Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC5622000211F0BDB4DE84762E951A.roa
File: FBEC5622000211F0BDB4DE84762E951A.roa (raw, json)
Hash identifier: Mvbr/kqOvAeK6U5lLHnj6uBggOUNllQlsZ4xRN/pun8=
Subject key identifier: AA:2E:A6:59:19:23:E1:A3:72:18:9C:65:E3:90:16:75:85:78:6C:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC5622000211F0BDB4DE84762E951A.roa
Signing time: Thu 13 Mar 2025 12:02:06 +0000
ROA not before: Thu 13 Mar 2025 12:02:02 +0000
ROA not after: Wed 02 Apr 2025 12:02:02 +0000
asID: 57043
IP address blocks: 156.246.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83380 (0x145b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 12:02:02 2025 GMT
Not After : Apr 2 12:02:02 2025 GMT
Subject: CN=67d2c93e-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:31:9a:c8:80:75:56:d0:8a:a4:de:b5:62:
a4:c3:72:93:8b:9a:ae:af:7a:61:1e:fb:88:6e:ab:
1e:83:67:ee:5a:57:07:5a:28:d5:e7:fe:b4:8c:fa:
73:0c:9a:6f:35:61:4d:a9:89:ca:94:0c:86:35:7f:
77:8b:d9:c8:62:b5:b4:14:a5:b2:67:7c:93:93:35:
82:1d:fb:fa:f4:d2:80:13:6f:df:c4:71:4f:e5:d6:
be:0e:11:5e:e9:0c:92:4e:14:6a:a6:ae:a5:3b:08:
88:e9:24:f4:d1:6c:8f:b5:ea:86:a9:60:71:67:9e:
ef:13:73:3c:03:96:fe:50:81:0f:16:29:08:68:eb:
86:71:e3:ca:1b:c5:0f:24:da:65:46:5d:ae:58:ef:
83:56:25:f1:e4:c9:e3:55:c8:18:04:8e:38:4d:28:
7b:3a:01:a4:c9:18:7c:86:50:95:0b:4c:3e:1c:06:
4e:56:e5:48:db:7c:f0:1b:3b:b2:1c:a2:fc:62:0a:
36:36:09:90:14:9f:8c:94:e5:6b:dc:80:29:c7:db:
bc:99:d3:87:75:68:e3:5a:02:a5:eb:c9:81:76:d4:
c8:36:42:cb:cf:38:ae:85:55:8c:64:3d:46:04:cd:
89:41:f5:4c:b1:c8:de:64:69:0d:04:3a:0d:96:5a:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:A6:59:19:23:E1:A3:72:18:9C:65:E3:90:16:75:85:78:6C:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC5622000211F0BDB4DE84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.22.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c5:40:fe:a1:85:a4:12:bd:0e:39:e4:84:a4:43:74:14:d8:
b4:69:24:6a:0d:15:72:1c:1f:a7:48:c4:3e:68:72:c9:3e:d1:
d5:86:1d:69:69:15:98:ab:3c:dc:57:a1:54:3c:af:70:25:2d:
ee:15:39:55:e4:10:80:09:b9:ee:1c:7e:fd:3d:c7:26:a5:d9:
9e:ee:a7:1d:68:47:bd:b3:fe:3b:cd:ed:d4:5b:68:cb:78:4c:
40:db:52:de:b8:a7:7d:93:f6:72:86:ea:87:62:45:07:fd:27:
ea:46:ec:b4:a7:ed:7b:15:e8:9d:db:3b:57:68:a8:eb:2b:aa:
08:34:cc:1e:d4:a7:1c:2a:40:cb:30:de:ed:dd:fc:96:74:87:
5b:b7:59:2e:b2:ce:61:60:a1:ed:0a:0a:da:2a:cd:43:20:93:
5a:30:0a:0a:3e:5c:0a:c7:32:11:8a:91:59:35:16:46:13:6f:
0d:a0:34:ea:26:18:e2:23:83:ee:38:2e:80:42:e9:40:0f:16:
9f:59:dc:07:68:d6:0d:36:e7:0b:45:29:e1:f6:c9:03:1a:54:
8a:22:55:7b:bf:37:d0:5b:fc:a1:a9:92:71:62:08:62:43:84:
9d:12:6b:4c:64:f0:61:8e:6f:9d:53:dc:e6:b4:bc:ce:eb:ab:
3a:e6:21:8e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUW0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEzMTIwMjAyWhcNMjUwNDAyMTIwMjAyWjAYMRYw
FAYDVQQDEw02N2QyYzkzZS0wNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlP0xmsiAdVbQiqTetWKkw3KTi5qur3phHvuIbqseg2fuWlcHWijV5/60
jPpzDJpvNWFNqYnKlAyGNX93i9nIYrW0FKWyZ3yTkzWCHfv69NKAE2/fxHFP5da+
DhFe6QySThRqpq6lOwiI6ST00WyPteqGqWBxZ57vE3M8A5b+UIEPFikIaOuGcePK
G8UPJNplRl2uWO+DViXx5MnjVcgYBI44TSh7OgGkyRh8hlCVC0w+HAZOVuVI23zw
GzuyHKL8Ygo2NgmQFJ+MlOVr3IApx9u8mdOHdWjjWgKl68mBdtTINkLLzziuhVWM
ZD1GBM2JQfVMscjeZGkNBDoNllq9LwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKou
plkZI+GjchicZeOQFnWFeGz+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQkVDNTYyMjAwMDIxMUYwQkRCNERFODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPYWMA0GCSqGSIb3DQEBCwUA
A4IBAQBpxUD+oYWkEr0OOeSEpEN0FNi0aSRqDRVyHB+nSMQ+aHLJPtHVhh1paRWY
qzzcV6FUPK9wJS3uFTlV5BCACbnuHH79Pccmpdme7qcdaEe9s/47ze3UW2jLeExA
21LeuKd9k/ZyhuqHYkUH/SfqRuy0p+17Feid2ztXaKjrK6oINMwe1KccKkDLMN7t
3fyWdIdbt1kuss5hYKHtCgraKs1DIJNaMAoKPlwKxzIRipFZNRZGE28NoDTqJhji
I4PuOC6AQulADxafWdwHaNYNNucLRSnh9skDGlSKIlV7vzfQW/yhqZJxYghiQ4Sd
EmtMZPBhjm+dU9zmtLzO66s65iGO
-----END CERTIFICATE-----
Generated at Fri May 9 09:58:24 2025 by rpki-client