Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE53AA2CCCF011EFB8E2924C762E951A.roa
File: FE53AA2CCCF011EFB8E2924C762E951A.roa (raw, json)
Hash identifier: LPg/vAayu/zmk0cS1qvgjYMRTAXQyXAporzESvUcjAc=
Subject key identifier: 26:57:0E:CD:F9:58:8E:8F:FA:F8:C8:03:2C:9F:02:F2:50:26:05:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE53AA2CCCF011EFB8E2924C762E951A.roa
Signing time: Tue 07 Jan 2025 12:14:50 +0000
ROA not before: Tue 07 Jan 2025 12:14:47 +0000
ROA not after: Sat 18 Jan 2025 12:14:47 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64529 (0xfc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 12:14:47 2025 GMT
Not After : Jan 18 12:14:47 2025 GMT
Subject: CN=677d1aba-1725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:ac:2a:6d:75:f7:60:84:45:d2:5e:37:21:
30:9d:10:d3:67:bb:b3:c7:7d:3d:e9:02:3f:08:36:
95:9f:16:97:26:3e:10:32:b9:62:4e:04:b6:15:13:
5d:93:f7:1a:06:6e:8f:e2:9f:e4:65:a9:a9:db:a2:
e5:88:f8:e9:59:fd:ac:e8:90:19:2a:b6:76:fb:cf:
af:88:6e:6e:ec:f1:d5:01:c7:ff:80:3b:04:32:80:
a7:a2:a0:1c:d9:7f:65:f7:85:8c:9a:7f:74:f7:b5:
fd:1f:63:e9:c7:9b:e0:d4:42:7f:b6:73:72:eb:02:
da:11:18:ad:7e:fa:0d:90:bb:61:10:5b:0b:d0:38:
ec:5e:fe:40:35:39:8c:55:6c:42:44:f8:7e:57:cf:
2c:d9:9d:af:1f:aa:3c:34:6b:af:4e:1a:83:27:72:
40:8d:f2:8a:9e:9d:1b:ce:6b:28:f2:ca:17:13:3c:
b7:9c:ef:e0:34:44:a0:30:d2:1f:eb:e6:f3:8e:13:
52:e9:0d:b2:92:3b:5c:25:bd:6d:12:01:28:c8:df:
69:34:fe:88:ad:84:05:4a:e8:36:53:32:17:7f:6a:
46:cd:bd:3a:5b:32:a9:6e:ad:fc:ad:2c:93:7f:a6:
8a:50:92:d6:68:9f:4c:99:d9:e6:16:52:4b:79:a0:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:0E:CD:F9:58:8E:8F:FA:F8:C8:03:2C:9F:02:F2:50:26:05:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE53AA2CCCF011EFB8E2924C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
38:69:9f:e4:0e:0e:bd:c7:4f:9b:76:84:9a:7f:7a:0c:e5:bb:
80:7a:4e:88:f1:7c:3e:e2:9a:5d:4f:7e:a2:c2:a6:f6:12:37:
6f:7a:00:93:e1:d7:a6:50:e5:e8:e3:80:0f:57:66:f2:65:4e:
87:b2:1a:65:33:e3:21:ce:52:f3:79:cc:dc:aa:34:04:25:21:
9e:85:24:15:4c:a7:bc:ac:ce:b2:b7:11:44:09:35:f4:f7:09:
76:0b:25:5e:51:ca:d4:86:2b:57:87:1f:3c:52:dc:5c:0f:3d:
e6:9b:76:ea:0a:72:96:d4:37:71:f6:6e:b0:7c:49:90:6e:17:
73:46:cb:15:aa:49:09:d3:74:e8:2c:bf:62:e8:33:4f:5f:5d:
4c:3f:c6:60:04:ce:5f:e9:93:22:6c:44:06:41:c8:16:33:10:
6f:23:7d:fe:5d:db:fd:b0:3a:db:f2:fd:5a:bb:34:4e:c6:e1:
58:61:ae:64:8f:b1:f2:9f:d5:15:1c:76:f6:27:a0:29:46:ae:
fb:66:47:44:b9:65:01:19:ea:72:61:2e:a6:49:28:74:a0:3c:
fd:94:ad:8f:ef:21:85:80:9a:bf:94:82:2f:ae:d3:29:41:84:
1b:d2:a5:cd:54:e9:ab:3a:2f:1c:ea:f6:e5:0a:9a:93:ce:0f:
9e:75:5f:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPwRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTIxNDQ3WhcNMjUwMTE4MTIxNDQ3WjAYMRYw
FAYDVQQDEw02NzdkMWFiYS0xNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIWsKm1192CERdJeNyEwnRDTZ7uzx3096QI/CDaVnxaXJj4QMrliTgS2
FRNdk/caBm6P4p/kZamp26LliPjpWf2s6JAZKrZ2+8+viG5u7PHVAcf/gDsEMoCn
oqAc2X9l94WMmn9097X9H2Ppx5vg1EJ/tnNy6wLaERitfvoNkLthEFsL0DjsXv5A
NTmMVWxCRPh+V88s2Z2vH6o8NGuvThqDJ3JAjfKKnp0bzmso8soXEzy3nO/gNESg
MNIf6+bzjhNS6Q2ykjtcJb1tEgEoyN9pNP6IrYQFSug2UzIXf2pGzb06WzKpbq38
rSyTf6aKUJLWaJ9MmdnmFlJLeaB2WwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCZX
Ds35WI6P+vjIAyyfAvJQJgXEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRTUzQUEyQ0NDRjAxMUVGQjhFMjkyNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPWAMA0GCSqGSIb3DQEBCwUA
A4IBAQA4aZ/kDg69x0+bdoSaf3oM5buAek6I8Xw+4ppdT36iwqb2EjdvegCT4dem
UOXo44APV2byZU6HshplM+MhzlLzeczcqjQEJSGehSQVTKe8rM6ytxFECTX09wl2
CyVeUcrUhitXhx88UtxcDz3mm3bqCnKW1Ddx9m6wfEmQbhdzRssVqkkJ03ToLL9i
6DNPX11MP8ZgBM5f6ZMibEQGQcgWMxBvI33+Xdv9sDrb8v1auzROxuFYYa5kj7Hy
n9UVHHb2J6ApRq77ZkdEuWUBGepyYS6mSSh0oDz9lK2P7yGFgJq/lIIvrtMpQYQb
0qXNVOmrOi8c6vblCpqTzg+edV9U
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:29 2025 by rpki-client