Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2105FECBF011EFB9E1496F762E951A.roa
File: 9B2105FECBF011EFB9E1496F762E951A.roa (raw, json)
Hash identifier: qRTx8TfXaFWUQMzQ2yF0GiaHxv26VD2WrkJJNa9mlQ4=
Subject key identifier: 6E:58:88:37:B4:24:49:F0:1B:21:65:14:CF:BD:A4:5F:96:92:E8:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F83C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2105FECBF011EFB9E1496F762E951A.roa
Signing time: Mon 06 Jan 2025 05:39:33 +0000
ROA not before: Mon 06 Jan 2025 05:39:29 +0000
ROA not after: Tue 04 Feb 2025 05:39:29 +0000
asID: 5065
IP address blocks: 156.255.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63548 (0xf83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:39:29 2025 GMT
Not After : Feb 4 05:39:29 2025 GMT
Subject: CN=677b6c95-d590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:b0:b4:58:29:6b:0a:36:f0:06:95:96:19:
32:35:10:f6:cb:09:0e:a0:ab:59:17:1e:10:c1:77:
3b:78:04:ba:18:a0:8c:1c:18:0e:18:1a:d8:ae:3b:
86:10:9a:11:41:57:f5:71:e5:88:cf:d0:91:a8:fd:
e5:6f:8d:47:e4:dc:49:cf:08:a0:ea:65:ec:41:1a:
dd:f2:a8:82:9a:73:1e:fb:8f:6f:9a:41:38:2e:b8:
2a:0f:11:c4:cf:0c:2e:15:ee:e0:b3:46:4d:39:df:
27:9a:07:7b:bf:80:40:a8:56:dc:0c:88:bf:f6:f2:
9c:44:4e:96:52:c4:10:7b:36:62:21:f3:59:b6:f4:
33:fc:b6:88:c4:be:c2:5f:cd:40:11:df:9d:1f:94:
c1:a1:8a:91:22:ed:ab:4d:94:72:63:f7:87:31:0e:
8d:3c:6d:7e:69:af:91:f0:b1:13:1d:af:ec:a6:26:
4c:a2:cf:e4:db:41:aa:7a:c0:27:e5:8c:b2:ed:3c:
bb:5c:d7:55:fe:37:fa:10:a1:85:d6:6a:94:57:68:
1f:7b:5c:66:80:66:2c:9d:4f:69:71:50:e4:f7:90:
eb:ef:bc:40:5d:69:21:1f:50:1b:28:13:3a:e5:bb:
fe:4a:01:06:3b:83:c7:6e:9a:fa:bc:7e:9c:d7:ca:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:88:37:B4:24:49:F0:1B:21:65:14:CF:BD:A4:5F:96:92:E8:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B2105FECBF011EFB9E1496F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ad:31:81:5e:5e:68:94:06:f0:1b:58:fc:d2:63:77:31:22:
72:a9:05:c5:f7:df:4c:80:30:12:a2:0c:4f:74:3a:90:cd:bd:
5d:4b:81:c9:ea:8f:eb:5d:d5:0f:31:66:fc:86:f6:a8:4d:ee:
ea:48:9b:2d:64:9b:af:07:27:5d:f2:a0:d9:62:c7:9b:ce:9d:
e8:70:54:cb:74:f6:a7:cc:a6:33:8e:19:51:a7:91:6a:06:4b:
1a:12:b4:26:6c:f1:2b:79:5b:14:9d:d5:da:bc:8b:01:ec:47:
19:03:df:1e:78:b8:1f:f1:4e:51:1e:d9:b9:8b:68:7e:b7:d7:
4b:d0:18:47:5c:25:22:3d:af:59:8d:47:e3:c9:ce:4d:d3:02:
8c:d8:f6:39:25:67:6e:ac:9f:22:ec:33:d2:e7:de:88:61:8b:
16:a7:8c:3e:de:37:4c:52:3f:98:04:4d:7f:ae:77:f1:c9:db:
85:b0:73:4a:bf:13:34:fd:40:71:b6:6e:20:d2:98:6d:5c:28:
b8:99:99:63:d1:6f:18:59:1d:ae:a7:93:44:49:5a:c8:68:b6:
bf:67:bd:43:01:59:e2:8b:bf:cd:10:6c:a3:3d:dc:25:66:66:
2b:ed:f5:d2:ed:2d:da:b1:04:bf:c4:cc:43:58:79:89:6f:2b:
95:7b:24:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPg8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDUzOTI5WhcNMjUwMjA0MDUzOTI5WjAYMRYw
FAYDVQQDEw02NzdiNmM5NS1kNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1a2wtFgpawo28AaVlhkyNRD2ywkOoKtZFx4QwXc7eAS6GKCMHBgOGBrY
rjuGEJoRQVf1ceWIz9CRqP3lb41H5NxJzwig6mXsQRrd8qiCmnMe+49vmkE4Lrgq
DxHEzwwuFe7gs0ZNOd8nmgd7v4BAqFbcDIi/9vKcRE6WUsQQezZiIfNZtvQz/LaI
xL7CX81AEd+dH5TBoYqRIu2rTZRyY/eHMQ6NPG1+aa+R8LETHa/spiZMos/k20Gq
esAn5Yyy7Ty7XNdV/jf6EKGF1mqUV2gfe1xmgGYsnU9pcVDk95Dr77xAXWkhH1Ab
KBM65bv+SgEGO4PHbpr6vH6c18pOjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG5Y
iDe0JEnwGyFlFM+9pF+WkuiPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QjIxMDVGRUNCRjAxMUVGQjlFMTQ5NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP90MA0GCSqGSIb3DQEBCwUA
A4IBAQCXrTGBXl5olAbwG1j80mN3MSJyqQXF999MgDASogxPdDqQzb1dS4HJ6o/r
XdUPMWb8hvaoTe7qSJstZJuvBydd8qDZYsebzp3ocFTLdPanzKYzjhlRp5FqBksa
ErQmbPEreVsUndXavIsB7EcZA98eeLgf8U5RHtm5i2h+t9dL0BhHXCUiPa9ZjUfj
yc5N0wKM2PY5JWdurJ8i7DPS596IYYsWp4w+3jdMUj+YBE1/rnfxyduFsHNKvxM0
/UBxtm4g0phtXCi4mZlj0W8YWR2up5NESVrIaLa/Z71DAVnii7/NEGyjPdwlZmYr
7fXS7S3asQS/xMxDWHmJbyuVeyR+
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:23 2025 by rpki-client