Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92424E3ECC2211EF8DFA1EA7762E951A.roa
File: 92424E3ECC2211EF8DFA1EA7762E951A.roa (raw, json)
Hash identifier: aYOIeNrbv99a2WlQ2mUzqM6IBmOLR++eKZhuutFuxYQ=
Subject key identifier: EB:33:62:CF:62:85:0F:8F:9C:43:DB:3F:60:3D:B8:D5:1E:FB:06:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92424E3ECC2211EF8DFA1EA7762E951A.roa
Signing time: Mon 06 Jan 2025 11:37:13 +0000
ROA not before: Mon 06 Jan 2025 11:37:09 +0000
ROA not after: Wed 15 Jan 2025 11:37:09 +0000
asID: 40065
IP address blocks: 156.251.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63671 (0xf8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:37:09 2025 GMT
Not After : Jan 15 11:37:09 2025 GMT
Subject: CN=677bc069-160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:08:2d:9b:86:b0:5a:12:fa:99:89:67:eb:
4c:4f:9c:24:2d:66:21:9e:75:10:0f:e2:7b:ac:67:
24:21:f6:e4:58:6f:ab:52:44:46:e8:8c:24:bc:d5:
6f:61:01:73:a0:fd:57:86:c2:41:3b:d6:33:46:52:
68:a3:7e:cb:6f:38:f0:50:df:85:79:aa:0c:4e:73:
ba:e6:b1:06:25:e0:41:d1:e7:d5:e2:22:4f:83:eb:
f0:b4:6c:3c:95:c8:7d:1e:98:1e:91:d0:57:16:f8:
54:39:cc:6a:99:0f:de:ce:b8:e1:62:0c:b8:66:23:
39:5b:20:23:01:9e:8e:73:cc:50:6f:31:38:27:79:
07:00:c5:2c:ff:29:f6:42:4f:60:8e:ba:f9:f1:64:
ac:70:0f:98:11:3d:ca:93:d2:aa:d5:f6:35:65:e6:
19:4b:49:7c:2f:98:05:2b:29:1a:93:40:96:1e:19:
4a:51:14:18:59:e3:ce:a8:0b:a7:5b:01:59:52:b4:
c0:9c:39:15:81:83:fd:c4:4e:45:38:2b:9e:c5:c0:
62:10:a9:e4:62:e9:61:57:16:a3:2f:e3:8f:bd:82:
ba:d5:a9:10:1d:42:f2:94:8b:95:93:e0:90:a0:33:
da:1b:cb:9f:93:55:70:05:e0:e4:15:52:87:1b:55:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:62:CF:62:85:0F:8F:9C:43:DB:3F:60:3D:B8:D5:1E:FB:06:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92424E3ECC2211EF8DFA1EA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.128.0/17
Signature Algorithm: sha256WithRSAEncryption
51:3c:67:48:1b:dc:2d:8c:09:0d:2c:18:8a:ba:66:9f:da:76:
5c:bb:41:b3:40:6b:94:21:a5:bc:91:3a:3f:74:db:49:41:34:
a6:b5:48:f8:04:58:c9:b8:88:ac:36:4a:8f:19:10:da:0b:da:
4e:34:61:e3:dc:c7:da:1a:c0:bc:2d:27:4e:f4:cc:2c:05:df:
e5:3e:25:e2:cd:e6:5c:b0:5e:a9:46:75:f2:0a:cb:b9:76:ae:
97:5a:f9:e2:96:d1:ca:3b:90:aa:12:69:1c:fe:99:b6:bd:17:
9c:10:08:1f:f9:03:75:60:c5:23:a1:f5:1d:69:8c:56:7f:c9:
b4:25:b2:cb:6d:f9:7d:26:fc:7f:96:9a:39:b5:64:6d:b3:22:
8f:42:e3:4e:53:3a:24:bb:22:4c:0a:04:09:5d:96:27:c0:68:
6c:ee:84:06:1b:2d:c6:b3:09:41:68:71:93:57:68:69:19:c3:
f9:19:21:8d:7e:fd:f2:76:92:21:fa:19:b8:65:cb:f4:44:9a:
ee:a8:2b:c3:84:fc:a6:3a:2e:a3:0a:88:5e:d8:3b:06:f1:71:
d1:91:fa:8f:6d:35:53:3d:8b:71:52:a9:fa:fc:ba:20:82:02:
5d:a1:92:f2:50:8d:81:e0:c5:cd:98:91:67:67:25:76:ee:0c:
1e:59:48:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPi3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MTEzNzA5WhcNMjUwMTE1MTEzNzA5WjAYMRYw
FAYDVQQDEw02NzdiYzA2OS0xNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ngILZuGsFoS+pmJZ+tMT5wkLWYhnnUQD+J7rGckIfbkWG+rUkRG6Iwk
vNVvYQFzoP1XhsJBO9YzRlJoo37LbzjwUN+FeaoMTnO65rEGJeBB0efV4iJPg+vw
tGw8lch9HpgekdBXFvhUOcxqmQ/ezrjhYgy4ZiM5WyAjAZ6Oc8xQbzE4J3kHAMUs
/yn2Qk9gjrr58WSscA+YET3Kk9Kq1fY1ZeYZS0l8L5gFKykak0CWHhlKURQYWePO
qAunWwFZUrTAnDkVgYP9xE5FOCuexcBiEKnkYulhVxajL+OPvYK61akQHULylIuV
k+CQoDPaG8ufk1VwBeDkFVKHG1WiFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOsz
Ys9ihQ+PnEPbP2A9uNUe+wbXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjQyNEUzRUNDMjIxMUVGOERGQTFFQTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnPuAMA0GCSqGSIb3DQEBCwUA
A4IBAQBRPGdIG9wtjAkNLBiKumaf2nZcu0GzQGuUIaW8kTo/dNtJQTSmtUj4BFjJ
uIisNkqPGRDaC9pONGHj3MfaGsC8LSdO9MwsBd/lPiXizeZcsF6pRnXyCsu5dq6X
WvniltHKO5CqEmkc/pm2vRecEAgf+QN1YMUjofUdaYxWf8m0JbLLbfl9Jvx/lpo5
tWRtsyKPQuNOUzokuyJMCgQJXZYnwGhs7oQGGy3GswlBaHGTV2hpGcP5GSGNfv3y
dpIh+hm4Zcv0RJruqCvDhPymOi6jCohe2DsG8XHRkfqPbTVTPYtxUqn6/LogggJd
oZLyUI2B4MXNmJFnZyV27gweWUiA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:00 2025 by rpki-client