Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D61B87D6CAD011EFBB89F843762E951A.roa
File: D61B87D6CAD011EFBB89F843762E951A.roa (raw, json)
Hash identifier: J/4rlDNrfxmqA20dTNh3Ey23biXYp7RNX0yP+QX2NkE=
Subject key identifier: 52:76:68:88:EE:15:94:89:65:23:3C:AF:5D:40:3C:D6:0E:AA:5C:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F77E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D61B87D6CAD011EFBB89F843762E951A.roa
Signing time: Sat 04 Jan 2025 19:19:37 +0000
ROA not before: Sun 05 Jan 2025 19:19:33 +0000
ROA not after: Sat 18 Jan 2025 19:19:33 +0000
asID: 142286
IP address blocks: 156.250.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63358 (0xf77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:19:33 2025 GMT
Not After : Jan 18 19:19:33 2025 GMT
Subject: CN=677989c8-814b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:ff:d3:00:48:5c:3f:83:49:9b:b4:e1:3b:
27:89:2d:4f:60:1d:0b:b4:ba:02:3e:0b:60:94:37:
01:d2:ce:6d:2c:e1:52:f8:26:0b:fb:c1:91:94:e2:
19:1c:2e:c7:00:19:ad:fd:ff:ef:e6:e1:3c:ea:a1:
0c:ae:71:0f:dd:4a:92:e5:15:ae:8e:b7:8e:8a:8a:
38:51:71:f9:39:b4:d6:0b:fd:e3:be:05:53:b0:15:
d4:df:34:1b:d1:58:91:0d:b4:90:61:59:b8:b4:cf:
5a:c7:a3:31:86:c2:c7:9b:58:07:07:75:07:13:db:
2b:77:ca:72:7a:08:b3:69:34:89:31:e5:46:df:14:
ed:0d:cc:23:a2:92:74:c8:f1:7e:79:c3:c6:0d:77:
10:69:e1:18:3a:55:a4:64:5b:68:3b:a5:d9:87:4a:
a3:f1:c5:ba:79:2b:8b:d3:dc:b2:d7:6c:b8:43:f3:
fe:91:d8:2f:dc:69:31:28:de:e0:fc:89:d0:a3:e9:
67:19:b2:ef:f9:39:da:bb:f6:a3:9a:ce:82:94:46:
55:13:e9:fb:e7:0e:d2:8d:44:63:ff:b9:78:3b:02:
0b:f8:93:f1:85:c6:25:d5:33:50:19:4b:51:08:15:
69:37:0c:a1:0b:bd:76:cf:4a:76:92:9a:f4:d7:d4:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:68:88:EE:15:94:89:65:23:3C:AF:5D:40:3C:D6:0E:AA:5C:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D61B87D6CAD011EFBB89F843762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.16.0/20
Signature Algorithm: sha256WithRSAEncryption
30:f8:ed:c4:42:bc:c0:77:5c:c1:29:6c:5a:27:55:33:05:e3:
f3:88:aa:f5:ee:51:90:4c:00:bf:c2:f6:3b:9d:cc:17:57:61:
de:8e:cf:10:77:84:82:d3:27:ab:48:a3:d0:fa:9e:bd:30:b8:
02:26:ce:53:ec:32:9e:3a:db:bb:36:cd:75:ba:2b:e8:2c:d7:
45:fb:c1:26:78:0c:be:05:fd:d4:7d:b4:76:c4:f0:36:64:19:
bf:4f:73:5a:56:9f:89:6b:2f:17:78:22:c6:fc:bd:45:91:43:
17:49:4f:b0:ac:47:eb:b3:41:22:5b:b4:c3:56:a3:74:cd:8e:
92:f3:7c:91:48:55:ff:51:c5:90:d0:b6:f6:83:01:d1:0f:91:
06:a1:ba:f8:f9:26:0d:9a:2e:e7:e4:c1:13:14:27:5a:86:79:
db:59:a6:d1:34:f1:12:b1:36:f9:4b:01:63:54:1a:b7:fa:c2:
a3:ed:19:7a:d4:6b:be:20:a2:5a:0d:04:f2:7c:5a:1e:32:54:
a8:61:4e:cc:8e:64:71:d6:19:15:6c:88:40:a2:d8:68:7b:63:
4f:90:5a:a2:6b:4f:1f:2f:48:c7:2c:de:b9:b5:ca:b3:7d:d9:
92:e8:39:6d:62:d6:27:4e:60:64:eb:40:10:fa:6f:19:50:18:
dc:65:6a:e0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPd+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTkxOTMzWhcNMjUwMTE4MTkxOTMzWjAYMRYw
FAYDVQQDEw02Nzc5ODljOC04MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8OL/0wBIXD+DSZu04TsniS1PYB0LtLoCPgtglDcB0s5tLOFS+CYL+8GR
lOIZHC7HABmt/f/v5uE86qEMrnEP3UqS5RWujreOioo4UXH5ObTWC/3jvgVTsBXU
3zQb0ViRDbSQYVm4tM9ax6MxhsLHm1gHB3UHE9srd8pyegizaTSJMeVG3xTtDcwj
opJ0yPF+ecPGDXcQaeEYOlWkZFtoO6XZh0qj8cW6eSuL09yy12y4Q/P+kdgv3Gkx
KN7g/InQo+lnGbLv+Tnau/ajms6ClEZVE+n75w7SjURj/7l4OwIL+JPxhcYl1TNQ
GUtRCBVpNwyhC712z0p2kpr019RTOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFJ2
aIjuFZSJZSM8r11APNYOqlz0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjFCODdENkNBRDAxMUVGQkI4OUY4NDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnPoQMA0GCSqGSIb3DQEBCwUA
A4IBAQAw+O3EQrzAd1zBKWxaJ1UzBePziKr17lGQTAC/wvY7ncwXV2Hejs8Qd4SC
0yerSKPQ+p69MLgCJs5T7DKeOtu7Ns11uivoLNdF+8EmeAy+Bf3UfbR2xPA2ZBm/
T3NaVp+Jay8XeCLG/L1FkUMXSU+wrEfrs0EiW7TDVqN0zY6S83yRSFX/UcWQ0Lb2
gwHRD5EGobr4+SYNmi7n5METFCdahnnbWabRNPESsTb5SwFjVBq3+sKj7Rl61Gu+
IKJaDQTyfFoeMlSoYU7MjmRx1hkVbIhAothoe2NPkFqia08fL0jHLN65tcqzfdmS
6DltYtYnTmBk60AQ+m8ZUBjcZWrg
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:34 2025 by rpki-client