Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB02D88D22211EFA508E644762E951A.roa
File: 8BB02D88D22211EFA508E644762E951A.roa (raw, json)
Hash identifier: KDwr5x8Oq8P/tYBuDCcJGUvLskljYM609GoynN7+Plc=
Subject key identifier: 43:D8:49:6C:EB:BE:2C:6C:DB:DF:A3:E7:4E:01:A2:09:B0:64:C2:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB02D88D22211EFA508E644762E951A.roa
Signing time: Tue 14 Jan 2025 02:52:09 +0000
ROA not before: Tue 14 Jan 2025 02:52:05 +0000
ROA not after: Tue 21 Jan 2025 02:52:05 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67236 (0x106a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 02:52:05 2025 GMT
Not After : Jan 21 02:52:05 2025 GMT
Subject: CN=6785d158-9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:0b:27:f6:e1:59:bb:4e:f1:77:90:31:8a:
ab:fa:19:37:43:ee:1c:df:27:0e:0f:0b:79:00:a7:
d8:2b:c3:78:a6:30:4f:f5:9a:62:4f:52:11:a5:b0:
9b:2a:d4:8d:9a:d8:d4:e8:91:7a:dc:11:34:10:2f:
03:be:5e:6f:70:2c:ce:bc:b9:2b:59:8a:a3:27:c4:
50:e0:24:52:33:88:29:76:a5:2e:76:6a:ba:3c:5d:
f5:5f:22:7b:3c:b9:ef:46:f3:64:e4:d2:4d:58:08:
eb:72:6d:1b:45:28:38:f1:38:6e:37:13:45:9c:0b:
c0:1f:2e:06:c1:44:3c:2f:a8:ac:5c:f2:ff:74:83:
96:11:8f:f9:77:38:b2:93:9c:25:ad:96:87:8b:6c:
12:a6:e1:d4:7c:be:63:a3:3b:8a:7f:f5:07:9d:e7:
60:36:f0:f9:03:e8:54:c2:46:42:f6:52:85:48:48:
09:62:a5:f6:5e:26:15:0f:b8:05:cb:73:b8:e3:27:
31:85:03:56:51:57:e5:b7:f6:bf:27:e1:8d:b4:fc:
47:35:82:79:89:9e:63:04:7d:e8:41:88:2e:e3:05:
7d:f0:04:a1:2a:7c:b5:1e:39:5a:49:41:ac:2e:ef:
45:3b:1a:0e:f2:2b:ee:21:5f:da:25:6e:92:23:db:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:49:6C:EB:BE:2C:6C:DB:DF:A3:E7:4E:01:A2:09:B0:64:C2:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB02D88D22211EFA508E644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:0a:eb:b5:6c:8e:50:26:b2:b0:e2:0b:8e:d9:ad:11:a2:b1:
fa:b7:c8:6d:d3:ea:af:87:49:af:09:73:ee:55:ae:22:20:d1:
cd:e2:2c:a0:81:a0:24:61:3d:b1:b7:86:a7:39:cd:06:b1:2e:
20:a1:dc:77:aa:c6:2e:8d:a1:22:4f:db:45:32:21:d9:2c:f6:
ba:19:88:fb:3f:c4:24:e0:48:a0:d2:79:cf:24:81:8e:84:82:
64:df:b3:05:9f:38:03:6d:1e:a2:ed:78:32:8c:43:08:ae:e7:
3a:33:9e:12:fa:fa:e3:17:61:fc:df:e1:10:2b:82:a2:ea:ff:
3d:9b:34:6a:a4:08:af:ac:53:06:33:b7:c7:6b:f9:fa:49:3c:
60:33:50:f7:fa:72:4c:87:fb:4a:ef:b5:5c:76:a5:be:21:86:
8c:05:a2:13:5e:90:ca:a3:ce:1c:d2:e6:c8:e6:71:fe:67:cd:
38:ae:40:87:77:82:b7:3d:d3:8a:3f:63:66:14:83:f5:51:05:
f4:f8:88:44:4e:e1:0d:1a:34:37:5d:1d:0e:b0:87:e4:bc:f4:
0c:1d:fe:00:37:ab:5b:82:2c:1d:12:a5:10:d1:79:7c:73:2c:
ed:e4:80:bb:76:42:5f:6e:89:5a:95:94:31:62:a5:5c:f6:91:
13:e5:dc:33
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAQakMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE0MDI1MjA1WhcNMjUwMTIxMDI1MjA1WjAYMRYw
FAYDVQQDEw02Nzg1ZDE1OC05Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAws8LJ/bhWbtO8XeQMYqr+hk3Q+4c3ycODwt5AKfYK8N4pjBP9ZpiT1IR
pbCbKtSNmtjU6JF63BE0EC8Dvl5vcCzOvLkrWYqjJ8RQ4CRSM4gpdqUudmq6PF31
XyJ7PLnvRvNk5NJNWAjrcm0bRSg48ThuNxNFnAvAHy4GwUQ8L6isXPL/dIOWEY/5
dziyk5wlrZaHi2wSpuHUfL5jozuKf/UHnedgNvD5A+hUwkZC9lKFSEgJYqX2XiYV
D7gFy3O44ycxhQNWUVflt/a/J+GNtPxHNYJ5iZ5jBH3oQYgu4wV98AShKny1Hjla
SUGsLu9FOxoO8ivuIV/aJW6SI9sRSQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEPY
SWzrvixs29+j504BogmwZMJ+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QkIwMkQ4OEQyMjIxMUVGQTUwOEU2NDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBAHIK67VsjlAmsrDiC47ZrRGisfq3yG3T6q+HSa8Jc+5VriIg0c3iLKCBoCRh
PbG3hqc5zQaxLiCh3Heqxi6NoSJP20UyIdks9roZiPs/xCTgSKDSec8kgY6EgmTf
swWfOANtHqLteDKMQwiu5zoznhL6+uMXYfzf4RArgqLq/z2bNGqkCK+sUwYzt8dr
+fpJPGAzUPf6ckyH+0rvtVx2pb4hhowFohNekMqjzhzS5sjmcf5nzTiuQId3grc9
04o/Y2YUg/VRBfT4iERO4Q0aNDddHQ6wh+S89Awd/gA3q1uCLB0SpRDReXxzLO3k
gLt2Ql9uiVqVlDFipVz2kRPl3DM=
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:51 2025 by rpki-client