Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC21B384F90E11EDB4EBF37C4AD9E6FC.roa
File: DC21B384F90E11EDB4EBF37C4AD9E6FC.roa (raw, json)
Hash identifier: qp9FDZukFlBtMnIm5Ww/ih5ApO+j2lRCxrWYmGUfb4g=
Subject key identifier: DA:FC:9B:8E:AB:4C:AA:A9:60:23:BB:9D:81:20:D5:6A:D4:C5:44:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 264F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC21B384F90E11EDB4EBF37C4AD9E6FC.roa
Signing time: Tue 23 May 2023 02:09:34 +0000
ROA not before: Tue 23 May 2023 02:09:30 +0000
ROA not after: Sat 13 Apr 2024 02:09:30 +0000
asID: 64267
IP address blocks: 156.248.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9807 (0x264f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:09:30 2023 GMT
Not After : Apr 13 02:09:30 2024 GMT
Subject: CN=646c205e-ce58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:28:f9:28:34:99:a9:4f:ee:22:5a:9a:5b:
33:3c:d2:9d:54:32:87:e5:07:52:b0:33:d6:ae:a8:
b0:f5:d2:0d:ab:0b:f4:be:76:b5:a3:a5:e8:2b:28:
43:e2:e5:b7:75:c0:57:56:bf:d1:ab:04:6e:eb:62:
83:a0:b8:a4:da:37:d7:a9:d8:13:6a:34:18:67:86:
46:da:39:b3:91:37:3e:5c:06:c0:a5:a0:7a:81:27:
87:25:dc:68:b5:cc:fd:e6:b3:47:f5:80:99:98:b4:
2f:f7:60:6c:8e:ab:78:05:b9:5a:f8:9d:b1:73:9c:
df:d4:6c:4b:2b:45:0c:eb:8f:e6:c2:3c:c4:b8:f4:
f1:fb:07:7b:50:07:4f:9c:28:ac:f2:8f:6c:6e:f0:
e1:9e:ce:68:90:73:38:79:30:a0:7e:a6:c8:06:68:
a2:78:69:dc:fd:4d:9f:36:db:68:fb:0e:28:6f:f9:
7d:3c:c8:f3:30:2a:54:b6:93:18:f0:22:cc:c9:a7:
5c:08:98:ca:f2:bc:88:0c:13:3a:5d:79:15:40:81:
d4:19:40:51:cf:09:e0:c9:f0:f6:ef:44:4c:9b:91:
9f:35:3b:c0:e4:31:f4:ba:4a:6a:e9:25:74:2e:72:
d4:76:61:63:f2:61:07:25:97:ed:50:05:17:cc:9b:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:9B:8E:AB:4C:AA:A9:60:23:BB:9D:81:20:D5:6A:D4:C5:44:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC21B384F90E11EDB4EBF37C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.99.0/24
Signature Algorithm: sha256WithRSAEncryption
72:24:bb:8c:80:05:27:e4:1a:fc:a3:cf:f2:bb:2e:b7:87:4b:
cf:dc:48:ef:19:3b:c6:23:74:9c:b5:2a:38:4c:82:a5:d6:6e:
ce:94:a8:28:cb:a9:8f:e5:04:25:ec:96:30:61:63:e3:96:75:
ee:f3:f6:55:43:c8:05:71:4b:c2:10:3e:32:d7:7f:6a:0e:f0:
0d:f1:4a:21:b9:37:19:e5:61:25:04:80:1f:a9:f1:91:f6:a1:
f4:c5:e0:21:4b:91:e9:14:c2:ce:55:cc:4a:ab:40:cd:17:fe:
09:e6:85:98:d8:c6:dd:a6:b9:eb:6b:38:20:1a:f9:b6:30:e5:
72:4e:57:f6:46:c4:a4:bb:34:69:58:67:bc:53:03:55:35:0f:
3b:ce:4b:f7:75:62:32:12:ab:9d:34:85:0f:ca:ab:03:13:99:
af:38:33:18:01:49:7c:e6:15:92:f7:ea:02:9f:5a:16:5e:13:
e7:b9:73:b5:81:3c:0a:7c:ec:2b:c5:ff:d0:fd:a4:cd:49:75:
cf:c3:1d:48:02:7f:04:8d:9e:ad:fc:61:50:50:d7:5a:b6:99:
2b:59:e3:7c:59:bb:46:0d:78:d0:3b:f8:3b:68:6e:2d:08:ef:
01:31:87:e3:85:e3:4b:24:2a:0c:58:4e:29:dd:45:29:3c:dc:
42:23:84:80
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJk8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMjA5MzBaFw0yNDA0MTMwMjA5MzBaMBgxFjAU
BgNVBAMTDTY0NmMyMDVlLWNlNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3yyj5KDSZqU/uIlqaWzM80p1UMoflB1KwM9auqLD10g2rC/S+drWjpegr
KEPi5bd1wFdWv9GrBG7rYoOguKTaN9ep2BNqNBhnhkbaObORNz5cBsCloHqBJ4cl
3Gi1zP3ms0f1gJmYtC/3YGyOq3gFuVr4nbFznN/UbEsrRQzrj+bCPMS49PH7B3tQ
B0+cKKzyj2xu8OGezmiQczh5MKB+psgGaKJ4adz9TZ8222j7Dihv+X08yPMwKlS2
kxjwIszJp1wImMryvIgMEzpdeRVAgdQZQFHPCeDJ8PbvREybkZ81O8DkMfS6Smrp
JXQuctR2YWPyYQcll+1QBRfMm1/rAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2vyb
jqtMqqlgI7udgSDVatTFREMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RDMjFCMzg0RjkwRTExRURCNEVCRjM3QzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+GMwDQYJKoZIhvcNAQELBQAD
ggEBAHIku4yABSfkGvyjz/K7LreHS8/cSO8ZO8YjdJy1KjhMgqXWbs6UqCjLqY/l
BCXsljBhY+OWde7z9lVDyAVxS8IQPjLXf2oO8A3xSiG5NxnlYSUEgB+p8ZH2ofTF
4CFLkekUws5VzEqrQM0X/gnmhZjYxt2muetrOCAa+bYw5XJOV/ZGxKS7NGlYZ7xT
A1U1DzvOS/d1YjISq500hQ/KqwMTma84MxgBSXzmFZL36gKfWhZeE+e5c7WBPAp8
7CvF/9D9pM1Jdc/DHUgCfwSNnq38YVBQ11q2mStZ43xZu0YNeNA7+Dtobi0I7wEx
h+OF40skKgxYTindRSk83EIjhIA=
-----END CERTIFICATE-----
Generated at Sun May 11 15:23:50 2025 by rpki-client