Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C322CB44C9AE11EF984866A1762E951A.roa
File: C322CB44C9AE11EF984866A1762E951A.roa (raw, json)
Hash identifier: mr4FN/1QVlwvO4hcDZBsE52WETICDkXIARA9PG+Pm9c=
Subject key identifier: 7C:E2:9B:37:42:D2:A5:DA:E0:A1:11:BD:D6:9E:B5:04:20:A4:E0:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C322CB44C9AE11EF984866A1762E951A.roa
Signing time: Fri 03 Jan 2025 08:43:11 +0000
ROA not before: Fri 03 Jan 2025 08:43:07 +0000
ROA not after: Sat 18 Jan 2025 08:43:07 +0000
asID: 139646
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63145 (0xf6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:43:07 2025 GMT
Not After : Jan 18 08:43:07 2025 GMT
Subject: CN=6777a31f-0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:79:e2:c3:8e:47:74:b8:15:f6:b3:c6:93:
16:10:e6:8a:bc:5d:b2:a8:ff:f1:79:a3:cd:f1:38:
1a:76:4e:fa:15:31:9a:4d:9e:a2:cc:87:83:54:1b:
5e:7a:40:57:de:93:0d:b6:d2:8d:ac:fb:a8:42:28:
73:05:3b:14:37:e9:3e:ce:f0:97:4b:46:8d:f1:16:
70:07:54:aa:f0:2c:9c:42:cb:e6:a4:57:fc:2b:49:
13:71:5e:f1:4b:a5:7f:66:c7:8f:0f:27:9a:ac:5e:
38:e7:1a:3a:e1:14:48:f1:da:29:97:bb:a8:d6:6b:
0e:ee:c9:e0:7d:d9:66:f7:74:52:52:6b:07:64:a6:
5a:16:2e:2b:c1:8f:e1:4b:d4:3e:85:d3:48:86:a6:
e4:50:87:96:a7:49:13:29:7e:bd:c2:c3:5c:3f:c0:
4b:51:ba:b0:38:c9:e0:40:d9:0b:13:84:11:43:2a:
a4:9b:42:57:b3:b7:a7:d8:56:54:f3:0f:e9:46:d2:
43:61:b0:6e:e3:d5:12:8d:e4:69:ba:87:25:5a:b7:
0e:88:de:91:fd:41:14:10:2d:eb:bf:20:78:9f:4f:
2e:0e:fa:4c:05:37:0c:b8:cf:91:19:a2:62:08:15:
ea:eb:39:8b:df:76:3f:1d:d4:e0:1a:d8:c8:3a:10:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:9B:37:42:D2:A5:DA:E0:A1:11:BD:D6:9E:B5:04:20:A4:E0:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C322CB44C9AE11EF984866A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
77:22:97:19:0f:57:f5:bb:eb:ea:57:18:ac:49:bb:17:61:1d:
87:e5:8d:47:78:c2:49:17:54:98:fe:7e:7a:23:87:f1:a7:e2:
04:ac:a2:17:21:d6:1a:02:31:8c:9e:c0:96:62:6b:4f:1e:83:
4f:00:67:dd:cc:c2:ce:b0:fe:2a:a2:55:74:e2:64:74:7f:f2:
be:62:bc:23:82:a2:45:7a:c1:bf:74:f9:80:48:2d:cf:8f:3b:
a2:48:f7:55:2d:96:b2:ca:6b:b6:c6:ee:31:68:11:6b:2d:25:
4e:cf:f2:e2:32:67:2b:bc:e8:92:30:6c:9e:a0:72:83:f5:bb:
0e:d4:12:1d:45:82:06:cd:4a:78:ed:7c:de:15:9f:66:cc:a4:
2c:0b:d4:41:16:bd:5d:1b:9b:3d:92:8f:58:9b:0f:5a:ce:29:
d4:79:88:d2:9d:b5:94:7c:34:24:e6:57:e3:e6:0b:3f:03:d5:
dc:5f:45:3f:c4:63:33:3d:78:ba:bb:ae:9c:08:fa:d2:99:2e:
ce:51:48:bb:11:9a:3f:38:e1:03:1f:d9:3a:12:10:f2:9a:34:
6f:13:df:01:60:ed:bb:dc:02:bb:c5:40:f3:e1:a9:3f:83:31:
ea:7e:72:a3:98:ab:e1:a3:63:3b:8a:55:83:be:a2:06:f5:52:
a9:1a:63:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPapMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDg0MzA3WhcNMjUwMTE4MDg0MzA3WjAYMRYw
FAYDVQQDEw02Nzc3YTMxZi0wYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZB54sOOR3S4FfazxpMWEOaKvF2yqP/xeaPN8Tgadk76FTGaTZ6izIeD
VBteekBX3pMNttKNrPuoQihzBTsUN+k+zvCXS0aN8RZwB1Sq8CycQsvmpFf8K0kT
cV7xS6V/ZsePDyearF445xo64RRI8dopl7uo1msO7sngfdlm93RSUmsHZKZaFi4r
wY/hS9Q+hdNIhqbkUIeWp0kTKX69wsNcP8BLUbqwOMngQNkLE4QRQyqkm0JXs7en
2FZU8w/pRtJDYbBu49USjeRpuoclWrcOiN6R/UEUEC3rvyB4n08uDvpMBTcMuM+R
GaJiCBXq6zmL33Y/HdTgGtjIOhAaswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHzi
mzdC0qXa4KERvdaetQQgpOA2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzIyQ0I0NEM5QUUxMUVGOTg0ODY2QTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPYQMA0GCSqGSIb3DQEBCwUA
A4IBAQB3IpcZD1f1u+vqVxisSbsXYR2H5Y1HeMJJF1SY/n56I4fxp+IErKIXIdYa
AjGMnsCWYmtPHoNPAGfdzMLOsP4qolV04mR0f/K+YrwjgqJFesG/dPmASC3Pjzui
SPdVLZayymu2xu4xaBFrLSVOz/LiMmcrvOiSMGyeoHKD9bsO1BIdRYIGzUp47Xze
FZ9mzKQsC9RBFr1dG5s9ko9Ymw9azinUeYjSnbWUfDQk5lfj5gs/A9XcX0U/xGMz
PXi6u66cCPrSmS7OUUi7EZo/OOEDH9k6EhDymjRvE98BYO273AK7xUDz4ak/gzHq
fnKjmKvho2M7ilWDvqIG9VKpGmO3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:41 2025 by rpki-client