Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A76AC6C99E11EFA648E9BB762E951A.roa
File: C3A76AC6C99E11EFA648E9BB762E951A.roa (raw, json)
Hash identifier: gZBlth95DrGAl6idlFdMq6VMN6nR2UPoP1Cb5eN1wbw=
Subject key identifier: E6:24:9D:7A:F3:E2:8B:BD:A6:AC:4F:F5:24:BD:54:36:92:48:AE:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F65B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A76AC6C99E11EFA648E9BB762E951A.roa
Signing time: Fri 03 Jan 2025 06:48:40 +0000
ROA not before: Fri 03 Jan 2025 06:48:36 +0000
ROA not after: Sat 18 Jan 2025 06:48:36 +0000
asID: 149641
IP address blocks: 156.240.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63067 (0xf65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:48:36 2025 GMT
Not After : Jan 18 06:48:36 2025 GMT
Subject: CN=67778848-dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:b7:c1:86:56:d9:ba:87:e3:87:c8:b8:da:
c8:99:e2:7d:86:40:8e:59:39:cd:f6:50:24:95:15:
4d:f2:c7:05:55:53:ca:ec:3f:7f:94:77:75:78:c3:
91:74:5a:e5:60:3e:28:26:b0:49:f0:b1:0d:6b:5f:
aa:d9:c3:48:8e:7c:e4:e8:e9:00:cc:9c:f0:5b:17:
a3:77:71:c9:ca:27:ee:3c:aa:32:fd:4b:01:24:a4:
5b:52:30:0d:0c:ab:db:3c:30:67:d1:08:51:99:4a:
f4:08:f2:2b:9e:42:2a:d8:1a:26:86:18:6e:03:4f:
32:68:fd:62:4a:c5:92:68:54:55:6c:89:ae:47:51:
6c:fb:2a:e6:5d:45:a7:fb:a1:22:56:13:cb:67:78:
73:23:90:e4:fb:b6:7d:1a:48:34:81:0f:ae:df:0e:
7c:6a:24:e7:2b:9b:71:42:d9:a4:8a:3a:d6:55:d0:
26:d6:71:a4:76:5f:14:51:9a:41:9e:c8:ef:78:5f:
07:d8:dc:11:46:9f:1d:eb:50:29:0a:c1:35:5b:1f:
20:e8:a0:35:1a:0e:06:31:87:5e:9b:ce:b3:10:38:
9b:b2:a9:55:60:9f:ca:fa:f7:c5:b8:9f:16:9f:54:
56:93:34:f8:45:6a:6f:80:e8:85:1b:af:a5:b4:62:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:9D:7A:F3:E2:8B:BD:A6:AC:4F:F5:24:BD:54:36:92:48:AE:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3A76AC6C99E11EFA648E9BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.78.0/24
Signature Algorithm: sha256WithRSAEncryption
50:74:cf:a0:e6:3b:d7:a3:0e:ed:9e:d0:5b:f3:4b:1a:66:ad:
c4:c2:1a:4b:2a:d7:26:06:44:dd:fd:6f:80:c2:c4:31:8a:c6:
03:49:87:a2:d9:ae:8a:3c:73:e0:a9:2a:1a:06:a4:5d:e8:17:
a9:65:68:fe:3d:1a:26:4f:f0:1e:a7:84:ae:de:fc:62:ed:1e:
6f:14:55:04:93:8e:7d:e9:11:57:08:32:0b:69:bc:e9:94:b8:
60:26:38:39:6c:ed:df:78:c3:a6:d8:a4:ac:c1:9e:72:82:0b:
b3:5f:a3:1b:3a:4a:9a:01:a5:3e:44:8b:c6:b7:4f:e6:24:16:
d3:5f:56:82:27:3e:34:6f:13:7c:de:4b:13:d3:ff:11:01:15:
0c:51:66:b7:17:84:a5:7d:51:21:00:5f:0a:b2:33:88:b4:43:
24:7f:de:46:53:89:1a:73:f2:18:75:b0:bb:e0:78:06:43:a0:
8b:6c:31:7b:7f:9b:9f:9c:bb:42:67:a5:f9:70:55:f0:56:28:
9b:17:e6:27:0d:60:32:cf:2e:52:b1:91:26:c1:a9:5a:f5:85:
7a:fe:eb:b4:16:07:72:8d:ba:b3:70:14:3a:2f:1f:a1:e4:f5:
a0:55:12:81:0a:e6:0d:8b:46:37:06:0b:5c:b6:02:f0:89:7a:
a0:ab:51:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPZbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDY0ODM2WhcNMjUwMTE4MDY0ODM2WjAYMRYw
FAYDVQQDEw02Nzc3ODg0OC1kY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0aa3wYZW2bqH44fIuNrImeJ9hkCOWTnN9lAklRVN8scFVVPK7D9/lHd1
eMORdFrlYD4oJrBJ8LENa1+q2cNIjnzk6OkAzJzwWxejd3HJyifuPKoy/UsBJKRb
UjANDKvbPDBn0QhRmUr0CPIrnkIq2BomhhhuA08yaP1iSsWSaFRVbImuR1Fs+yrm
XUWn+6EiVhPLZ3hzI5Dk+7Z9Gkg0gQ+u3w58aiTnK5txQtmkijrWVdAm1nGkdl8U
UZpBnsjveF8H2NwRRp8d61ApCsE1Wx8g6KA1Gg4GMYdem86zEDibsqlVYJ/K+vfF
uJ8Wn1RWkzT4RWpvgOiFG6+ltGJ+ZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOYk
nXrz4ou9pqxP9SS9VDaSSK65MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DM0E3NkFDNkM5OUUxMUVGQTY0OEU5QkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBOMA0GCSqGSIb3DQEBCwUA
A4IBAQBQdM+g5jvXow7tntBb80saZq3EwhpLKtcmBkTd/W+AwsQxisYDSYei2a6K
PHPgqSoaBqRd6BepZWj+PRomT/Aep4Su3vxi7R5vFFUEk4596RFXCDILabzplLhg
Jjg5bO3feMOm2KSswZ5ygguzX6MbOkqaAaU+RIvGt0/mJBbTX1aCJz40bxN83ksT
0/8RARUMUWa3F4SlfVEhAF8KsjOItEMkf95GU4kac/IYdbC74HgGQ6CLbDF7f5uf
nLtCZ6X5cFXwViibF+YnDWAyzy5SsZEmwala9YV6/uu0FgdyjbqzcBQ6Lx+h5PWg
VRKBCuYNi0Y3BgtctgLwiXqgq1EQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client