Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C599AA294F11EF9D913E3C7DDC24C2.roa
File: 64C599AA294F11EF9D913E3C7DDC24C2.roa (raw, json)
Hash identifier: 8WZ6SFxF6QxUtHgePtXHzXZI6QBnG6I6X2aGrwzn+P0=
Subject key identifier: CF:EF:89:1F:FF:19:63:77:18:9E:00:0F:06:31:9B:EA:CC:80:D1:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C599AA294F11EF9D913E3C7DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:37:24 +0000
ROA not before: Thu 13 Jun 2024 06:37:21 +0000
ROA not after: Fri 21 Jun 2024 06:37:21 +0000
asID: 44559
IP address blocks: 156.233.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37108 (0x90f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 06:37:21 2024 GMT
Not After : Jun 21 06:37:21 2024 GMT
Subject: CN=666a93a4-9a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:29:1b:92:70:42:b1:e7:33:a1:d9:33:0b:
b3:ed:51:5f:03:fd:07:e0:27:a1:a9:0b:81:cb:6d:
02:ba:4d:51:bf:88:e1:c9:29:eb:22:1d:fb:0e:32:
3c:e4:69:cb:8c:fe:8c:fa:59:aa:00:d2:68:8e:1e:
65:5a:47:50:17:91:69:ad:1f:9e:00:f6:a6:e7:77:
60:90:82:8b:0e:b8:ee:f1:78:d2:e1:08:f8:17:c2:
db:a3:eb:c9:d2:29:91:33:1f:ec:10:6a:7f:73:bc:
b7:1d:26:f0:13:5a:5c:0f:6c:d4:e9:5c:60:e1:d7:
7e:71:6b:f8:cc:93:06:2c:b9:47:53:bf:ea:50:98:
23:ef:b8:d7:85:ed:6b:b5:db:12:52:c4:93:c4:7b:
03:ef:44:0b:39:57:0c:b9:04:56:69:f8:a9:15:30:
1f:62:07:5c:38:22:46:68:d2:eb:cd:1b:f3:35:85:
60:57:e0:4a:c6:11:c5:a2:4a:81:56:ea:bc:c6:c1:
14:76:b3:6f:93:66:20:ef:67:21:93:06:1b:77:36:
83:46:69:0f:d7:d6:4e:28:3a:b2:e4:1f:cd:f9:79:
91:ca:77:43:a8:b1:d4:30:c1:2d:cb:2c:ae:b8:45:
bc:05:04:56:1a:5b:8e:79:21:26:22:56:ac:01:94:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:89:1F:FF:19:63:77:18:9E:00:0F:06:31:9B:EA:CC:80:D1:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C599AA294F11EF9D913E3C7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
45:00:57:7b:45:c0:23:2c:7d:08:49:11:6f:79:f7:bb:6e:ca:
ad:95:38:00:21:27:bc:9c:20:23:51:00:16:bd:a4:cf:26:b1:
2d:9c:42:b2:d8:fb:1e:40:24:a7:eb:7a:c3:e9:13:c8:04:7f:
85:b5:aa:7e:92:29:19:d3:28:42:4c:1b:e8:5e:fc:73:d9:53:
51:40:01:6a:47:82:62:f4:16:b5:87:79:5a:9c:c6:6f:5d:b5:
74:91:f1:5b:09:29:84:b1:7f:80:6f:bf:55:fe:50:23:b6:d5:
69:86:7e:c9:41:f2:86:c5:47:d0:2c:f8:97:f9:d2:b1:03:3a:
b5:bf:b0:05:f0:9c:2a:48:6c:40:02:b5:7e:bf:23:0d:1f:db:
f8:ed:89:04:0c:27:52:6c:ae:d6:c5:96:6a:7a:6a:c3:9f:8a:
43:bb:7c:31:d6:2c:c2:d8:1d:76:90:76:5c:ec:d1:1d:9e:a9:
05:a1:86:ab:bc:58:7f:ce:49:04:4f:c4:69:89:fc:06:a3:31:
a1:a4:d1:a5:b3:dd:c5:e0:79:2a:67:05:e0:c0:94:86:93:66:
25:5a:86:a1:48:c3:5b:74:1a:95:5d:a7:2e:73:c6:62:5d:a2:
a7:8f:96:64:a6:00:f9:04:93:61:33:2a:3b:ae:75:03:a1:b8:
86:76:fb:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJD0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjEzMDYzNzIxWhcNMjQwNjIxMDYzNzIxWjAYMRYw
FAYDVQQDEw02NjZhOTNhNC05YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jEpG5JwQrHnM6HZMwuz7VFfA/0H4CehqQuBy20Cuk1Rv4jhySnrIh37
DjI85GnLjP6M+lmqANJojh5lWkdQF5FprR+eAPam53dgkIKLDrju8XjS4Qj4F8Lb
o+vJ0imRMx/sEGp/c7y3HSbwE1pcD2zU6Vxg4dd+cWv4zJMGLLlHU7/qUJgj77jX
he1rtdsSUsSTxHsD70QLOVcMuQRWafipFTAfYgdcOCJGaNLrzRvzNYVgV+BKxhHF
okqBVuq8xsEUdrNvk2Yg72chkwYbdzaDRmkP19ZOKDqy5B/N+XmRyndDqLHUMMEt
yyyuuEW8BQRWGluOeSEmIlasAZTo0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM/v
iR//GWN3GJ4ADwYxm+rMgNEiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NEM1OTlBQTI5NEYxMUVGOUQ5MTNFM0M3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnOmAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFAFd7RcAjLH0ISRFvefe7bsqtlTgAISe8nCAjUQAWvaTPJrEtnEKy2Pse
QCSn63rD6RPIBH+Ftap+kikZ0yhCTBvoXvxz2VNRQAFqR4Ji9Ba1h3lanMZvXbV0
kfFbCSmEsX+Ab79V/lAjttVphn7JQfKGxUfQLPiX+dKxAzq1v7AF8JwqSGxAArV+
vyMNH9v47YkEDCdSbK7WxZZqemrDn4pDu3wx1izC2B12kHZc7NEdnqkFoYarvFh/
zkkET8RpifwGozGhpNGls93F4HkqZwXgwJSGk2YlWoahSMNbdBqVXacuc8ZiXaKn
j5ZkpgD5BJNhMyo7rnUDobiGdvve
-----END CERTIFICATE-----
Generated at Sat Jun 22 03:46:02 2024 by rpki-client on console-fra.rpki-client.org