Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0A6B24C6C911EFB2B9CEA5762E951A.roa
File: BC0A6B24C6C911EFB2B9CEA5762E951A.roa (raw, json)
Hash identifier: H9nW9j1+8EC5jMjVR8FhSlMbRQYuMQLexr9Z3S6Zos0=
Subject key identifier: E2:5F:C5:1F:E3:60:90:63:42:A4:C4:56:3D:E6:12:15:72:D7:3E:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F26B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0A6B24C6C911EFB2B9CEA5762E951A.roa
Signing time: Mon 30 Dec 2024 16:18:42 +0000
ROA not before: Mon 30 Dec 2024 16:18:38 +0000
ROA not after: Fri 31 Jan 2025 16:18:38 +0000
asID: 205125
IP address blocks: 156.255.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62059 (0xf26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:18:38 2024 GMT
Not After : Jan 31 16:18:38 2025 GMT
Subject: CN=6772c7e2-5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:b6:22:4c:18:54:c9:a6:a2:38:f7:91:2a:
7f:75:1d:07:5c:01:0a:8d:1c:51:70:ed:3a:73:6b:
12:6b:e0:5f:2e:fb:4a:43:6c:b2:b5:18:f5:c4:52:
7f:4a:e0:eb:74:83:60:7f:7a:43:7f:a2:4b:52:f9:
bb:a7:1f:b8:76:d1:d2:99:a4:89:0d:b4:13:ee:59:
73:4c:32:62:b1:4c:43:ac:21:e1:19:5e:95:36:80:
8b:9b:4e:68:47:d5:ff:cc:c3:fa:93:44:f4:dc:e8:
6d:06:94:d5:9d:f2:78:0b:63:b9:b2:40:a7:3b:f8:
2e:85:fd:33:fb:cd:68:f3:b3:f6:94:e2:62:6c:40:
45:96:57:d4:7d:9d:ef:0a:81:83:4e:fa:77:e3:5f:
93:a5:23:9d:86:3d:70:77:70:57:31:a0:8b:1a:90:
90:41:b8:77:a4:2e:3a:5b:bf:03:ff:d2:ec:24:99:
d5:24:45:46:17:1e:fe:ec:33:59:49:a7:91:f9:af:
ea:82:18:8c:6f:c7:df:3a:9a:4c:48:35:9a:f8:82:
a3:a6:84:9e:9a:0e:07:9e:5e:76:c7:eb:63:eb:a8:
af:e6:e0:23:f2:eb:c8:e1:32:02:30:70:fa:13:bb:
73:5c:0d:84:f8:92:9e:c0:ea:41:db:66:82:60:dc:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:C5:1F:E3:60:90:63:42:A4:C4:56:3D:E6:12:15:72:D7:3E:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC0A6B24C6C911EFB2B9CEA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.8.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2b:6e:92:e1:f6:a1:8d:69:4b:63:d9:83:85:16:76:a0:b6:
b8:a7:e8:e4:da:85:a5:93:88:0d:f7:c9:24:ae:d3:4d:8a:57:
f7:ff:5c:7d:7a:bf:6a:aa:e7:ce:07:69:28:f3:53:87:3f:74:
34:cc:49:07:91:ae:0e:a8:67:4e:a3:85:9a:3d:11:1c:0d:97:
cb:99:50:75:b6:b5:0e:4d:8d:c9:34:a2:8f:57:8c:06:b5:ef:
27:8f:2f:f0:f5:65:e9:cf:9d:d9:7e:9e:f1:e1:55:4d:80:ab:
a2:cd:03:18:09:36:27:91:9f:f6:e4:0a:d3:4a:3b:8f:b9:d5:
41:22:c9:54:85:23:27:1f:ef:6c:df:c3:d5:fc:f3:f9:31:6e:
80:56:e2:00:a2:52:77:f0:da:01:0f:4d:68:03:c8:77:cb:37:
30:17:f5:73:39:71:38:b9:f9:72:42:a7:c9:6f:47:c2:f8:39:
b1:0d:36:8b:69:9a:9d:0e:12:af:31:cc:67:76:71:3e:44:85:
2c:91:06:e8:5c:5f:95:95:9d:e0:46:c2:42:02:21:a9:e4:4a:
26:51:42:36:ef:0c:6c:9c:7c:f5:02:de:66:53:40:60:63:b2:
56:f4:60:23:8c:e3:09:5a:e0:1a:9f:60:4a:7d:da:3c:fb:b4:
16:6e:a4:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPJrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjMwMTYxODM4WhcNMjUwMTMxMTYxODM4WjAYMRYw
FAYDVQQDEw02NzcyYzdlMi01MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Ye2IkwYVMmmojj3kSp/dR0HXAEKjRxRcO06c2sSa+BfLvtKQ2yytRj1
xFJ/SuDrdINgf3pDf6JLUvm7px+4dtHSmaSJDbQT7llzTDJisUxDrCHhGV6VNoCL
m05oR9X/zMP6k0T03OhtBpTVnfJ4C2O5skCnO/guhf0z+81o87P2lOJibEBFllfU
fZ3vCoGDTvp341+TpSOdhj1wd3BXMaCLGpCQQbh3pC46W78D/9LsJJnVJEVGFx7+
7DNZSaeR+a/qghiMb8ffOppMSDWa+IKjpoSemg4Hnl52x+tj66iv5uAj8uvI4TIC
MHD6E7tzXA2E+JKewOpB22aCYNy8FQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOJf
xR/jYJBjQqTEVj3mEhVy1z6BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzBBNkIyNEM2QzkxMUVGQjJCOUNFQTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8IMA0GCSqGSIb3DQEBCwUA
A4IBAQAhK26S4fahjWlLY9mDhRZ2oLa4p+jk2oWlk4gN98kkrtNNilf3/1x9er9q
qufOB2ko81OHP3Q0zEkHka4OqGdOo4WaPREcDZfLmVB1trUOTY3JNKKPV4wGte8n
jy/w9WXpz53Zfp7x4VVNgKuizQMYCTYnkZ/25ArTSjuPudVBIslUhSMnH+9s38PV
/PP5MW6AVuIAolJ38NoBD01oA8h3yzcwF/VzOXE4uflyQqfJb0fC+DmxDTaLaZqd
DhKvMcxndnE+RIUskQboXF+VlZ3gRsJCAiGp5EomUUI27wxsnHz1At5mU0BgY7JW
9GAjjOMJWuAan2BKfdo8+7QWbqTB
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:43 2025 by rpki-client