Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5369678BEA111EF8A7BA979762E951A.roa
File: F5369678BEA111EF8A7BA979762E951A.roa (raw, json)
Hash identifier: GR9dL11RYeI/RitXDYAVDwkP8Z+rns3EABn70kjBnyY=
Subject key identifier: E6:E6:8F:D6:6C:E1:3A:20:0D:78:21:26:60:EE:AC:3B:8E:68:EB:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E70A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5369678BEA111EF8A7BA979762E951A.roa
Signing time: Fri 20 Dec 2024 07:13:49 +0000
ROA not before: Fri 20 Dec 2024 07:13:45 +0000
ROA not after: Thu 23 Jan 2025 07:13:45 +0000
asID: 202656
IP address blocks: 156.236.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59146 (0xe70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:13:45 2024 GMT
Not After : Jan 23 07:13:45 2025 GMT
Subject: CN=6765192c-9e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:70:ad:5d:c6:28:40:26:dc:40:cf:ee:87:
82:6e:0c:e8:0c:6c:0f:24:3e:26:32:28:f5:37:41:
35:c7:f1:1c:06:88:94:de:2f:0e:13:e5:97:ac:2c:
b2:6a:7e:d2:b6:36:3a:9b:41:9b:8f:e0:fb:52:02:
5e:8c:6e:21:3a:1e:a8:d9:a8:86:49:e5:4c:2c:06:
e1:bf:05:73:fa:15:ff:87:7a:87:48:14:7f:c6:42:
44:ba:60:e8:f5:a8:e9:63:45:01:e0:3c:c9:76:5c:
dd:d8:f4:0f:be:25:75:d0:d3:14:3e:da:ef:ae:ff:
6d:33:ff:bf:84:6a:07:20:e3:c5:0d:1b:5f:7b:52:
b8:49:6a:2d:23:7d:ca:b2:c3:87:aa:2e:82:35:e8:
fd:84:a8:28:8e:fc:bd:54:e0:6a:3f:a2:bd:5c:2f:
21:ee:90:a8:fc:cc:74:52:3e:07:d0:ce:1d:c8:03:
6e:9e:94:80:06:4b:48:92:71:3f:a8:5b:ec:ec:f1:
27:e4:2b:2b:06:0d:34:74:2b:5b:c3:2d:89:71:42:
cc:27:c5:30:9f:03:14:8c:89:c1:60:c4:ff:c3:4f:
2d:a5:f5:58:36:fa:41:6e:7e:00:08:19:3b:b3:bc:
76:0a:f7:28:7c:ed:97:f5:3c:5b:6f:d1:aa:6e:a3:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E6:8F:D6:6C:E1:3A:20:0D:78:21:26:60:EE:AC:3B:8E:68:EB:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5369678BEA111EF8A7BA979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.105.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cf:06:ef:d9:4b:fb:ba:01:ed:0b:72:c7:13:83:d5:c2:24:
18:85:ad:be:2d:42:bd:23:e9:4c:48:e0:7b:34:ff:f6:b6:28:
9f:85:89:f8:c9:35:39:aa:4e:34:e8:8e:b9:ba:03:3e:87:a0:
b1:91:d2:6e:fe:b4:cf:f0:6c:65:06:18:bc:63:ef:6c:1c:9f:
39:0e:2c:16:03:3a:24:04:98:f6:eb:54:62:e9:5c:ba:97:d3:
42:ca:37:57:b4:4e:84:92:27:52:3c:56:3d:e6:82:fd:29:8d:
2a:79:e0:fe:86:5c:e3:ec:66:a7:06:0d:87:d7:97:d8:72:a8:
98:38:3a:86:65:67:63:90:0c:75:c6:62:e5:15:fd:06:75:b6:
42:3c:95:c0:34:24:a5:66:54:f5:96:9e:46:ad:bb:2e:32:7c:
55:25:44:5b:1a:69:3b:f8:91:39:f7:da:c3:42:fb:2f:ae:43:
dc:ce:8c:31:3b:f8:67:f8:15:a4:55:0f:ea:ed:34:da:5e:21:
c1:b9:74:3e:48:09:1b:05:32:9d:23:11:f9:82:52:b4:14:55:
c1:6b:c5:55:74:6e:f4:38:29:c3:c7:52:93:be:55:f6:f6:d7:
a2:5f:f3:91:99:e8:01:98:ca:9e:d2:09:50:ba:fe:48:0c:03:
f3:67:89:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOcKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDcxMzQ1WhcNMjUwMTIzMDcxMzQ1WjAYMRYw
FAYDVQQDEw02NzY1MTkyYy05ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArslwrV3GKEAm3EDP7oeCbgzoDGwPJD4mMij1N0E1x/EcBoiU3i8OE+WX
rCyyan7StjY6m0Gbj+D7UgJejG4hOh6o2aiGSeVMLAbhvwVz+hX/h3qHSBR/xkJE
umDo9ajpY0UB4DzJdlzd2PQPviV10NMUPtrvrv9tM/+/hGoHIOPFDRtfe1K4SWot
I33KssOHqi6CNej9hKgojvy9VOBqP6K9XC8h7pCo/Mx0Uj4H0M4dyANunpSABktI
knE/qFvs7PEn5CsrBg00dCtbwy2JcULMJ8UwnwMUjInBYMT/w08tpfVYNvpBbn4A
CBk7s7x2CvcofO2X9Txbb9GqbqMHXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFObm
j9Zs4TogDXghJmDurDuOaOvLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNTM2OTY3OEJFQTExMUVGOEE3QkE5Nzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOxpMA0GCSqGSIb3DQEBCwUA
A4IBAQByzwbv2Uv7ugHtC3LHE4PVwiQYha2+LUK9I+lMSOB7NP/2tiifhYn4yTU5
qk406I65ugM+h6CxkdJu/rTP8GxlBhi8Y+9sHJ85DiwWAzokBJj261Ri6Vy6l9NC
yjdXtE6EkidSPFY95oL9KY0qeeD+hlzj7GanBg2H15fYcqiYODqGZWdjkAx1xmLl
Ff0GdbZCPJXANCSlZlT1lp5GrbsuMnxVJURbGmk7+JE599rDQvsvrkPczowxO/hn
+BWkVQ/q7TTaXiHBuXQ+SAkbBTKdIxH5glK0FFXBa8VVdG70OCnDx1KTvlX29tei
X/ORmegBmMqe0glQuv5IDAPzZ4n6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:09 2025 by rpki-client