Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9324CA2BF9D11EFA221E7A3762E951A.roa
File: F9324CA2BF9D11EFA221E7A3762E951A.roa (raw, json)
Hash identifier: NfYxw1rOBOhLp79SFd7MhfpVVUCLMaW3CToCxXrGRGw=
Subject key identifier: 84:86:E8:8C:67:31:E6:99:23:30:30:8D:2F:C5:34:F8:B6:4B:3F:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9324CA2BF9D11EFA221E7A3762E951A.roa
Signing time: Sat 21 Dec 2024 13:17:48 +0000
ROA not before: Sat 21 Dec 2024 13:17:45 +0000
ROA not after: Fri 31 Jan 2025 13:17:45 +0000
asID: 53835
IP address blocks: 156.231.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59324 (0xe7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:17:45 2024 GMT
Not After : Jan 31 13:17:45 2025 GMT
Subject: CN=6766bffc-f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:75:9e:e3:63:3f:f1:d4:ed:1a:2f:8c:d3:
b0:62:3a:10:2b:cc:d4:5d:5b:ce:9b:21:8b:02:b8:
a5:64:b1:0b:f1:f2:16:fd:a4:6b:e9:78:6c:3b:9f:
7e:29:c8:d1:fb:02:04:17:aa:02:13:45:63:64:1b:
86:0d:0f:ef:2e:ca:92:5a:01:44:36:78:9a:09:df:
26:ad:d6:b9:84:78:a5:c8:10:98:0b:fc:07:86:63:
6e:37:83:a8:0b:1b:34:36:25:65:df:27:4b:81:fa:
9a:6b:33:be:c2:49:52:75:45:f0:82:e4:16:67:d6:
48:ee:79:af:74:0d:14:16:ef:df:36:e4:ba:0c:9e:
1b:42:7e:af:4f:62:e2:59:6b:3f:e2:5d:70:b4:4a:
c8:9b:9d:0a:b2:21:55:e4:3d:c5:10:9f:a1:55:03:
29:4d:2e:49:c6:97:8d:8c:6f:69:c2:67:29:12:d6:
c8:29:a9:62:53:85:4a:0d:af:69:c3:ad:cb:d9:8c:
19:76:76:52:a3:52:c7:72:44:5b:bb:1b:e1:f1:5e:
ce:37:cb:d8:be:9d:e3:3b:60:9f:0d:c7:19:05:55:
2c:99:98:86:94:54:af:ec:bc:a9:da:da:7a:97:fb:
d3:c9:3e:ee:cc:1a:e3:87:e2:cc:8a:f6:04:5b:b1:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:E8:8C:67:31:E6:99:23:30:30:8D:2F:C5:34:F8:B6:4B:3F:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9324CA2BF9D11EFA221E7A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.104.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2e:a9:16:0e:60:98:33:c4:5f:56:03:72:11:ff:6b:7f:74:
d1:7f:26:61:6a:83:25:9b:40:99:c4:75:3a:38:af:ea:ac:62:
a5:36:e7:a9:31:6e:f9:22:fa:18:37:6e:3b:b6:2e:41:6d:64:
84:45:38:f7:79:bc:20:55:50:75:72:60:01:43:93:16:63:c9:
c6:94:f3:f5:e3:07:be:8f:44:41:7d:5b:b2:8c:3c:d9:79:32:
b0:be:e6:81:9e:80:10:30:40:fe:99:00:e1:28:7f:77:9c:f9:
f7:36:4d:a2:0e:98:95:de:fe:85:79:f4:ee:c4:f1:f1:47:3f:
b9:3a:94:67:a1:e1:b4:98:e7:c2:80:de:11:f2:39:87:a2:dd:
b9:95:94:26:6b:ea:2d:f9:f1:ab:5e:15:15:0d:aa:82:2f:7f:
11:06:a5:2f:99:b5:2c:4a:72:b9:0e:d4:0a:b5:2a:30:63:5e:
6e:7e:1a:8b:85:c0:d1:a2:63:e6:b3:3b:4f:fe:01:76:de:8d:
7e:1f:9a:82:d6:d6:a3:f1:66:45:e9:a2:06:26:00:d6:a0:d0:
8f:89:e8:f8:23:68:d7:06:2f:19:cf:2e:b8:e3:35:bd:d2:58:
0e:c7:43:32:90:e1:3f:c8:5a:05:71:26:f1:7a:8e:0e:75:6c:
74:54:36:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOe8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIxMTMxNzQ1WhcNMjUwMTMxMTMxNzQ1WjAYMRYw
FAYDVQQDEw02NzY2YmZmYy1mODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyhh1nuNjP/HU7RovjNOwYjoQK8zUXVvOmyGLArilZLEL8fIW/aRr6Xhs
O59+KcjR+wIEF6oCE0VjZBuGDQ/vLsqSWgFENniaCd8mrda5hHilyBCYC/wHhmNu
N4OoCxs0NiVl3ydLgfqaazO+wklSdUXwguQWZ9ZI7nmvdA0UFu/fNuS6DJ4bQn6v
T2LiWWs/4l1wtErIm50KsiFV5D3FEJ+hVQMpTS5JxpeNjG9pwmcpEtbIKaliU4VK
Da9pw63L2YwZdnZSo1LHckRbuxvh8V7ON8vYvp3jO2CfDccZBVUsmZiGlFSv7Lyp
2tp6l/vTyT7uzBrjh+LMivYEW7FQJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFISG
6IxnMeaZIzAwjS/FNPi2Sz/2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOTMyNENBMkJGOUQxMUVGQTIyMUU3QTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdoMA0GCSqGSIb3DQEBCwUA
A4IBAQAmLqkWDmCYM8RfVgNyEf9rf3TRfyZhaoMlm0CZxHU6OK/qrGKlNuepMW75
IvoYN247ti5BbWSERTj3ebwgVVB1cmABQ5MWY8nGlPP14we+j0RBfVuyjDzZeTKw
vuaBnoAQMED+mQDhKH93nPn3Nk2iDpiV3v6FefTuxPHxRz+5OpRnoeG0mOfCgN4R
8jmHot25lZQma+ot+fGrXhUVDaqCL38RBqUvmbUsSnK5DtQKtSowY15ufhqLhcDR
omPmsztP/gF23o1+H5qC1taj8WZF6aIGJgDWoNCPiej4I2jXBi8Zzy644zW90lgO
x0MykOE/yFoFcSbxeo4OdWx0VDZZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:42 2025 by rpki-client