0:28:72:
2f:f8:0d:ff:bb:35:d7:92:2d:d0:c6:b4:19:e3:2a:
64:18:68:73:9c:0d:05:2d:4d:5c:c7:67:c0:ee:18:
a8:b8:ec:50:c7:68:f4:4c:4e:ed:f4:d5:48:a5:7f:
2b:26:61:15:10:34:d0:72:e3:b8:ed:19:53:2d:b4:
1c:ad:97:14:ff:e6:69:70:f6:5a:cb:8a:d9:d2:08:
5f:e0:35:ac:d0:f0:66:c7:3c:6d:64:47:18:01:64:
08:1e:06:8b:b8:5f:ba:c6:4e:38:59:34:40:f7:76:
b4:91:bb:24:52:44:7d:bc:55:15:1f:46:73:99:fe:
b4:53:1c:aa:28:58:f8:88:b1:60:2b:4d:b2:1c:d5:
38:9d:9f:70:9a:97:a3:4c:ed:9a:cb:06:5a:9b:e6:
01:81:a9:e0:de:39:7c:91:81:31:0c:1f:cb:a3:56:
7f:d0:63:e4:ba:d4:c0:4f:ff:f7:36:5f:38:77:f1:
96:3c:22:af:59:c3:b1:8e:28:04:45:26:b8:eb:38:
5f:60:d6:4d:d5:3f:f0:ea:ca:8f:5e:3a:4d:0a:92:
47:20:8b:6b:f0:1e:8d:b7:c9:43:f0:de:9c:b1:61:
13:8b:16:b1:dc:a5:d7:67:ef:87:42:ab:d4:cf:16:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:FA:2C:D9:11:3A:4C:DC:1C:71:26:94:F3:89:FB:2E:6B:EF:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE7E2E8CE7A11EF803EDCA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0e:ef:d9:65:80:d9:8f:4f:10:04:55:29:98:e2:aa:f5:e4:
92:8a:7c:da:29:aa:f3:df:ac:3a:ad:54:e6:e5:fc:38:84:91:
eb:c6:ed:76:7b:e4:3e:12:60:26:52:96:47:da:f3:86:99:c6:
b4:14:3b:70:dc:9f:91:00:64:12:26:e7:ca:26:c7:b2:0f:7e:
db:c3:ec:37:cb:11:0b:da:b4:d8:b6:d5:39:12:45:87:a7:00:
fa:21:9f:3a:3a:63:6e:ac:ff:db:a4:40:87:b1:cd:24:26:bc:
ce:db:4d:ca:0f:86:59:ee:1a:88:4d:3d:86:2d:65:05:c1:07:
8b:06:27:d9:87:22:7d:3b:86:93:5c:50:f3:90:9c:d2:ad:7c:
10:54:31:10:b5:5b:05:41:09:6a:74:0f:2d:cf:5d:77:04:c3:
02:18:4b:45:14:7f:b1:82:1e:17:00:91:ae:5f:3d:4e:37:64:
9c:f5:9a:27:53:db:7c:a2:8c:cf:d3:86:6c:51:fd:79:2c:07:
8b:bc:d6:ab:5b:2c:36:fb:30:3e:09:5f:4f:cf:dc:54:14:79:
77:2b:19:e2:9e:0c:5f:d5:26:74:d2:ba:33:dd:0a:ce:0b:64:
a3:39:08:e5:40:2b:a6:36:79:91:73:08:1c:ed:8e:de:12:bf:
5a:68:89:c6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQNDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTExMTMwWhcNMjUwMTIyMTExMTMwWjAYMRYw
FAYDVQQDEw02NzdmYWVlNS03ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAre62uTum8vx1E0SwKHIv+A3/uzXXki3QxrQZ4ypkGGhznA0FLU1cx2fA
7hiouOxQx2j0TE7t9NVIpX8rJmEVEDTQcuO47RlTLbQcrZcU/+ZpcPZay4rZ0ghf
4DWs0PBmxzxtZEcYAWQIHgaLuF+6xk44WTRA93a0kbskUkR9vFUVH0Zzmf60Uxyq
KFj4iLFgK02yHNU4nZ9wmpejTO2aywZam+YBgang3jl8kYExDB/Lo1Z/0GPkutTA
T//3Nl84d/GWPCKvWcOxjigERSa46zhfYNZN1T/w6sqPXjpNCpJHIItr8B6Nt8lD
8N6csWETixax3KXXZ++HQqvUzxZrYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLjz
+izZETpM3BxxJpTzifsua+/5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QkU3RTJFOENFN0ExMUVGODAzRURDQTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO4NMA0GCSqGSIb3DQEBCwUA
A4IBAQBbDu/ZZYDZj08QBFUpmOKq9eSSinzaKarz36w6rVTm5fw4hJHrxu12e+Q+
EmAmUpZH2vOGmca0FDtw3J+RAGQSJufKJseyD37bw+w3yxEL2rTYttU5EkWHpwD6
IZ86OmNurP/bpECHsc0kJrzO203KD4ZZ7hqITT2GLWUFwQeLBifZhyJ9O4aTXFDz
kJzSrXwQVDEQtVsFQQlqdA8tz113BMMCGEtFFH+xgh4XAJGuXz1ON2Sc9ZonU9t8
oozP04ZsUf15LAeLvNarWyw2+zA+CV9Pz9xUFHl3Kxningxf1SZ00roz3QrOC2Sj
OQjlQCumNnmRcwgc7Y7eEr9aaInG
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:25 2025 by rpki-client