Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EAF6C8CCB911EE9BA7237D775412E6.roa
File: 11EAF6C8CCB911EE9BA7237D775412E6.roa (raw, json)
Hash identifier: ch5gZ5tjTxkqGNH4PYP3IadAPgp4StEXorxLmyVSknE=
Subject key identifier: 9A:52:E6:14:43:62:6E:FD:CC:28:F1:81:29:BF:4B:98:C6:19:E0:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7103
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EAF6C8CCB911EE9BA7237D775412E6.roa
Signing time: Fri 16 Feb 2024 10:49:34 +0000
ROA not before: Fri 16 Feb 2024 10:49:30 +0000
ROA not after: Fri 26 Apr 2024 10:49:30 +0000
asID: 9009
IP address blocks: 156.246.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28931 (0x7103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 10:49:30 2024 GMT
Not After : Apr 26 10:49:30 2024 GMT
Subject: CN=65cf3dbe-1c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:90:b1:f7:dd:c7:70:e4:6f:1d:68:0a:26:
32:46:d9:87:a6:44:f9:8d:6b:b0:b4:84:78:c5:d0:
61:6d:a0:39:de:ec:6f:46:04:b3:8d:bd:12:8f:c4:
2c:92:4c:97:3b:0b:f6:31:aa:90:84:d4:1d:f4:5d:
35:67:9d:4e:f0:77:61:59:72:38:ab:1b:7c:b9:6c:
80:28:7f:9b:30:58:70:cb:05:2b:5d:4a:cb:14:46:
ba:a8:1a:9e:19:f7:6f:68:76:6f:a6:c5:f6:5b:35:
b1:ad:02:89:79:8b:28:49:21:2e:22:96:c7:59:24:
cc:9d:3a:86:05:97:fc:68:13:c0:55:33:24:e5:f6:
24:b1:64:3a:81:c3:2e:4f:00:94:c4:ce:20:13:63:
d6:1c:16:32:36:c2:81:c2:64:06:49:39:70:32:70:
5c:42:80:3f:35:b7:66:5e:0d:a9:6d:87:d9:89:14:
a0:1f:8e:f7:02:22:b6:2d:45:83:c9:eb:53:84:1c:
94:b4:4f:d3:05:b2:5d:ce:e9:87:39:c9:67:69:8f:
2d:69:ab:61:fe:4e:f6:5c:83:ed:4b:0a:ee:29:36:
9d:5e:65:f5:bc:2b:b8:46:84:23:1e:3b:ef:e0:2e:
72:97:ce:e6:98:6d:52:88:dc:9e:d2:9e:8d:36:b8:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:E6:14:43:62:6E:FD:CC:28:F1:81:29:BF:4B:98:C6:19:E0:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11EAF6C8CCB911EE9BA7237D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.33.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8a:ed:2e:62:96:77:3d:fe:c6:e7:31:75:28:38:6a:12:83:
85:88:cf:a8:4c:dc:9a:8d:fe:d9:ea:b9:1b:f7:fd:ec:0d:63:
04:8b:1b:79:68:53:40:2e:fc:60:1a:ed:5d:86:b4:9c:d9:aa:
70:ca:25:69:65:b3:c4:dc:86:f4:1a:0f:2d:75:c5:0e:81:8f:
f9:22:68:ac:4c:68:d9:59:44:8b:aa:d5:a8:cd:f1:5b:c1:76:
11:5c:2f:8e:ce:df:ef:7d:9a:b0:dc:66:b0:53:68:f3:f0:86:
8a:27:b6:33:33:02:d6:1e:43:4d:9b:df:c6:52:6c:7a:f8:12:
da:db:73:03:24:98:87:11:17:81:4c:a2:3b:59:fc:98:d3:af:
af:68:66:82:be:86:7f:59:58:50:43:8f:55:00:9d:05:e0:f6:
fa:ea:ce:dc:21:02:10:af:31:1a:71:ef:0f:17:27:9f:d4:e0:
72:f6:60:54:0a:2b:34:9e:35:83:a7:64:19:ee:ef:94:c5:f3:
92:7c:2d:cb:35:e6:27:78:29:3c:90:90:16:f8:4e:62:00:3e:
e6:af:91:66:9b:e2:03:e2:9b:63:f7:e6:ae:84:47:90:53:fa:
be:a0:57:c6:12:d1:61:c0:2f:1a:42:8e:5c:08:95:e5:80:f2:
37:a1:80:e6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICcQMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAyMTYxMDQ5MzBaFw0yNDA0MjYxMDQ5MzBaMBgxFjAU
BgNVBAMTDTY1Y2YzZGJlLTFjM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJA5Cx993HcORvHWgKJjJG2YemRPmNa7C0hHjF0GFtoDne7G9GBLONvRKP
xCySTJc7C/YxqpCE1B30XTVnnU7wd2FZcjirG3y5bIAof5swWHDLBStdSssURrqo
Gp4Z929odm+mxfZbNbGtAol5iyhJIS4ilsdZJMydOoYFl/xoE8BVMyTl9iSxZDqB
wy5PAJTEziATY9YcFjI2woHCZAZJOXAycFxCgD81t2ZeDalth9mJFKAfjvcCIrYt
RYPJ61OEHJS0T9MFsl3O6Yc5yWdpjy1pq2H+TvZcg+1LCu4pNp1eZfW8K7hGhCMe
O+/gLnKXzuaYbVKI3J7Sno02uBxzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmlLm
FENibv3MKPGBKb9LmMYZ4NowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzExRUFGNkM4Q0NCOTExRUU5QkE3MjM3RDc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9iEwDQYJKoZIhvcNAQELBQAD
ggEBAHeK7S5ilnc9/sbnMXUoOGoSg4WIz6hM3JqN/tnquRv3/ewNYwSLG3loU0Au
/GAa7V2GtJzZqnDKJWlls8TchvQaDy11xQ6Bj/kiaKxMaNlZRIuq1ajN8VvBdhFc
L47O3+99mrDcZrBTaPPwhoontjMzAtYeQ02b38ZSbHr4EtrbcwMkmIcRF4FMojtZ
/JjTr69oZoK+hn9ZWFBDj1UAnQXg9vrqztwhAhCvMRpx7w8XJ5/U4HL2YFQKKzSe
NYOnZBnu75TF85J8Lcs15id4KTyQkBb4TmIAPuavkWab4gPim2P35q6ER5BT+r6g
V8YS0WHALxpCjlwIleWA8jehgOY=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:51 2024 by rpki-client on console-ams.rpki-client.org