Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D9D8DCBAF611EFB1642762762E951A.roa
File: B4D9D8DCBAF611EFB1642762762E951A.roa (raw, json)
Hash identifier: LMxeiQyNz2WaykQq0RxOUblEIs4YlWRL6R3/8Fjxayw=
Subject key identifier: E3:32:FE:14:DB:6D:32:3E:AA:18:DF:F0:F4:12:92:36:B4:01:2A:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D9D8DCBAF611EFB1642762762E951A.roa
Signing time: Sun 15 Dec 2024 15:10:23 +0000
ROA not before: Sun 15 Dec 2024 15:10:19 +0000
ROA not after: Sun 19 Jan 2025 15:10:19 +0000
asID: 14315
IP address blocks: 156.224.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58345 (0xe3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:10:19 2024 GMT
Not After : Jan 19 15:10:19 2025 GMT
Subject: CN=675ef15f-aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:55:1a:52:e0:ca:ce:2c:fc:6f:39:dd:f1:
ec:58:09:b1:1d:40:8e:e5:84:58:c3:13:1e:2c:ec:
9d:93:2c:2c:74:8d:41:bd:b4:13:ff:bf:3f:27:9f:
ab:7c:82:cc:96:6f:3b:07:8a:5b:80:92:de:82:d9:
9c:17:86:94:02:74:d0:96:60:80:2e:ea:3d:56:47:
37:3b:49:98:6f:3d:12:da:28:59:5a:41:34:17:96:
39:cb:db:a0:2d:cf:0a:87:9e:f7:96:42:05:e9:45:
11:3f:26:55:5f:43:ce:b3:34:e8:74:c3:9b:dd:78:
4c:ae:1e:3a:1d:26:d7:a8:6e:d2:26:87:4b:5f:c6:
ee:11:b4:d1:80:fa:c6:3d:46:92:fd:b0:47:33:c4:
fe:54:b5:a9:9d:f6:e3:2b:ad:c6:61:57:c0:a4:6b:
02:fe:e4:75:68:14:32:41:30:b7:2c:a4:46:d1:e0:
7f:ae:51:29:44:40:49:8f:dc:23:10:7a:47:61:f2:
17:ad:55:46:60:42:2b:21:56:d6:14:79:77:ab:1d:
41:c9:cf:a2:42:69:e5:4a:7d:1f:26:bc:fd:78:b3:
46:97:e5:6a:9d:a5:51:bc:66:8a:ca:6e:48:22:14:
91:55:6c:aa:9a:dc:85:14:2f:bd:ac:14:fd:bc:8e:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:FE:14:DB:6D:32:3E:AA:18:DF:F0:F4:12:92:36:B4:01:2A:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4D9D8DCBAF611EFB1642762762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.68.0/22
Signature Algorithm: sha256WithRSAEncryption
97:58:3b:78:51:40:63:78:7c:b5:b7:64:d9:fd:d9:c0:b4:20:
80:73:89:d7:ae:56:90:83:c5:52:28:00:69:77:33:14:0e:8a:
cb:57:b9:a6:bc:7f:cf:d0:44:86:1c:4c:5b:46:b2:89:bf:d2:
a1:80:e0:37:0a:0f:0e:39:42:06:aa:e6:c9:3b:35:d6:88:71:
3d:7e:08:ed:92:49:89:0b:3a:77:51:1e:b6:47:2c:b2:f1:16:
0d:1b:06:10:65:df:92:f8:94:cd:11:2b:5f:04:50:63:8b:af:
8f:16:a0:44:54:96:18:43:9a:e9:e2:7a:43:8c:50:ca:30:7a:
d4:4d:6e:ca:95:23:41:05:58:24:36:d9:4e:86:a9:11:c4:2b:
d2:b6:fa:7d:91:fd:20:b3:07:74:b3:a4:c8:2f:2a:ed:c8:64:
4d:96:5c:a7:7c:d6:0a:1c:8d:07:25:56:4f:8c:09:d5:9d:ad:
d7:b6:9f:df:4e:b0:89:4b:f5:c7:56:70:72:26:06:c6:53:e2:
9b:46:55:8e:b3:59:bb:0e:6f:27:d4:77:98:f3:36:6b:f5:18:
85:11:fb:65:ec:22:62:35:7d:23:f1:0d:52:18:62:e7:a2:62:
ab:68:7f:0e:6f:a2:8c:43:97:2c:bc:18:fd:60:b7:cb:0c:e0:
a6:3e:6f:b3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOPpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE1MTUxMDE5WhcNMjUwMTE5MTUxMDE5WjAYMRYw
FAYDVQQDEw02NzVlZjE1Zi1hYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzNVGlLgys4s/G853fHsWAmxHUCO5YRYwxMeLOydkywsdI1BvbQT/78/
J5+rfILMlm87B4pbgJLegtmcF4aUAnTQlmCALuo9Vkc3O0mYbz0S2ihZWkE0F5Y5
y9ugLc8Kh573lkIF6UURPyZVX0POszTodMOb3XhMrh46HSbXqG7SJodLX8buEbTR
gPrGPUaS/bBHM8T+VLWpnfbjK63GYVfApGsC/uR1aBQyQTC3LKRG0eB/rlEpREBJ
j9wjEHpHYfIXrVVGYEIrIVbWFHl3qx1Byc+iQmnlSn0fJrz9eLNGl+VqnaVRvGaK
ym5IIhSRVWyqmtyFFC+9rBT9vI76SQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOMy
/hTbbTI+qhjf8PQSkja0ASr1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNEQ5RDhEQ0JBRjYxMUVGQjE2NDI3NjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOBEMA0GCSqGSIb3DQEBCwUA
A4IBAQCXWDt4UUBjeHy1t2TZ/dnAtCCAc4nXrlaQg8VSKABpdzMUDorLV7mmvH/P
0ESGHExbRrKJv9KhgOA3Cg8OOUIGqubJOzXWiHE9fgjtkkmJCzp3UR62Ryyy8RYN
GwYQZd+S+JTNEStfBFBji6+PFqBEVJYYQ5rp4npDjFDKMHrUTW7KlSNBBVgkNtlO
hqkRxCvStvp9kf0gswd0s6TILyrtyGRNllynfNYKHI0HJVZPjAnVna3Xtp/fTrCJ
S/XHVnByJgbGU+KbRlWOs1m7Dm8n1HeY8zZr9RiFEftl7CJiNX0j8Q1SGGLnomKr
aH8Ob6KMQ5csvBj9YLfLDOCmPm+z
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:17 2025 by rpki-client