Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B57A46287F11EFB67BF12F7DDC24C2.roa
File: 78B57A46287F11EFB67BF12F7DDC24C2.roa (raw, json)
Hash identifier: Zv4e6ofX0o58XAbwj3ZUUOQ7jeoBURGGt3dorC1yhSE=
Subject key identifier: CE:41:78:36:72:34:17:93:01:5D:59:4F:C1:52:C7:17:6D:70:C4:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B57A46287F11EFB67BF12F7DDC24C2.roa
Signing time: Wed 12 Jun 2024 05:49:02 +0000
ROA not before: Wed 12 Jun 2024 05:48:59 +0000
ROA not after: Tue 25 Jun 2024 05:48:59 +0000
asID: 44559
IP address blocks: 156.225.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37069 (0x90cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 05:48:59 2024 GMT
Not After : Jun 25 05:48:59 2024 GMT
Subject: CN=666936ce-33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:cc:df:f1:f6:da:b9:f2:fe:b2:98:73:86:
7b:15:d1:08:f5:d8:7f:85:83:fe:b2:55:15:25:c6:
8e:32:5b:85:81:4a:86:19:3e:29:02:cc:b1:d4:98:
7e:45:de:35:99:06:77:b3:ba:d7:6c:ce:08:20:dc:
24:76:b6:1d:05:f5:f2:f0:2a:7b:51:01:cd:08:1f:
93:29:21:41:0b:26:54:9c:a3:d8:d5:a5:0a:16:2c:
ab:73:48:81:dd:d0:d3:a2:2c:c0:1b:a3:21:41:70:
1c:0c:3d:40:1b:4f:2a:6a:73:44:87:a3:26:d0:cd:
88:a1:eb:cf:8f:0c:f6:0a:ce:00:c4:d7:f0:ad:26:
5c:77:f5:5c:e4:80:1b:56:8c:24:93:35:d5:fb:3e:
05:fc:c8:8a:d8:35:02:04:d9:33:21:b4:72:1d:88:
fa:d6:4e:fd:fa:9a:65:5a:31:d1:b1:36:16:34:1d:
af:ca:7c:7a:94:d7:55:41:06:48:2b:14:07:41:83:
a2:bd:9c:41:65:bf:94:9f:5a:17:57:d5:ab:e7:f8:
e2:03:5c:f8:c5:06:03:e8:30:44:be:ff:d7:5f:2a:
20:e8:45:0b:34:74:19:52:fc:7b:a5:bf:5b:81:d6:
b5:d6:2d:cc:f1:93:06:c0:b4:76:a2:13:2b:cd:1b:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:78:36:72:34:17:93:01:5D:59:4F:C1:52:C7:17:6D:70:C4:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B57A46287F11EFB67BF12F7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:eb:26:af:7a:b4:89:1e:cd:69:61:70:99:43:87:08:03:fc:
14:be:8d:e0:66:6f:e5:02:dd:ed:2b:38:a8:cb:08:db:e8:7a:
49:33:27:34:9a:a0:54:3f:c2:fe:21:80:63:76:af:00:ec:97:
b9:ac:d9:42:a7:7a:8c:28:90:26:e8:83:0d:8e:d3:e9:02:49:
3d:c6:15:cd:81:73:4d:77:e8:84:01:ae:84:d0:12:2a:e7:bf:
31:15:fe:3d:27:37:2b:8e:2c:91:48:ea:d5:06:58:d0:f6:60:
16:5f:6d:ec:df:bf:08:d5:c9:7b:74:3c:13:c6:8e:6f:23:c7:
10:cc:cc:5a:20:c3:37:bc:bc:ac:99:52:1f:14:7d:ef:9f:cf:
3c:90:68:8d:44:bb:fe:78:e1:bb:9a:20:9c:34:6a:d7:a6:d0:
20:07:ce:f3:2e:97:49:1c:cd:73:71:7c:9d:d5:8d:25:55:fe:
ba:81:3b:19:2c:4a:bd:ea:71:4c:b4:a5:76:1d:42:e9:e0:55:
91:35:b1:e1:cc:87:5a:2f:15:d4:99:f5:6e:44:cf:e7:14:53:
73:8c:05:85:b5:0d:53:aa:12:79:05:32:78:8f:3e:7f:6a:37:
02:ee:26:82:ab:a2:49:ff:6b:66:7f:ed:4d:c8:12:06:aa:8a:
6c:3d:e1:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJDNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjEyMDU0ODU5WhcNMjQwNjI1MDU0ODU5WjAYMRYw
FAYDVQQDEw02NjY5MzZjZS0zM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz/DM3/H22rny/rKYc4Z7FdEI9dh/hYP+slUVJcaOMluFgUqGGT4pAsyx
1Jh+Rd41mQZ3s7rXbM4IINwkdrYdBfXy8Cp7UQHNCB+TKSFBCyZUnKPY1aUKFiyr
c0iB3dDToizAG6MhQXAcDD1AG08qanNEh6Mm0M2IoevPjwz2Cs4AxNfwrSZcd/Vc
5IAbVowkkzXV+z4F/MiK2DUCBNkzIbRyHYj61k79+pplWjHRsTYWNB2vynx6lNdV
QQZIKxQHQYOivZxBZb+Un1oXV9Wr5/jiA1z4xQYD6DBEvv/XXyog6EULNHQZUvx7
pb9bgda11i3M8ZMGwLR2ohMrzRviZwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM5B
eDZyNBeTAV1ZT8FSxxdtcMReMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OEI1N0E0NjI4N0YxMUVGQjY3QkYxMkY3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOFKMA0GCSqGSIb3DQEBCwUA
A4IBAQAa6yaverSJHs1pYXCZQ4cIA/wUvo3gZm/lAt3tKzioywjb6HpJMyc0mqBU
P8L+IYBjdq8A7Je5rNlCp3qMKJAm6IMNjtPpAkk9xhXNgXNNd+iEAa6E0BIq578x
Ff49JzcrjiyRSOrVBljQ9mAWX23s378I1cl7dDwTxo5vI8cQzMxaIMM3vLysmVIf
FH3vn888kGiNRLv+eOG7miCcNGrXptAgB87zLpdJHM1zcXyd1Y0lVf66gTsZLEq9
6nFMtKV2HULp4FWRNbHhzIdaLxXUmfVuRM/nFFNzjAWFtQ1TqhJ5BTJ4jz5/ajcC
7iaCq6JJ/2tmf+1NyBIGqopsPeG6
-----END CERTIFICATE-----
Generated at Tue Jun 25 09:14:30 2024 by rpki-client on console-fra.rpki-client.org