Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0EAB16CC0811EFBFA99284762E951A.roa
File: BA0EAB16CC0811EFBFA99284762E951A.roa (raw, json)
Hash identifier: Y9pW4M2ZBrjsNu2TKHn2ZMX++gEPmp5KtGQRK8NHDKc=
Subject key identifier: DE:C1:6C:CF:75:60:11:1C:99:00:2D:02:0B:6D:C9:79:00:B8:34:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F84F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0EAB16CC0811EFBFA99284762E951A.roa
Signing time: Mon 06 Jan 2025 08:32:13 +0000
ROA not before: Mon 06 Jan 2025 08:32:09 +0000
ROA not after: Tue 21 Jan 2025 08:32:09 +0000
asID: 39600
IP address blocks: 156.237.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63567 (0xf84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 08:32:09 2025 GMT
Not After : Jan 21 08:32:09 2025 GMT
Subject: CN=677b950c-66bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:d3:2b:c7:6e:3d:f9:a9:4f:aa:37:11:d5:
e0:ad:8b:b0:c2:74:37:c0:45:49:41:0c:5f:50:31:
b6:f2:70:52:99:68:a1:64:04:af:8b:09:63:02:b7:
47:b3:15:bd:be:f1:cf:39:5f:15:fb:c2:c8:54:5e:
8d:f2:4d:23:30:76:da:57:02:d0:e0:3c:1c:36:aa:
08:eb:ee:bd:7b:58:dc:94:8c:93:5a:b1:00:19:3d:
86:fd:f1:79:f8:8d:43:0b:28:66:be:16:63:c1:2e:
b3:70:b2:06:71:06:40:78:de:7e:a9:ae:e8:c1:10:
97:43:df:83:51:5b:a3:b6:7f:93:d1:00:ed:cd:de:
d6:96:8b:f2:d9:98:fb:89:a6:ba:cc:ac:59:60:c9:
a5:91:39:e0:2d:f6:52:74:9a:82:57:37:63:a2:13:
17:6a:c0:12:1f:8a:43:d3:c0:48:69:f0:bc:2a:3d:
46:75:4c:40:a8:93:b4:4f:54:f8:15:9b:98:45:c2:
ff:f2:31:e5:9f:a7:95:24:26:47:bc:e6:ee:43:a9:
98:ca:1a:21:6d:0d:e3:bc:47:f6:e4:02:9b:80:41:
28:4c:01:8c:11:51:ae:ec:08:12:0e:4a:26:33:94:
58:d6:61:13:a5:bf:a8:d7:42:fd:cd:69:c3:19:e7:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:6C:CF:75:60:11:1C:99:00:2D:02:0B:6D:C9:79:00:B8:34:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0EAB16CC0811EFBFA99284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.112.0/21
Signature Algorithm: sha256WithRSAEncryption
41:43:10:80:e0:e1:fc:45:b6:58:fc:24:3b:c3:82:65:bf:73:
fd:cf:57:16:1c:3f:a1:b5:63:4d:b4:db:db:a4:3c:34:b4:ec:
88:9b:9e:32:c5:d4:7c:47:d0:ac:e7:ae:59:a8:41:f1:43:8a:
9d:c7:49:42:0e:e6:33:e0:38:eb:6d:38:c3:4b:55:ea:4b:08:
50:dc:6f:99:1d:8a:a0:31:1c:30:50:ae:e9:ac:b3:db:9d:27:
09:34:09:66:56:a5:a8:3e:1c:19:53:70:24:db:60:02:3a:b9:
c4:b5:28:f4:43:cc:40:eb:0a:90:01:06:05:0d:fd:12:b5:51:
67:dd:8a:56:84:33:25:94:69:73:89:72:54:9f:e4:bc:cb:c4:
d5:21:04:e3:9b:8f:a0:b2:19:53:f5:dc:b6:0c:39:a5:dc:71:
4d:9f:fd:93:fb:90:6d:fa:60:4a:95:a7:9c:35:ed:b1:af:c5:
f3:57:23:58:fe:4f:a3:d7:64:0b:66:9b:4b:4c:4d:17:5e:10:
71:b7:57:89:a0:0c:6b:85:4f:7f:23:b9:89:6d:ee:f4:86:8d:
8a:1a:c2:af:b2:4d:10:86:fc:2f:73:e4:28:a2:9e:99:68:1c:
50:0a:df:7b:6d:1c:b5:96:27:a2:97:84:3f:0f:5e:90:d2:6e:
4f:82:4d:19
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPhPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDgzMjA5WhcNMjUwMTIxMDgzMjA5WjAYMRYw
FAYDVQQDEw02NzdiOTUwYy02NmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SnTK8duPfmpT6o3EdXgrYuwwnQ3wEVJQQxfUDG28nBSmWihZASviwlj
ArdHsxW9vvHPOV8V+8LIVF6N8k0jMHbaVwLQ4DwcNqoI6+69e1jclIyTWrEAGT2G
/fF5+I1DCyhmvhZjwS6zcLIGcQZAeN5+qa7owRCXQ9+DUVujtn+T0QDtzd7Wlovy
2Zj7iaa6zKxZYMmlkTngLfZSdJqCVzdjohMXasASH4pD08BIafC8Kj1GdUxAqJO0
T1T4FZuYRcL/8jHln6eVJCZHvObuQ6mYyhohbQ3jvEf25AKbgEEoTAGMEVGu7AgS
DkomM5RY1mETpb+o10L9zWnDGeemSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN7B
bM91YBEcmQAtAgttyXkAuDRFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTBFQUIxNkNDMDgxMUVGQkZBOTkyODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO1wMA0GCSqGSIb3DQEBCwUA
A4IBAQBBQxCA4OH8RbZY/CQ7w4Jlv3P9z1cWHD+htWNNtNvbpDw0tOyIm54yxdR8
R9Cs565ZqEHxQ4qdx0lCDuYz4DjrbTjDS1XqSwhQ3G+ZHYqgMRwwUK7prLPbnScJ
NAlmVqWoPhwZU3Ak22ACOrnEtSj0Q8xA6wqQAQYFDf0StVFn3YpWhDMllGlziXJU
n+S8y8TVIQTjm4+gshlT9dy2DDml3HFNn/2T+5Bt+mBKlaecNe2xr8XzVyNY/k+j
12QLZptLTE0XXhBxt1eJoAxrhU9/I7mJbe70ho2KGsKvsk0Qhvwvc+Qoop6ZaBxQ
Ct97bRy1lieil4Q/D16Q0m5Pgk0Z
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:20 2025 by rpki-client