Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDEEAA04952411EEAC9CB077D25BE465.roa
File: BDEEAA04952411EEAC9CB077D25BE465.roa (raw, json)
Hash identifier: 4duur1GhRs8CInDf8lyBkLQIM9Em0yNjNrugg6n+YRQ=
Subject key identifier: FF:FF:D2:EC:82:C4:26:5A:2C:91:9F:00:97:1D:AF:BF:8D:54:E1:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5019
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDEEAA04952411EEAC9CB077D25BE465.roa
Signing time: Thu 07 Dec 2023 17:19:13 +0000
ROA not before: Thu 07 Dec 2023 17:19:10 +0000
ROA not after: Tue 09 Jan 2024 17:19:10 +0000
asID: 211826
IP address blocks: 156.240.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20505 (0x5019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 7 17:19:10 2023 GMT
Not After : Jan 9 17:19:10 2024 GMT
Subject: CN=6571fe91-6809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:23:e7:f1:40:af:06:3f:4b:39:19:09:f9:
f4:7f:b3:93:0f:d7:e0:d6:71:5a:9d:0c:38:a2:c9:
e2:e6:dd:ad:0a:4b:55:eb:fb:d3:43:a7:4f:eb:33:
ec:7b:1b:6a:67:42:0e:00:1c:21:e8:da:04:04:ce:
62:f5:6e:5d:a2:1f:01:00:f4:74:48:41:86:6c:e0:
ee:1a:8e:6c:fc:9b:52:31:8d:8e:dc:01:b3:04:29:
ae:eb:ba:1a:17:0e:cc:fb:d9:69:93:bc:da:4c:b0:
6e:ea:dc:5a:13:ca:95:88:50:84:50:d9:f1:85:9b:
de:d1:52:5b:d6:db:f0:12:61:f3:cf:93:cb:dc:61:
6f:72:e9:8d:6f:f5:4e:65:a2:1a:7a:39:7a:8f:b1:
78:bf:2f:ed:bd:58:b8:e4:af:5b:12:b0:1c:a7:e6:
28:9f:10:e7:ce:0a:4e:4a:43:a2:be:c0:c6:d4:92:
5f:70:03:9a:47:5a:79:94:a6:4a:f5:a9:fa:ef:6c:
a6:4c:c9:0f:35:47:44:c9:8d:5a:68:4d:ed:39:33:
4e:8c:8b:f4:4e:05:f5:b8:71:be:4e:37:89:51:af:
53:a1:03:76:39:d4:ee:70:ed:73:2d:f6:b3:53:7c:
ef:6a:00:68:b7:d5:04:fa:e2:c8:ee:f5:c4:d9:0a:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:D2:EC:82:C4:26:5A:2C:91:9F:00:97:1D:AF:BF:8D:54:E1:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDEEAA04952411EEAC9CB077D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:1c:c2:a8:8c:4d:85:f0:30:05:0d:f6:af:73:e7:6c:f9:
45:07:58:aa:98:05:af:ba:2e:11:c9:8f:9d:42:27:15:2c:c0:
d3:12:32:2e:06:4b:a1:eb:22:60:f1:bd:cf:26:23:d4:da:a8:
64:de:fe:52:99:0e:68:34:b5:e8:c7:d8:f6:24:40:61:85:90:
3b:94:0e:30:f6:a8:8a:0e:b3:91:c1:03:b7:51:cf:36:39:52:
cf:e2:2e:df:e5:20:ef:f7:92:b2:dc:b3:ce:36:15:a5:fe:7f:
0b:d4:d7:6e:a0:39:16:fa:cb:e4:45:68:a0:19:f7:69:04:f8:
6a:53:8d:6a:10:de:86:11:09:a7:de:8d:57:17:7f:0c:ab:5c:
c6:d8:90:34:f9:5a:95:53:01:be:12:6e:00:37:eb:dc:57:a1:
a9:de:a4:92:0c:bb:e8:89:bf:35:e2:09:19:c6:d7:8a:2b:7d:
1c:49:8b:67:61:b9:29:6b:6b:e3:3a:fb:f4:8c:36:37:86:91:
2f:99:bb:85:73:b0:82:82:63:df:ea:24:33:09:5e:0a:19:61:
71:87:b7:8f:ca:3f:6a:79:58:bb:a4:0e:ef:ee:82:12:37:af:
47:ec:4a:cf:43:2c:62:f8:13:71:c3:8e:17:65:55:7e:87:66:
87:65:fa:dd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICUBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEyMDcxNzE5MTBaFw0yNDAxMDkxNzE5MTBaMBgxFjAU
BgNVBAMTDTY1NzFmZTkxLTY4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpICPn8UCvBj9LORkJ+fR/s5MP1+DWcVqdDDiiyeLm3a0KS1Xr+9NDp0/r
M+x7G2pnQg4AHCHo2gQEzmL1bl2iHwEA9HRIQYZs4O4ajmz8m1IxjY7cAbMEKa7r
uhoXDsz72WmTvNpMsG7q3FoTypWIUIRQ2fGFm97RUlvW2/ASYfPPk8vcYW9y6Y1v
9U5lohp6OXqPsXi/L+29WLjkr1sSsByn5iifEOfOCk5KQ6K+wMbUkl9wA5pHWnmU
pkr1qfrvbKZMyQ81R0TJjVpoTe05M06Mi/ROBfW4cb5ON4lRr1OhA3Y51O5w7XMt
9rNTfO9qAGi31QT64sju9cTZCmA/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU///S
7ILEJloskZ8Alx2vv41U4TgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JERUVBQTA0OTUyNDExRUVBQzlDQjA3N0QyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8F8wDQYJKoZIhvcNAQELBQAD
ggEBAGsPHMKojE2F8DAFDfavc+ds+UUHWKqYBa+6LhHJj51CJxUswNMSMi4GS6Hr
ImDxvc8mI9TaqGTe/lKZDmg0tejH2PYkQGGFkDuUDjD2qIoOs5HBA7dRzzY5Us/i
Lt/lIO/3krLcs842FaX+fwvU126gORb6y+RFaKAZ92kE+GpTjWoQ3oYRCafejVcX
fwyrXMbYkDT5WpVTAb4SbgA369xXoanepJIMu+iJvzXiCRnG14orfRxJi2dhuSlr
a+M6+/SMNjeGkS+Zu4VzsIKCY9/qJDMJXgoZYXGHt4/KP2p5WLukDu/ughI3r0fs
Ss9DLGL4E3HDjhdlVX6HZodl+t0=
-----END CERTIFICATE-----
Generated at Fri May 9 12:24:07 2025 by rpki-client