Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2705B0B21611EF9EF41897762E951A.roa
File: EB2705B0B21611EF9EF41897762E951A.roa (raw, json)
Hash identifier: 8wQ7eIz1DHynTSgR20+7D/Luw/CFL/qEfux15GOKP88=
Subject key identifier: 27:B9:EA:94:0A:A6:F1:12:00:FA:64:7D:5F:38:74:91:A2:D0:4F:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2705B0B21611EF9EF41897762E951A.roa
Signing time: Wed 04 Dec 2024 08:08:18 +0000
ROA not before: Wed 04 Dec 2024 08:08:14 +0000
ROA not after: Thu 23 Jan 2025 08:08:14 +0000
asID: 63139
IP address blocks: 156.227.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57172 (0xdf54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:08:14 2024 GMT
Not After : Jan 23 08:08:14 2025 GMT
Subject: CN=67500df1-2e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:64:85:c7:d0:ca:4f:c2:e1:23:de:cd:1e:
ee:54:e9:da:0c:db:8a:c4:e3:8d:db:12:4e:78:49:
9b:8d:f5:df:b9:82:6e:45:29:5c:b4:d5:45:e5:0e:
69:c9:46:bd:c7:fa:43:5a:0d:7b:1e:de:29:fd:6d:
9b:94:e2:b9:5d:ae:ba:bb:e1:3d:63:53:5c:17:01:
c1:01:e6:ca:15:9a:c5:29:ef:54:33:02:88:d4:cb:
a7:23:2f:ff:fa:bc:6a:b7:04:de:2d:37:88:66:d4:
c5:5f:c7:29:ca:2b:e3:92:ba:1a:55:31:82:b0:9a:
cf:2f:ad:49:45:26:2b:c6:b9:5e:26:f8:42:de:95:
ae:05:99:10:ad:60:66:49:4c:b9:8b:08:21:fc:75:
37:b1:ae:8b:d3:4e:84:a8:4b:b0:8f:a9:15:bf:01:
63:1e:42:ee:b2:8c:14:a0:ff:cb:82:f4:7e:ef:3a:
2a:98:f5:8b:e1:a1:5d:fb:7d:42:df:62:dc:e6:e6:
fb:a2:af:ed:06:9e:78:4b:b7:d8:ae:7c:ae:3c:7e:
87:11:10:2f:2c:85:7d:64:ce:e5:cd:53:1f:93:5f:
3e:68:00:d8:17:53:67:72:d9:e4:27:58:58:bb:74:
cb:b5:19:ef:8f:c0:f8:4c:c3:eb:e0:2a:9c:a5:47:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:EA:94:0A:A6:F1:12:00:FA:64:7D:5F:38:74:91:A2:D0:4F:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2705B0B21611EF9EF41897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bd:e1:a4:40:ef:3d:5d:24:9b:aa:0d:21:3d:2d:db:09:10:
32:ce:f1:c4:c1:06:9e:fb:4e:0e:10:f9:bf:f9:dc:54:3e:4e:
56:3f:1d:a9:b8:d6:ae:85:6b:a5:d5:8e:78:7a:a2:bb:49:9d:
67:31:ee:b7:9e:2b:38:f7:e2:67:8f:ad:85:3f:97:6a:58:f9:
c4:59:e1:b3:b4:d6:58:53:63:bb:65:c9:ee:37:e3:27:6f:f7:
e0:8f:90:dd:47:b7:fb:cf:40:1a:ec:fd:8e:ac:21:0a:61:d8:
70:28:83:f3:5a:28:70:75:2c:c9:20:b0:a2:ee:cd:58:bb:d7:
c0:1c:3c:52:df:af:b8:f4:6f:9d:d4:70:b2:70:f3:e4:5f:84:
bd:9e:1d:7a:f9:f2:c5:88:b0:cd:ba:b7:1c:40:fa:70:e1:05:
b1:59:a4:2e:24:de:ae:d5:3a:ea:d3:65:33:81:d5:42:a1:4b:
f6:29:b7:f2:5a:df:0e:26:0d:96:c3:67:6e:79:e3:12:a3:50:
f2:07:27:05:e9:42:87:31:93:28:c3:62:ac:c6:5a:96:29:e7:
b7:00:a4:2f:b7:de:4a:2a:34:7c:b3:5b:37:0f:d2:c9:3c:5c:
34:b1:c6:97:10:bb:94:5a:6a:87:10:5c:30:05:c5:99:a5:d2:
95:07:e6:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAN9UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA0MDgwODE0WhcNMjUwMTIzMDgwODE0WjAYMRYw
FAYDVQQDEw02NzUwMGRmMS0yZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1JhkhcfQyk/C4SPezR7uVOnaDNuKxOON2xJOeEmbjfXfuYJuRSlctNVF
5Q5pyUa9x/pDWg17Ht4p/W2blOK5Xa66u+E9Y1NcFwHBAebKFZrFKe9UMwKI1Mun
Iy//+rxqtwTeLTeIZtTFX8cpyivjkroaVTGCsJrPL61JRSYrxrleJvhC3pWuBZkQ
rWBmSUy5iwgh/HU3sa6L006EqEuwj6kVvwFjHkLusowUoP/LgvR+7zoqmPWL4aFd
+31C32Lc5ub7oq/tBp54S7fYrnyuPH6HERAvLIV9ZM7lzVMfk18+aADYF1Nnctnk
J1hYu3TLtRnvj8D4TMPr4CqcpUd/lQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCe5
6pQKpvESAPpkfV84dJGi0E+rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjI3MDVCMEIyMTYxMUVGOUVGNDE4OTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOPLMA0GCSqGSIb3DQEBCwUA
A4IBAQCrveGkQO89XSSbqg0hPS3bCRAyzvHEwQae+04OEPm/+dxUPk5WPx2puNau
hWul1Y54eqK7SZ1nMe63nis49+Jnj62FP5dqWPnEWeGztNZYU2O7ZcnuN+Mnb/fg
j5DdR7f7z0Aa7P2OrCEKYdhwKIPzWihwdSzJILCi7s1Yu9fAHDxS36+49G+d1HCy
cPPkX4S9nh16+fLFiLDNurccQPpw4QWxWaQuJN6u1Trq02UzgdVCoUv2KbfyWt8O
Jg2Ww2dueeMSo1DyBycF6UKHMZMow2KsxlqWKee3AKQvt95KKjR8s1s3D9LJPFw0
scaXELuUWmqHEFwwBcWZpdKVB+bc
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:03 2025 by rpki-client