Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E91A2BAC6CA11EFB0AA32AA762E951A.roa
File: 8E91A2BAC6CA11EFB0AA32AA762E951A.roa (raw, json)
Hash identifier: 1nPC19uDzBll6snMpA9MQG8cX7F+VIuarz7c3GT2Q+g=
Subject key identifier: A2:F5:D8:B2:25:5D:F7:B9:78:BD:08:B6:E6:9E:3B:37:7C:AF:D2:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F273
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E91A2BAC6CA11EFB0AA32AA762E951A.roa
Signing time: Mon 30 Dec 2024 16:24:35 +0000
ROA not before: Mon 30 Dec 2024 16:24:31 +0000
ROA not after: Fri 31 Jan 2025 16:24:31 +0000
asID: 205125
IP address blocks: 156.255.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62067 (0xf273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:24:31 2024 GMT
Not After : Jan 31 16:24:31 2025 GMT
Subject: CN=6772c943-01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:2d:8b:92:4d:2a:c1:53:e5:14:cd:dd:33:
79:65:9e:4c:38:e4:f6:d2:08:d8:97:07:6c:dd:6c:
5e:a4:a5:59:d2:7c:a2:49:8d:99:89:48:8b:58:8e:
07:3b:18:d1:f0:36:21:08:53:fc:32:d5:a3:3d:5a:
e9:51:17:1a:c4:7d:25:50:00:ce:49:be:70:1d:73:
69:59:65:bc:5a:da:cd:e6:46:f1:7e:73:30:18:ab:
3a:d3:67:85:ff:c3:de:a6:5b:84:0e:ae:9e:13:cb:
64:9f:5c:9e:e6:fc:e6:9e:37:92:04:30:6c:5e:11:
10:16:b9:a7:74:6f:9b:c8:fe:7d:6e:69:65:7e:b5:
05:9d:b2:58:a0:dd:e8:bc:c0:45:8e:46:c7:ac:27:
ab:67:d8:5a:c4:db:9b:76:59:49:2c:c4:e6:9f:9d:
7b:f9:79:55:c7:3e:dd:18:e3:5c:ca:13:ad:67:87:
b3:ac:d2:44:82:31:81:f8:4d:5a:8a:25:3b:50:1a:
f3:af:57:a8:19:27:80:32:87:00:1c:22:ad:e5:94:
d9:43:eb:7a:c3:5d:b8:a3:8f:90:99:96:60:f4:c3:
7b:48:fb:94:47:91:a4:be:e1:37:27:47:d0:fe:70:
33:cc:f6:79:fc:cc:7a:78:6b:25:83:65:80:b1:66:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:D8:B2:25:5D:F7:B9:78:BD:08:B6:E6:9E:3B:37:7C:AF:D2:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E91A2BAC6CA11EFB0AA32AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
69:77:68:e2:4c:ad:51:c3:53:92:fe:16:bd:ea:2b:a4:93:87:
e7:55:f0:b0:3b:aa:bc:7d:95:ed:df:0a:f6:d7:21:dd:5f:d8:
1e:41:8c:e9:13:70:af:0b:da:79:95:bb:3a:93:ad:43:bf:28:
5a:e4:2a:40:10:30:a7:ff:30:66:87:5f:3e:3d:ab:46:83:82:
ed:4c:0d:ad:d5:4a:e1:54:5a:43:8a:b1:0e:a8:ff:76:4e:c4:
86:9c:48:09:dc:6b:fe:93:7c:38:e4:04:d7:98:02:7e:b0:60:
f3:c0:b7:29:71:b4:71:a3:fa:54:12:9d:d4:af:18:d7:f5:2d:
c8:a7:1b:f3:cf:89:30:37:0f:84:01:88:d6:2d:d2:96:89:ef:
2e:ec:50:91:f4:3f:f1:a2:74:43:e3:ce:2b:1a:2f:0b:90:29:
19:f2:49:34:59:8b:ff:ab:d4:5f:af:63:f3:06:ac:3b:90:53:
82:e4:83:29:ec:b1:79:5f:44:ef:57:25:a9:de:4f:25:fb:60:
51:61:8e:71:a6:a5:b8:97:ad:5e:66:7b:48:a9:8d:4d:45:92:
f0:8b:69:52:19:fd:85:98:02:d3:86:30:f2:ea:f3:23:8e:56:
cb:24:31:8d:1c:bf:58:05:b4:0c:39:51:b8:82:ac:53:bb:e0:
51:b1:dd:fe
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPJzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjMwMTYyNDMxWhcNMjUwMTMxMTYyNDMxWjAYMRYw
FAYDVQQDEw02NzcyYzk0My0wMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzzYti5JNKsFT5RTN3TN5ZZ5MOOT20gjYlwds3WxepKVZ0nyiSY2ZiUiL
WI4HOxjR8DYhCFP8MtWjPVrpURcaxH0lUADOSb5wHXNpWWW8WtrN5kbxfnMwGKs6
02eF/8PepluEDq6eE8tkn1ye5vzmnjeSBDBsXhEQFrmndG+byP59bmllfrUFnbJY
oN3ovMBFjkbHrCerZ9haxNubdllJLMTmn517+XlVxz7dGONcyhOtZ4ezrNJEgjGB
+E1aiiU7UBrzr1eoGSeAMocAHCKt5ZTZQ+t6w124o4+QmZZg9MN7SPuUR5GkvuE3
J0fQ/nAzzPZ5/Mx6eGslg2WAsWZQQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKL1
2LIlXfe5eL0ItuaeOzd8r9LqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTkxQTJCQUM2Q0ExMUVGQjBBQTMyQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8KMA0GCSqGSIb3DQEBCwUA
A4IBAQBpd2jiTK1Rw1OS/ha96iukk4fnVfCwO6q8fZXt3wr21yHdX9geQYzpE3Cv
C9p5lbs6k61Dvyha5CpAEDCn/zBmh18+PatGg4LtTA2t1UrhVFpDirEOqP92TsSG
nEgJ3Gv+k3w45ATXmAJ+sGDzwLcpcbRxo/pUEp3UrxjX9S3Ipxvzz4kwNw+EAYjW
LdKWie8u7FCR9D/xonRD484rGi8LkCkZ8kk0WYv/q9Rfr2PzBqw7kFOC5IMp7LF5
X0TvVyWp3k8l+2BRYY5xpqW4l61eZntIqY1NRZLwi2lSGf2FmALThjDy6vMjjlbL
JDGNHL9YBbQMOVG4gqxTu+BRsd3+
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:47 2025 by rpki-client