Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA754F1CC47211EF98777051762E951A.roa
File: BA754F1CC47211EF98777051762E951A.roa (raw, json)
Hash identifier: bN94IdFbCADJOnRHp3dySep0Uu2cSuqto5qqSKcd/AE=
Subject key identifier: BC:34:C8:1E:6D:14:8A:10:64:98:6B:6D:38:81:8D:3C:0D:ED:2A:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA754F1CC47211EF98777051762E951A.roa
Signing time: Fri 27 Dec 2024 16:50:51 +0000
ROA not before: Fri 27 Dec 2024 16:50:47 +0000
ROA not after: Sat 01 Feb 2025 16:50:47 +0000
asID: 203020
IP address blocks: 156.253.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61634 (0xf0c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:50:47 2024 GMT
Not After : Feb 1 16:50:47 2025 GMT
Subject: CN=676edaea-8c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:ef:78:10:c4:17:f2:92:48:5d:42:65:f2:
92:39:63:b3:a2:de:ca:98:e2:c4:3a:f3:43:cf:98:
88:0e:a4:67:5d:96:f1:42:82:be:f7:2f:77:83:91:
06:0e:6f:f5:92:05:8e:81:72:b1:e7:2e:ff:30:4b:
9d:d0:b9:85:17:58:ab:88:4a:b6:45:26:ab:0e:3e:
6c:9a:fa:86:19:b1:e2:b0:d8:84:04:e6:62:3c:76:
b2:e5:06:0e:6f:82:73:64:5b:52:43:1e:25:37:77:
3b:43:63:e5:24:91:dd:ee:bd:f9:b8:a8:ce:51:9e:
5d:da:47:f8:1f:a0:ce:39:cd:56:47:65:9a:ce:0b:
b6:e5:99:df:eb:e2:35:e6:2b:fa:5c:ab:b9:02:52:
67:cb:32:cc:b4:96:47:84:11:09:28:62:e4:3f:b9:
6d:48:bf:ac:dd:15:02:aa:ac:bc:c6:e8:7a:43:db:
8d:9e:d4:c1:2c:f1:22:4a:a8:e0:8e:bc:8f:69:5c:
9f:e5:8f:32:24:01:db:7a:aa:11:e6:d4:3d:b3:62:
ca:d9:ad:f6:94:5d:e1:7f:12:e5:d1:74:89:cf:70:
3b:d9:52:06:21:1f:0f:a6:d2:35:f5:8c:3d:d4:7b:
e9:3c:c7:a9:86:aa:e7:38:27:ce:16:67:2c:98:17:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:C8:1E:6D:14:8A:10:64:98:6B:6D:38:81:8D:3C:0D:ED:2A:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA754F1CC47211EF98777051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.216.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:1c:67:0c:7a:b1:b5:bc:99:3a:83:9a:c8:c4:96:3c:eb:97:
15:79:a7:2e:52:30:d0:62:e4:86:99:21:d4:9c:d2:17:3f:48:
83:58:c4:f1:30:ed:4f:f9:6d:bb:cf:40:8e:4e:14:e6:e1:6c:
63:64:2a:89:9f:26:f4:c8:54:34:52:a7:70:27:65:a6:3e:71:
29:53:3a:f0:8b:49:71:aa:3a:1b:44:0a:7b:4d:cb:a9:7e:04:
59:f8:2e:eb:ac:a7:5c:37:5b:c2:11:62:7e:f6:52:e7:74:4c:
9a:33:94:2d:9c:b4:05:31:04:f1:7b:b9:f2:a6:65:e7:d9:b4:
92:cc:22:db:66:fa:30:d4:3d:23:80:c9:48:dd:60:de:a7:20:
be:96:a5:99:27:74:08:18:15:09:b7:3e:c7:32:ad:ba:1b:86:
16:1f:61:9a:a5:34:a7:cb:54:b4:77:37:4c:ad:c0:57:34:a4:
e0:6a:47:e7:53:39:f3:a4:f2:18:74:24:92:f6:00:c5:ed:db:
21:90:9a:2c:e0:ce:b3:b3:2c:15:86:53:f4:2f:b2:a5:86:29:
b9:32:86:63:5e:43:21:aa:9a:3f:c1:7d:3c:42:77:85:3e:ff:
8b:1e:35:4b:73:40:9f:0d:c6:12:7b:19:4f:01:77:2c:a0:92:
f7:87:00:52
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPDCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MTY1MDQ3WhcNMjUwMjAxMTY1MDQ3WjAYMRYw
FAYDVQQDEw02NzZlZGFlYS04YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAypDveBDEF/KSSF1CZfKSOWOzot7KmOLEOvNDz5iIDqRnXZbxQoK+9y93
g5EGDm/1kgWOgXKx5y7/MEud0LmFF1iriEq2RSarDj5smvqGGbHisNiEBOZiPHay
5QYOb4JzZFtSQx4lN3c7Q2PlJJHd7r35uKjOUZ5d2kf4H6DOOc1WR2Wazgu25Znf
6+I15iv6XKu5AlJnyzLMtJZHhBEJKGLkP7ltSL+s3RUCqqy8xuh6Q9uNntTBLPEi
SqjgjryPaVyf5Y8yJAHbeqoR5tQ9s2LK2a32lF3hfxLl0XSJz3A72VIGIR8PptI1
9Yw91HvpPMephqrnOCfOFmcsmBfwIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLw0
yB5tFIoQZJhrbTiBjTwN7SrcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTc1NEYxQ0M0NzIxMUVGOTg3NzcwNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP3YMA0GCSqGSIb3DQEBCwUA
A4IBAQCxHGcMerG1vJk6g5rIxJY865cVeacuUjDQYuSGmSHUnNIXP0iDWMTxMO1P
+W27z0COThTm4WxjZCqJnyb0yFQ0UqdwJ2WmPnEpUzrwi0lxqjobRAp7TcupfgRZ
+C7rrKdcN1vCEWJ+9lLndEyaM5QtnLQFMQTxe7nypmXn2bSSzCLbZvow1D0jgMlI
3WDepyC+lqWZJ3QIGBUJtz7HMq26G4YWH2GapTSny1S0dzdMrcBXNKTgakfnUznz
pPIYdCSS9gDF7dshkJos4M6zsywVhlP0L7Klhim5MoZjXkMhqpo/wX08QneFPv+L
HjVLc0CfDcYSexlPAXcsoJL3hwBS
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:20 2025 by rpki-client