Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95056DE0D30C11EF98E26098762E951A.roa
File: 95056DE0D30C11EF98E26098762E951A.roa (raw, json)
Hash identifier: 3QD1X7VzGeL2Ew0yngk94nw5sJjgVQd6GZR6KCSIrik=
Subject key identifier: AB:25:27:73:E6:2F:21:E4:A4:B9:AD:66:B1:24:06:63:D0:A4:B4:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01082F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95056DE0D30C11EF98E26098762E951A.roa
Signing time: Wed 15 Jan 2025 06:47:26 +0000
ROA not before: Wed 15 Jan 2025 06:47:23 +0000
ROA not after: Sat 25 Jan 2025 06:47:23 +0000
asID: 11331
IP address blocks: 156.239.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67631 (0x1082f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:47:23 2025 GMT
Not After : Jan 25 06:47:23 2025 GMT
Subject: CN=678759fe-bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:ab:88:9f:e7:13:8c:97:1a:3e:c4:bf:12:
63:c7:55:f6:f0:c9:00:38:35:21:9f:4d:7b:37:12:
04:3f:2f:da:10:b8:2d:c6:02:48:65:bd:16:15:b3:
bb:e8:b3:c0:08:12:97:89:b7:18:56:93:f0:0a:61:
33:50:37:96:d6:9f:7e:cd:e1:09:b8:2b:59:88:58:
05:02:66:70:f7:5d:6c:71:89:ed:88:52:e0:c3:28:
52:0a:64:17:f6:5e:4f:b3:98:82:1f:19:3c:6c:ca:
73:0c:d0:e7:01:2b:fe:4d:97:cc:28:8d:c4:e5:b8:
e7:5b:5c:dc:dd:e4:f3:f1:70:f7:ea:be:60:6d:06:
0e:79:16:71:15:04:a7:0d:4d:53:20:fc:e2:cb:d1:
f0:01:e5:6f:13:a6:ca:47:1a:a6:a9:99:9b:7c:39:
16:55:2d:5a:5c:6e:f2:c6:c2:5f:f1:95:24:32:c2:
8d:c3:73:fb:cd:01:68:47:90:a7:66:99:ae:00:c0:
51:ab:5c:dc:c4:ec:71:03:bb:4e:8a:96:59:80:15:
4a:f3:25:eb:38:f2:3f:e8:10:25:32:a3:61:57:be:
e7:8a:b2:f7:cb:a0:54:45:9c:a7:e2:a7:5b:11:7b:
f1:d0:57:5b:fb:c0:42:4f:ba:f2:39:f9:81:55:72:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:27:73:E6:2F:21:E4:A4:B9:AD:66:B1:24:06:63:D0:A4:B4:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95056DE0D30C11EF98E26098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:d4:2e:be:07:8b:81:63:d1:08:e2:7e:f8:52:dc:b9:16:bc:
e5:b3:b8:ea:24:03:3e:92:9b:6f:22:9a:f5:5a:60:d3:4d:57:
a2:dd:90:e7:b0:8d:96:70:63:7a:db:58:97:23:42:c6:8d:d3:
33:85:48:2f:35:4b:8a:02:27:b5:26:90:98:50:24:0e:41:82:
13:11:13:04:c3:ec:4e:81:89:10:9d:9a:eb:90:33:b4:cb:97:
21:34:e7:5c:71:e1:77:05:20:dd:76:ca:5b:8e:e7:8a:c7:5a:
d5:cf:e3:bd:1f:b6:58:e0:2a:31:52:42:d3:3d:ae:3a:a9:d7:
6c:f0:5d:6f:45:42:89:ae:7e:5f:04:1d:59:22:01:b8:19:d2:
53:10:1f:72:d9:3f:83:98:a5:33:88:33:7a:c3:94:e9:c5:26:
2d:cf:f5:bb:52:4b:4a:63:8a:9a:f5:24:d0:2d:11:10:c7:eb:
42:9f:13:38:0e:9c:75:6a:6d:3b:a1:00:9c:e3:f7:ea:eb:9d:
90:90:36:1e:40:3b:5a:90:3c:8d:8e:63:3e:f2:27:eb:c2:c4:
38:d6:96:09:08:f2:a9:36:40:8d:89:37:93:33:c9:73:9b:72:
73:20:9f:c3:b0:f0:65:2d:84:04:8e:7f:56:5a:bf:ab:ee:9b:
f2:e1:01:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQgvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDY0NzIzWhcNMjUwMTI1MDY0NzIzWjAYMRYw
FAYDVQQDEw02Nzg3NTlmZS1iZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtsqriJ/nE4yXGj7EvxJjx1X28MkAODUhn017NxIEPy/aELgtxgJIZb0W
FbO76LPACBKXibcYVpPwCmEzUDeW1p9+zeEJuCtZiFgFAmZw911scYntiFLgwyhS
CmQX9l5Ps5iCHxk8bMpzDNDnASv+TZfMKI3E5bjnW1zc3eTz8XD36r5gbQYOeRZx
FQSnDU1TIPziy9HwAeVvE6bKRxqmqZmbfDkWVS1aXG7yxsJf8ZUkMsKNw3P7zQFo
R5CnZpmuAMBRq1zcxOxxA7tOipZZgBVK8yXrOPI/6BAlMqNhV77nirL3y6BURZyn
4qdbEXvx0Fdb+8BCT7ryOfmBVXJROQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKsl
J3PmLyHkpLmtZrEkBmPQpLTlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTA1NkRFMEQzMEMxMUVGOThFMjYwOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO9AMA0GCSqGSIb3DQEBCwUA
A4IBAQAP1C6+B4uBY9EI4n74Uty5Frzls7jqJAM+kptvIpr1WmDTTVei3ZDnsI2W
cGN621iXI0LGjdMzhUgvNUuKAie1JpCYUCQOQYITERMEw+xOgYkQnZrrkDO0y5ch
NOdcceF3BSDddspbjueKx1rVz+O9H7ZY4CoxUkLTPa46qdds8F1vRUKJrn5fBB1Z
IgG4GdJTEB9y2T+DmKUziDN6w5TpxSYtz/W7UktKY4qa9STQLREQx+tCnxM4Dpx1
am07oQCc4/fq652QkDYeQDtakDyNjmM+8ifrwsQ41pYJCPKpNkCNiTeTM8lzm3Jz
IJ/DsPBlLYQEjn9WWr+r7pvy4QEV
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:38 2025 by rpki-client