Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9581C318CE7A11EFB09C02A1762E951A.roa
File: 9581C318CE7A11EFB09C02A1762E951A.roa (raw, json)
Hash identifier: 795CRNpokGraO/8PiwQx8tHUiRaOIulLO4uJHF+/VlU=
Subject key identifier: EE:3C:97:20:6C:C0:30:44:45:0B:32:18:B6:B8:C3:6A:7C:1F:32:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010346
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9581C318CE7A11EFB09C02A1762E951A.roa
Signing time: Thu 09 Jan 2025 11:12:16 +0000
ROA not before: Thu 09 Jan 2025 11:12:12 +0000
ROA not after: Sat 01 Feb 2025 11:12:12 +0000
asID: 17561
IP address blocks: 156.236.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66374 (0x10346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:12:12 2025 GMT
Not After : Feb 1 11:12:12 2025 GMT
Subject: CN=677faf10-cca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:22:ec:c6:f5:ba:5d:b3:12:a9:ef:fd:aa:
c9:16:0a:1d:d8:07:97:33:b9:d8:fc:ae:62:51:1d:
f4:b3:e6:4d:1a:7b:cb:92:ee:94:fe:ea:88:f1:54:
67:17:09:be:24:71:f0:ae:b4:53:8e:6f:da:75:de:
3b:4f:0d:e0:97:be:4c:eb:72:8d:ae:e3:e7:73:b6:
61:03:bd:ea:c7:96:30:41:dd:8c:f9:3f:2e:73:6c:
09:7f:07:b9:26:65:9a:e5:31:63:0d:2e:32:46:e2:
e4:f6:25:a1:94:6b:f3:e5:e8:56:56:c9:c9:40:13:
1b:28:44:ea:4c:3f:17:fb:58:1c:6f:75:ac:da:3a:
7d:4f:88:ad:c4:5a:6e:77:b8:5f:0d:b7:24:a6:c9:
b5:e3:db:b7:91:8e:e0:c6:ad:04:66:bd:2b:bc:1f:
a7:2f:84:e7:7a:39:ec:ed:89:c3:da:d2:f9:e6:23:
f6:5c:a5:c5:d3:c0:a0:49:d2:ed:2d:8e:25:3d:1b:
8a:2b:34:b2:d1:27:5d:d4:2f:46:85:a0:56:07:69:
24:68:7b:0e:28:17:3c:be:d4:b8:84:77:64:07:18:
28:b4:68:fa:ab:21:20:81:c3:b3:e5:53:e6:70:89:
2a:d1:10:61:b4:3f:fa:0b:d5:4d:ae:e6:03:9f:26:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:97:20:6C:C0:30:44:45:0B:32:18:B6:B8:C3:6A:7C:1F:32:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9581C318CE7A11EFB09C02A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.44.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ff:41:ac:28:42:21:0e:65:ab:b8:63:fd:c3:74:22:db:3c:
a7:39:6f:b8:27:6d:b6:e4:82:b6:49:a7:9b:64:de:be:4f:4f:
23:75:7f:bd:e5:5a:f4:5c:2f:fa:cc:5f:10:8e:af:c3:1d:bd:
c0:21:74:e2:41:05:ef:d2:30:93:b1:a7:83:39:80:ab:ab:ea:
f9:17:0c:68:38:45:ab:f8:77:46:3f:a8:76:6f:d9:99:68:81:
ad:63:39:54:58:83:2d:3d:bd:8d:ad:cf:0e:dc:58:0c:17:08:
56:71:54:05:ff:ca:1f:ae:45:7d:f1:32:e0:27:b7:62:7e:0c:
15:94:47:e0:d0:74:39:45:97:96:a1:1e:e9:10:3d:81:49:92:
6c:fa:4a:1a:16:cc:6f:8c:f1:70:37:a6:67:e0:4b:6b:1a:bf:
1e:38:a0:77:71:bd:80:1f:c3:70:46:4e:f0:0a:e8:68:12:c4:
b0:59:93:ca:bd:14:a4:dc:14:ca:19:48:ad:85:e8:1d:f7:0c:
ee:a7:4d:96:a2:b4:69:9c:63:9b:f5:d0:29:ac:99:34:74:a2:
81:c2:04:da:b2:e8:cc:45:cf:13:4c:1d:5e:38:83:87:0b:ca:
7f:44:c7:2d:0d:74:b1:f8:5e:cd:70:0e:7a:8b:61:35:03:7a:
67:36:6c:6f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQNGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTExMjEyWhcNMjUwMjAxMTExMjEyWjAYMRYw
FAYDVQQDEw02NzdmYWYxMC1jY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWQi7Mb1ul2zEqnv/arJFgod2AeXM7nY/K5iUR30s+ZNGnvLku6U/uqI
8VRnFwm+JHHwrrRTjm/add47Tw3gl75M63KNruPnc7ZhA73qx5YwQd2M+T8uc2wJ
fwe5JmWa5TFjDS4yRuLk9iWhlGvz5ehWVsnJQBMbKETqTD8X+1gcb3Ws2jp9T4it
xFpud7hfDbckpsm149u3kY7gxq0EZr0rvB+nL4Tnejns7YnD2tL55iP2XKXF08Cg
SdLtLY4lPRuKKzSy0Sdd1C9GhaBWB2kkaHsOKBc8vtS4hHdkBxgotGj6qyEggcOz
5VPmcIkq0RBhtD/6C9VNruYDnybjjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO48
lyBswDBERQsyGLa4w2p8HzLCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTgxQzMxOENFN0ExMUVGQjA5QzAyQTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwsMA0GCSqGSIb3DQEBCwUA
A4IBAQCS/0GsKEIhDmWruGP9w3Qi2zynOW+4J2225IK2SaebZN6+T08jdX+95Vr0
XC/6zF8Qjq/DHb3AIXTiQQXv0jCTsaeDOYCrq+r5FwxoOEWr+HdGP6h2b9mZaIGt
YzlUWIMtPb2Nrc8O3FgMFwhWcVQF/8ofrkV98TLgJ7difgwVlEfg0HQ5RZeWoR7p
ED2BSZJs+koaFsxvjPFwN6Zn4EtrGr8eOKB3cb2AH8NwRk7wCuhoEsSwWZPKvRSk
3BTKGUithegd9wzup02WorRpnGOb9dAprJk0dKKBwgTasujMRc8TTB1eOIOHC8p/
RMctDXSx+F7NcA56i2E1A3pnNmxv
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:50 2025 by rpki-client