Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF98A894CC2611EFB18E7944762E951A.roa
File: FF98A894CC2611EFB18E7944762E951A.roa (raw, json)
Hash identifier: n+932vio1GgUHluSwHNphJm64fmZsSO5iaRayjLm60Q=
Subject key identifier: 46:A6:FD:6C:15:C0:32:53:46:66:42:16:E9:80:70:DB:16:27:6E:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF98A894CC2611EFB18E7944762E951A.roa
Signing time: Mon 06 Jan 2025 12:08:54 +0000
ROA not before: Mon 06 Jan 2025 12:08:50 +0000
ROA not after: Sat 18 Jan 2025 12:08:50 +0000
asID: 198584
IP address blocks: 156.233.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63701 (0xf8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:08:50 2025 GMT
Not After : Jan 18 12:08:50 2025 GMT
Subject: CN=677bc7d6-dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:ad:9d:f8:ad:e9:ef:f7:40:3b:00:1b:95:
f3:38:0c:23:b3:2e:2a:8a:56:80:e3:f3:a2:cd:6e:
cf:7a:b9:44:88:ea:f8:8e:38:bc:7d:d6:6c:50:8b:
02:19:57:f3:0d:93:bc:ba:9e:9f:c2:79:1e:c5:9b:
aa:c4:68:60:d4:a9:ea:b3:76:05:5e:53:79:f6:18:
80:17:d6:e2:1f:0e:9a:62:ba:35:88:43:5e:9c:3e:
5b:b4:bf:68:40:5d:6c:da:46:d7:e2:22:c8:14:f1:
de:c9:91:03:f9:08:9e:5c:ef:7a:da:c6:d8:9b:8c:
c8:85:6b:af:a8:0d:b6:49:e9:22:47:83:4d:40:bc:
b5:4c:d7:0d:b9:96:f0:13:37:fb:22:e7:27:75:41:
07:92:22:5c:a8:e2:70:cf:e7:7b:6c:94:f5:8a:a1:
23:db:0b:cf:5e:6e:12:f6:9d:8c:68:1b:cb:ba:57:
55:83:bd:0a:77:dc:54:e5:4a:fb:c5:3d:6d:dc:eb:
52:1a:cd:b1:e0:4f:2a:f7:e5:36:4a:4f:b8:ba:12:
37:b9:ca:21:6e:23:39:03:c2:52:41:46:f2:36:36:
cb:a2:7f:5d:cf:37:84:b5:85:eb:86:09:c6:c8:4d:
41:61:fa:b1:9c:a4:ed:06:86:61:26:eb:b8:7f:e5:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:FD:6C:15:C0:32:53:46:66:42:16:E9:80:70:DB:16:27:6E:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF98A894CC2611EFB18E7944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.210.0/24
Signature Algorithm: sha256WithRSAEncryption
96:85:6f:4d:8e:74:ea:a1:9a:92:6b:f2:7e:6d:60:df:d3:c3:
c7:16:9e:11:36:c5:1c:bf:9e:3d:b0:c8:d3:d2:ed:0d:83:41:
ed:05:5c:31:3f:6e:14:4e:c1:75:2e:ac:44:c7:d6:48:32:f3:
a7:e6:dd:05:16:3a:b6:75:e0:8d:19:17:d7:9a:2e:57:a5:89:
88:dc:9f:94:e2:f2:bb:df:26:40:2a:50:33:0d:0f:26:9f:6b:
cd:d8:96:fb:43:2a:35:5c:de:38:8a:37:0d:34:17:a8:cf:35:
55:52:01:f3:96:2d:4b:b7:13:83:5f:d4:84:a3:eb:2e:96:c9:
b0:02:a0:90:31:2f:0c:1d:d2:29:bd:84:a3:1a:9c:d4:86:fc:
b0:05:33:85:63:40:ae:13:89:2e:0e:23:f9:00:4c:a9:73:c2:
9e:66:8a:11:29:d9:e8:6c:36:44:3b:a8:11:0d:c7:b6:8e:52:
23:2e:9c:ab:ac:8b:3c:6e:53:17:fe:f9:4f:bd:9f:7d:f1:64:
29:bf:c3:2c:d7:c5:58:2b:1e:66:4a:25:32:ac:bd:85:76:83:
54:60:e5:7a:14:8f:f7:3d:d2:45:75:8f:5e:47:6c:33:e4:32:
2d:36:99:28:5f:bf:04:e4:9d:b1:eb:12:95:89:3b:4f:1d:80:
20:e8:1f:92
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPjVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MTIwODUwWhcNMjUwMTE4MTIwODUwWjAYMRYw
FAYDVQQDEw02NzdiYzdkNi1kZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzIutnfit6e/3QDsAG5XzOAwjsy4qilaA4/OizW7PerlEiOr4jji8fdZs
UIsCGVfzDZO8up6fwnkexZuqxGhg1Knqs3YFXlN59hiAF9biHw6aYro1iENenD5b
tL9oQF1s2kbX4iLIFPHeyZED+QieXO962sbYm4zIhWuvqA22SekiR4NNQLy1TNcN
uZbwEzf7IucndUEHkiJcqOJwz+d7bJT1iqEj2wvPXm4S9p2MaBvLuldVg70Kd9xU
5Ur7xT1t3OtSGs2x4E8q9+U2Sk+4uhI3ucohbiM5A8JSQUbyNjbLon9dzzeEtYXr
hgnGyE1BYfqxnKTtBoZhJuu4f+URXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEam
/WwVwDJTRmZCFumAcNsWJ26zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRjk4QTg5NENDMjYxMUVGQjE4RTc5NDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOnSMA0GCSqGSIb3DQEBCwUA
A4IBAQCWhW9NjnTqoZqSa/J+bWDf08PHFp4RNsUcv549sMjT0u0Ng0HtBVwxP24U
TsF1LqxEx9ZIMvOn5t0FFjq2deCNGRfXmi5XpYmI3J+U4vK73yZAKlAzDQ8mn2vN
2Jb7Qyo1XN44ijcNNBeozzVVUgHzli1LtxODX9SEo+sulsmwAqCQMS8MHdIpvYSj
GpzUhvywBTOFY0CuE4kuDiP5AEypc8KeZooRKdnobDZEO6gRDce2jlIjLpyrrIs8
blMX/vlPvZ998WQpv8Ms18VYKx5mSiUyrL2FdoNUYOV6FI/3PdJFdY9eR2wz5DIt
NpkoX78E5J2x6xKViTtPHYAg6B+S
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:39 2025 by rpki-client