Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B126F0027C311EF8DB96B317DDC24C2.roa
File: 6B126F0027C311EF8DB96B317DDC24C2.roa (raw, json)
Hash identifier: livVaBwhVQ1CbRv68Lm/jnKsW2aREgmJAhp1weRxknI=
Subject key identifier: 8A:DD:EC:2F:C0:A5:73:97:FF:1B:EF:DB:39:DF:78:C3:31:C4:95:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9070
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B126F0027C311EF8DB96B317DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:22:54 +0000
ROA not before: Tue 11 Jun 2024 07:22:51 +0000
ROA not after: Thu 20 Jun 2024 07:22:51 +0000
asID: 139811
IP address blocks: 156.249.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36976 (0x9070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:22:51 2024 GMT
Not After : Jun 20 07:22:51 2024 GMT
Subject: CN=6667fb4e-8b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:44:43:9b:a2:de:1b:d7:97:af:3e:de:0a:
82:a4:2b:54:ce:ed:36:0c:99:89:ce:7f:26:4f:0b:
88:5b:45:4e:d7:aa:0b:2f:b3:93:0e:98:ed:78:42:
16:cd:65:d0:a2:1e:64:b0:28:58:b9:24:58:ec:ed:
04:2d:fa:0e:a6:4c:f4:d7:53:b9:8d:0d:09:dd:2e:
76:65:c6:5d:f0:d9:84:62:3e:44:bb:61:4a:9b:7e:
ce:5a:9e:e8:61:ea:39:0d:f3:ab:34:20:62:f1:dc:
83:3e:c1:68:f4:d1:78:f2:02:b0:4a:d3:43:bd:25:
66:7f:da:12:f7:ff:d8:20:28:9b:66:64:07:f0:b2:
83:b6:fe:d1:fe:f5:e8:f8:08:34:66:77:bc:8e:90:
4d:d2:93:91:89:fb:af:72:86:f2:4c:a0:8f:2c:5c:
29:fb:ce:92:ff:fb:dd:d1:f1:45:47:d1:f1:07:23:
31:de:9b:e8:0e:d1:cb:fc:6e:af:14:fa:01:06:e8:
77:37:24:53:37:d2:c6:61:6f:6d:c2:3f:51:66:3b:
b0:61:79:66:3a:21:b0:63:65:d0:de:cf:aa:bd:cb:
5a:b6:e0:80:c7:c4:34:af:a4:e6:2c:2f:2a:5c:cb:
95:4f:a3:85:1e:08:2b:50:39:bd:44:69:9c:bf:e0:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:EC:2F:C0:A5:73:97:FF:1B:EF:DB:39:DF:78:C3:31:C4:95:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B126F0027C311EF8DB96B317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
47:39:70:fd:58:42:f2:b9:0e:c5:7f:d3:96:ad:99:33:de:7b:
31:6e:de:96:d9:4a:0b:86:f1:f2:a6:1a:d7:4c:d6:b5:d1:70:
f7:4d:d9:30:b1:7d:86:d2:d7:a6:db:aa:e4:de:dd:f3:d7:b1:
8e:e0:4f:de:3c:05:df:62:8e:7b:f5:44:1d:48:6c:7b:de:c5:
bb:c8:58:52:64:93:0a:f9:ba:48:09:b4:17:79:31:cf:e5:0f:
83:93:15:29:1b:bf:67:51:5c:6f:57:93:a9:44:9e:92:9e:5f:
9a:71:b0:02:33:46:6e:80:04:11:05:4b:b0:f7:d4:45:0b:8d:
c0:af:2e:64:1c:ca:40:43:f6:2f:b0:bf:67:ec:8a:94:43:84:
02:71:a1:ab:5c:b8:7b:fe:b8:02:9d:22:14:8b:1c:34:f4:a2:
2e:61:9a:40:81:f5:78:3f:0b:7b:83:32:cd:08:9f:2a:d9:f1:
ab:15:26:b9:0c:ec:a4:1f:d4:35:80:9e:e7:81:ff:d2:15:fc:
d7:f8:75:0e:1d:af:ce:58:b5:de:bd:b4:8f:c5:c0:15:3e:99:
2a:41:25:6b:17:9b:a8:52:90:21:d8:29:27:97:bd:8c:24:c5:
db:6e:e1:32:d5:4d:12:15:7c:2e:0d:93:05:a2:2d:66:9a:4f:
b3:d2:c6:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJBwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjExMDcyMjUxWhcNMjQwNjIwMDcyMjUxWjAYMRYw
FAYDVQQDEw02NjY3ZmI0ZS04Yjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx2ZEQ5ui3hvXl68+3gqCpCtUzu02DJmJzn8mTwuIW0VO16oLL7OTDpjt
eEIWzWXQoh5ksChYuSRY7O0ELfoOpkz011O5jQ0J3S52ZcZd8NmEYj5Eu2FKm37O
Wp7oYeo5DfOrNCBi8dyDPsFo9NF48gKwStNDvSVmf9oS9//YICibZmQH8LKDtv7R
/vXo+Ag0Zne8jpBN0pORifuvcobyTKCPLFwp+86S//vd0fFFR9HxByMx3pvoDtHL
/G6vFPoBBuh3NyRTN9LGYW9twj9RZjuwYXlmOiGwY2XQ3s+qvctatuCAx8Q0r6Tm
LC8qXMuVT6OFHggrUDm9RGmcv+DPiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIrd
7C/ApXOX/xvv2znfeMMxxJWNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjEyNkYwMDI3QzMxMUVGOERCOTZCMzE3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPkYMA0GCSqGSIb3DQEBCwUA
A4IBAQBHOXD9WELyuQ7Ff9OWrZkz3nsxbt6W2UoLhvHyphrXTNa10XD3TdkwsX2G
0tem26rk3t3z17GO4E/ePAXfYo579UQdSGx73sW7yFhSZJMK+bpICbQXeTHP5Q+D
kxUpG79nUVxvV5OpRJ6Snl+acbACM0ZugAQRBUuw99RFC43Ary5kHMpAQ/YvsL9n
7IqUQ4QCcaGrXLh7/rgCnSIUixw09KIuYZpAgfV4Pwt7gzLNCJ8q2fGrFSa5DOyk
H9Q1gJ7ngf/SFfzX+HUOHa/OWLXevbSPxcAVPpkqQSVrF5uoUpAh2Cknl72MJMXb
buEy1U0SFXwuDZMFoi1mmk+z0saQ
-----END CERTIFICATE-----
Generated at Thu Jun 20 12:17:52 2024 by rpki-client on console-ams.rpki-client.org