Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9449A8CACF11EF8457EBBD762E951A.roa
File: ED9449A8CACF11EF8457EBBD762E951A.roa (raw, json)
Hash identifier: yPm/0GjIjXdEpdJ0VL7AqcSr0Qr5jmrUIz3Twa300LQ=
Subject key identifier: A2:C2:09:DD:02:69:10:A0:4F:39:E4:B1:E3:69:73:80:7D:C8:E1:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F778
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9449A8CACF11EF8457EBBD762E951A.roa
Signing time: Sat 04 Jan 2025 19:13:06 +0000
ROA not before: Sun 05 Jan 2025 19:13:03 +0000
ROA not after: Sat 18 Jan 2025 19:13:03 +0000
asID: 142286
IP address blocks: 156.226.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63352 (0xf778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 19:13:03 2025 GMT
Not After : Jan 18 19:13:03 2025 GMT
Subject: CN=67798842-c9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:34:5f:4d:98:cf:a8:34:67:1d:30:07:f7:
cb:61:db:ad:bc:93:de:4c:8b:cb:33:c8:2b:6d:6e:
68:71:66:6c:46:0a:d1:fa:9a:f6:e4:6a:35:a5:d3:
c5:95:e8:52:28:88:a6:aa:07:d6:2b:b7:31:8d:3a:
b7:6f:b6:06:62:11:d7:5d:61:f8:92:27:02:46:d0:
0e:04:14:fd:f7:6f:57:3f:3a:77:0a:3b:ff:dc:92:
09:80:78:fd:0b:2b:24:ec:53:e4:9c:4f:6c:5e:88:
f0:ae:4e:d7:76:12:73:dc:98:40:07:92:b4:4d:96:
dd:40:af:22:fa:a9:d8:95:2e:53:16:bf:18:b6:e8:
12:5a:6b:7d:ee:93:d4:7e:3a:2b:07:b0:ab:fc:20:
1c:a5:b8:88:ea:c0:38:fa:08:29:01:d4:b6:67:bd:
a3:59:33:f0:6c:3a:62:2c:89:63:b4:0d:f4:69:23:
8a:c8:0b:9a:7b:02:58:08:32:0b:df:ec:36:15:01:
fd:2a:92:82:f5:be:6b:53:26:aa:c5:b2:4c:29:dc:
ec:b6:ec:3c:3a:f9:d0:a3:fb:79:c3:32:7e:69:c9:
20:35:b5:09:23:ce:7b:20:58:a2:d8:df:a9:0c:e2:
1c:87:71:59:50:f4:4e:21:c1:25:c3:25:35:af:83:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:09:DD:02:69:10:A0:4F:39:E4:B1:E3:69:73:80:7D:C8:E1:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED9449A8CACF11EF8457EBBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.24.0/21
Signature Algorithm: sha256WithRSAEncryption
26:11:12:da:8a:81:75:c1:d2:be:ed:86:65:c3:3b:61:8f:78:
f3:ef:cb:8d:55:9c:85:ae:44:f9:cc:d8:b4:55:15:0d:83:6d:
97:c5:87:e8:3e:f1:88:96:d7:b0:08:a6:93:04:dc:9e:a2:c4:
e2:0a:d2:aa:79:43:85:26:d6:51:cf:c6:94:6c:57:7d:de:ba:
39:52:2a:63:19:b3:cd:96:7a:1d:83:5f:a4:66:a7:60:9e:d0:
b3:38:3c:02:13:de:e5:65:4c:87:4f:b2:fb:90:99:76:46:ce:
7d:f8:96:18:7d:36:a8:de:30:86:96:90:e1:01:5a:5e:02:70:
68:ad:20:c6:d4:2b:fb:65:30:d6:46:8c:e4:ef:88:25:e9:28:
4e:b7:7c:6e:c4:08:a8:96:a6:c7:4e:25:c2:1c:06:d6:e0:0f:
e3:1b:0a:c2:6f:54:87:56:01:e2:81:91:8f:52:45:ef:65:a7:
d0:e7:c2:67:11:b3:b6:94:ed:8b:70:67:bb:8e:8a:bf:7f:34:
25:7a:53:c2:f7:56:71:6e:ce:1c:51:6f:d1:58:5f:94:aa:48:
72:93:dd:28:01:91:e6:75:7e:df:4a:fa:25:07:02:55:e4:eb:
d7:ab:15:03:72:85:df:ab:c2:80:5d:ec:84:1a:22:df:83:30:
b0:f5:36:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPd4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTkxMzAzWhcNMjUwMTE4MTkxMzAzWjAYMRYw
FAYDVQQDEw02Nzc5ODg0Mi1jOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuGs0X02Yz6g0Zx0wB/fLYdutvJPeTIvLM8grbW5ocWZsRgrR+pr25Go1
pdPFlehSKIimqgfWK7cxjTq3b7YGYhHXXWH4kicCRtAOBBT9929XPzp3Cjv/3JIJ
gHj9Cysk7FPknE9sXojwrk7XdhJz3JhAB5K0TZbdQK8i+qnYlS5TFr8YtugSWmt9
7pPUfjorB7Cr/CAcpbiI6sA4+ggpAdS2Z72jWTPwbDpiLIljtA30aSOKyAuaewJY
CDIL3+w2FQH9KpKC9b5rUyaqxbJMKdzstuw8OvnQo/t5wzJ+ackgNbUJI857IFii
2N+pDOIch3FZUPROIcElwyU1r4PakwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKLC
Cd0CaRCgTznkseNpc4B9yOGOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRDk0NDlBOENBQ0YxMUVGODQ1N0VCQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOIYMA0GCSqGSIb3DQEBCwUA
A4IBAQAmERLaioF1wdK+7YZlwzthj3jz78uNVZyFrkT5zNi0VRUNg22XxYfoPvGI
ltewCKaTBNyeosTiCtKqeUOFJtZRz8aUbFd93ro5UipjGbPNlnodg1+kZqdgntCz
ODwCE97lZUyHT7L7kJl2Rs59+JYYfTao3jCGlpDhAVpeAnBorSDG1Cv7ZTDWRozk
74gl6ShOt3xuxAiolqbHTiXCHAbW4A/jGwrCb1SHVgHigZGPUkXvZafQ58JnEbO2
lO2LcGe7joq/fzQlelPC91Zxbs4cUW/RWF+Uqkhyk90oAZHmdX7fSvolBwJV5OvX
qxUDcoXfq8KAXeyEGiLfgzCw9Tbf
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:49 2025 by rpki-client