Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B47C4AB92511EF9D2A707D762E951A.roa
File: 82B47C4AB92511EF9D2A707D762E951A.roa (raw, json)
Hash identifier: G0D3QbugyiBxG9PC60oLa8o1A+4ql5wDZ+IwZBnxAUM=
Subject key identifier: 34:EF:92:F0:56:80:FB:52:D6:51:A1:0B:66:FF:A1:1B:05:4A:D8:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E301
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B47C4AB92511EF9D2A707D762E951A.roa
Signing time: Fri 13 Dec 2024 07:40:23 +0000
ROA not before: Fri 13 Dec 2024 07:40:19 +0000
ROA not after: Sat 25 Jan 2025 07:40:19 +0000
asID: 44559
IP address blocks: 156.246.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58113 (0xe301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:40:19 2024 GMT
Not After : Jan 25 07:40:19 2025 GMT
Subject: CN=675be4e7-0724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:68:74:c1:f7:86:35:30:09:95:12:6f:d4:
d1:de:9f:65:bc:6f:a6:62:f5:45:17:8f:1d:7f:6e:
86:6f:75:20:33:aa:a4:c4:39:a2:d4:0e:16:a7:f3:
a3:39:82:41:32:9d:16:ec:03:8a:44:9a:5d:62:f1:
d4:3f:39:e0:a0:df:82:f6:4c:13:16:1b:6d:99:43:
4c:35:cf:c3:ff:16:49:46:42:90:f2:9a:34:8b:e7:
c6:32:41:59:e9:ff:e7:b1:17:12:f4:43:b0:fa:78:
9b:a3:0c:6d:b4:01:ff:fb:42:6d:85:39:75:69:42:
90:ad:bf:0d:c8:d6:7a:aa:9a:1a:ac:68:54:75:8b:
f0:e5:35:4d:cb:64:0c:a8:7f:08:bd:45:61:23:87:
37:61:0f:7d:4a:15:7e:c1:f9:00:b3:ff:f7:e7:df:
c4:47:b1:24:5f:28:37:19:3a:76:e3:05:0a:d8:56:
a8:f8:e9:18:2d:65:0c:7c:c1:51:c7:1c:84:ab:da:
79:c3:1a:48:01:ab:db:1c:b9:74:b7:dd:c6:a7:08:
37:78:4e:0c:fc:dd:92:88:3e:af:bf:d8:3d:33:bd:
ed:6e:eb:25:df:f0:fc:e2:97:82:63:49:6b:2a:3d:
37:0d:ff:c6:2e:01:6c:14:ba:67:40:19:46:b8:ae:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:92:F0:56:80:FB:52:D6:51:A1:0B:66:FF:A1:1B:05:4A:D8:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B47C4AB92511EF9D2A707D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/21
Signature Algorithm: sha256WithRSAEncryption
99:99:5c:57:11:a4:08:93:c4:8c:81:b4:2f:32:07:71:f9:aa:
23:79:be:31:20:9b:7d:d4:23:37:b1:bc:63:9b:f2:76:b9:a7:
47:3d:a0:31:62:17:a3:a9:97:f1:d6:7f:5c:e4:24:9b:56:d7:
a0:4e:1e:cc:f1:f1:99:00:e6:1c:b6:30:c7:24:d9:6a:83:d5:
ab:20:cd:09:53:7c:ad:cf:23:3f:58:e7:d6:75:c9:50:fa:99:
92:22:fd:e6:f4:62:ec:00:04:38:7f:d2:5f:c4:0b:52:36:1b:
05:7d:7c:b9:27:c0:61:5d:92:27:54:d9:09:14:88:ef:9c:f0:
4e:f9:a3:91:31:11:45:d4:50:25:fd:35:3c:70:3d:78:a7:61:
ce:da:f4:32:df:46:3f:2a:a6:5c:83:1f:4c:d7:dd:7d:f7:ca:
22:1a:14:3a:46:d7:3d:7a:1b:11:54:6d:df:e7:8b:b0:8d:fb:
6f:2b:02:bf:89:80:d5:41:a2:bd:94:96:e8:02:0d:12:88:93:
8d:6f:bd:ce:03:7b:3f:98:b1:6e:05:19:18:42:55:02:c9:ec:
30:d1:dd:a8:c3:40:71:b0:5b:7a:ec:29:77:26:98:67:1a:19:
db:d5:90:5f:af:1b:ca:4b:bb:c3:1d:13:3d:5d:22:81:26:11:
aa:25:d5:75
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOMBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDc0MDE5WhcNMjUwMTI1MDc0MDE5WjAYMRYw
FAYDVQQDEw02NzViZTRlNy0wNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1A1odMH3hjUwCZUSb9TR3p9lvG+mYvVFF48df26Gb3UgM6qkxDmi1A4W
p/OjOYJBMp0W7AOKRJpdYvHUPzngoN+C9kwTFhttmUNMNc/D/xZJRkKQ8po0i+fG
MkFZ6f/nsRcS9EOw+nibowxttAH/+0JthTl1aUKQrb8NyNZ6qpoarGhUdYvw5TVN
y2QMqH8IvUVhI4c3YQ99ShV+wfkAs//359/ER7EkXyg3GTp24wUK2Fao+OkYLWUM
fMFRxxyEq9p5wxpIAavbHLl0t93Gpwg3eE4M/N2SiD6vv9g9M73tbusl3/D84peC
Y0lrKj03Df/GLgFsFLpnQBlGuK5bbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDTv
kvBWgPtS1lGhC2b/oRsFSthiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkI0N0M0QUI5MjUxMUVGOUQyQTcwN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPaoMA0GCSqGSIb3DQEBCwUA
A4IBAQCZmVxXEaQIk8SMgbQvMgdx+aojeb4xIJt91CM3sbxjm/J2uadHPaAxYhej
qZfx1n9c5CSbVtegTh7M8fGZAOYctjDHJNlqg9WrIM0JU3ytzyM/WOfWdclQ+pmS
Iv3m9GLsAAQ4f9JfxAtSNhsFfXy5J8BhXZInVNkJFIjvnPBO+aORMRFF1FAl/TU8
cD14p2HO2vQy30Y/KqZcgx9M191998oiGhQ6Rtc9ehsRVG3f54uwjftvKwK/iYDV
QaK9lJboAg0SiJONb73OA3s/mLFuBRkYQlUCyeww0d2ow0BxsFt67Cl3JphnGhnb
1ZBfrxvKS7vDHRM9XSKBJhGqJdV1
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:40 2025 by rpki-client