Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA459F4EB49E11EF98716E79762E951A.roa
File: BA459F4EB49E11EF98716E79762E951A.roa (raw, json)
Hash identifier: R8EYBbDZC2GKqq3/HKKFqUVxfX8KXynTH6tsK3xz5F8=
Subject key identifier: 9E:C6:2D:72:D0:A4:D1:34:04:FA:E2:89:9E:9B:E2:DE:76:0C:E4:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E09A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA459F4EB49E11EF98716E79762E951A.roa
Signing time: Sat 07 Dec 2024 13:25:29 +0000
ROA not before: Sat 07 Dec 2024 13:25:26 +0000
ROA not after: Wed 15 Jan 2025 13:25:26 +0000
asID: 138915
IP address blocks: 156.244.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57498 (0xe09a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 7 13:25:26 2024 GMT
Not After : Jan 15 13:25:26 2025 GMT
Subject: CN=67544cc9-d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:c1:b1:7d:38:6f:29:0f:39:99:f3:64:5e:
ce:b6:ad:72:cc:15:2c:fb:a0:ce:e7:bd:d4:1f:23:
7f:28:39:47:57:1e:68:37:84:f9:64:27:fc:8c:aa:
35:f8:15:a2:57:9b:99:c2:65:b6:1f:8b:d1:c0:14:
95:c1:a6:cf:a2:32:5b:c7:2f:3f:f0:3d:15:dc:86:
ce:a0:20:3e:d4:97:07:5b:3e:fd:8e:bf:86:fb:f0:
63:3c:54:e3:19:02:42:30:08:e2:7a:d2:71:b5:67:
da:bb:45:f2:b9:cb:29:d8:a9:3f:08:33:96:3b:b0:
2d:d0:29:a2:6e:d5:23:2f:10:a8:31:b1:f9:4d:37:
14:38:8e:bc:5f:82:1c:06:4e:72:49:54:59:3d:0a:
16:8f:ad:7b:bf:d2:d1:64:57:33:d9:00:e2:1b:df:
bf:c7:ce:ac:7a:6f:c7:09:73:89:6e:5c:bc:ca:d5:
df:54:8b:ce:02:8f:28:00:b5:6b:4f:4f:69:c3:ce:
d0:5e:13:d4:32:3f:f7:68:bc:fe:40:44:ff:dc:72:
c5:f4:c4:1c:f3:56:bd:bd:00:71:d4:24:e9:75:0f:
17:4d:5c:b6:7e:e1:ce:b0:ba:19:65:a6:64:45:ea:
3f:df:e7:de:f8:09:b8:ca:df:7d:3c:50:96:8a:73:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:2D:72:D0:A4:D1:34:04:FA:E2:89:9E:9B:E2:DE:76:0C:E4:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA459F4EB49E11EF98716E79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9a:a4:81:ca:e1:1f:e4:ec:75:ac:fd:0b:7a:fb:4f:1f:f7:
40:32:1e:dc:a1:fa:84:8e:1c:bf:1b:84:91:f6:64:ed:87:05:
42:98:91:e6:82:fb:bf:1d:53:7a:64:a9:e6:7a:b4:c8:ba:04:
26:d7:e4:c8:d8:89:6e:d5:af:0c:16:06:fe:8c:a5:2c:89:50:
99:79:e3:57:75:c0:86:2d:49:80:7c:e2:47:44:68:15:da:7a:
03:66:4e:d9:c2:46:d5:45:4d:9e:f0:64:9c:48:f5:66:b3:0b:
d1:cd:39:a8:3f:35:3c:d2:e8:cd:11:54:d6:0c:79:50:a2:4b:
03:f7:bb:dc:b5:77:f7:51:5e:d4:00:91:95:46:9a:a4:19:1b:
de:ce:ae:8e:04:f3:08:5b:2b:10:00:0c:96:62:6c:56:f6:91:
de:a5:b4:bf:28:a3:68:aa:37:37:cd:e7:77:57:87:1d:96:bc:
70:2a:93:03:14:a2:3d:f8:f5:8e:57:3c:02:6b:b9:65:ec:4a:
d8:44:94:28:65:da:37:3a:3b:18:8e:98:fb:5e:a4:23:c4:5e:
3f:f5:71:13:3b:5c:1e:1e:97:1d:bd:d3:3d:ae:6f:26:da:99:
6e:bd:5d:44:f4:5c:18:3f:0b:8c:c1:7c:8d:b5:74:f5:8c:ee:
31:af:cf:1c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOCaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA3MTMyNTI2WhcNMjUwMTE1MTMyNTI2WjAYMRYw
FAYDVQQDEw02NzU0NGNjOS1kNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0d/BsX04bykPOZnzZF7Otq1yzBUs+6DO573UHyN/KDlHVx5oN4T5ZCf8
jKo1+BWiV5uZwmW2H4vRwBSVwabPojJbxy8/8D0V3IbOoCA+1JcHWz79jr+G+/Bj
PFTjGQJCMAjietJxtWfau0Xyucsp2Kk/CDOWO7At0CmibtUjLxCoMbH5TTcUOI68
X4IcBk5ySVRZPQoWj617v9LRZFcz2QDiG9+/x86sem/HCXOJbly8ytXfVIvOAo8o
ALVrT09pw87QXhPUMj/3aLz+QET/3HLF9MQc81a9vQBx1CTpdQ8XTVy2fuHOsLoZ
ZaZkReo/3+fe+Am4yt99PFCWinNrzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ7G
LXLQpNE0BPriiZ6b4t52DOQAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTQ1OUY0RUI0OUUxMUVGOTg3MTZFNzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQxMA0GCSqGSIb3DQEBCwUA
A4IBAQAomqSByuEf5Ox1rP0LevtPH/dAMh7cofqEjhy/G4SR9mTthwVCmJHmgvu/
HVN6ZKnmerTIugQm1+TI2Ilu1a8MFgb+jKUsiVCZeeNXdcCGLUmAfOJHRGgV2noD
Zk7ZwkbVRU2e8GScSPVmswvRzTmoPzU80ujNEVTWDHlQoksD97vctXf3UV7UAJGV
RpqkGRvezq6OBPMIWysQAAyWYmxW9pHepbS/KKNoqjc3zed3V4cdlrxwKpMDFKI9
+PWOVzwCa7ll7ErYRJQoZdo3OjsYjpj7XqQjxF4/9XETO1weHpcdvdM9rm8m2plu
vV1E9FwYPwuMwXyNtXT1jO4xr88c
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:02 2025 by rpki-client