Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9292F61C1D0F11EFB93BBD557DDC24C2.roa
File: 9292F61C1D0F11EFB93BBD557DDC24C2.roa (raw, json)
Hash identifier: 45vo+AZaKBFqi4moLfL8WRuys6IXJoKUPuXHj7qrEz4=
Subject key identifier: 71:C5:1A:EB:AF:37:A1:CD:E4:2F:BD:62:3F:1C:E0:BC:9D:BD:29:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9292F61C1D0F11EFB93BBD557DDC24C2.roa
Signing time: Tue 28 May 2024 16:30:19 +0000
ROA not before: Tue 28 May 2024 16:30:16 +0000
ROA not after: Sat 07 Sep 2024 16:30:16 +0000
asID: 138415
IP address blocks: 156.225.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36004 (0x8ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:30:16 2024 GMT
Not After : Sep 7 16:30:16 2024 GMT
Subject: CN=6656069b-d72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:23:67:2e:d0:1b:67:8e:e8:6d:d8:e3:97:
91:5f:8d:b6:82:4d:d1:1a:3e:c7:3b:b9:f5:be:65:
df:4c:6a:20:a9:fa:47:34:0c:38:15:88:df:45:d1:
49:21:6f:c4:30:be:ac:49:da:f9:04:fd:52:5d:1c:
a6:04:16:ac:f8:71:af:eb:8e:9f:5e:92:41:92:f4:
66:4d:87:6e:96:78:02:39:84:3a:80:a5:0a:4c:02:
ab:78:8a:b9:e2:29:d1:b7:19:02:ce:e4:74:85:82:
5e:39:b3:4d:6e:8f:55:5f:3c:d3:47:7f:66:f5:45:
bc:a6:22:9e:ea:c0:a9:57:e6:d4:37:af:90:82:33:
85:92:44:3d:6b:a7:09:c7:cb:ae:8c:cf:a9:c8:50:
f4:23:ec:a2:e0:bf:4b:45:d5:da:75:25:27:b9:30:
31:2b:5c:1a:b7:bb:65:e0:d7:53:74:8e:55:83:56:
67:bb:87:ea:ed:0c:6a:e9:c5:ad:fc:53:84:81:0e:
87:fc:b1:b7:21:dc:69:59:76:d2:5c:ee:f9:f7:8b:
64:9f:a9:ab:07:42:d1:df:a5:25:e5:a6:96:cd:48:
0b:83:b6:e8:f9:ce:e0:f8:4c:2e:5e:4d:9e:19:ac:
bd:8a:1c:46:27:a1:39:56:40:56:27:78:50:ff:03:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:1A:EB:AF:37:A1:CD:E4:2F:BD:62:3F:1C:E0:BC:9D:BD:29:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9292F61C1D0F11EFB93BBD557DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.160.0/19
Signature Algorithm: sha256WithRSAEncryption
31:72:b3:45:f1:31:a4:d0:db:21:5f:26:f5:7f:3c:0e:77:18:
00:f0:91:14:a7:4e:ae:88:c7:9e:a1:79:3b:c8:ea:40:ae:ea:
89:6c:51:07:ba:15:ef:a0:56:2e:24:41:c1:35:78:57:66:bf:
15:4b:8f:df:57:81:51:0f:5e:c9:a4:67:74:88:52:71:25:8f:
de:05:a7:b2:f5:d4:ab:df:d3:51:17:1d:18:6d:bd:8b:ea:1d:
b4:0e:ce:fa:46:a6:99:08:d7:a1:2b:2c:c9:12:89:14:70:b9:
19:9c:fb:53:1f:73:d1:99:19:d2:81:95:ab:c7:cb:7b:81:29:
e6:9f:ac:03:e4:5b:23:86:15:c0:95:da:87:25:35:e7:55:56:
38:03:54:e1:85:e0:26:82:d0:60:b7:d0:b9:a2:a5:07:28:0e:
4c:9e:83:0d:85:c0:a5:b4:a9:2c:55:fa:cc:27:ea:e5:5a:24:
20:c4:e1:4c:ec:e7:6d:6a:39:dc:5a:6b:a5:12:58:af:38:8f:
d9:32:b9:c9:e3:4f:d1:6e:dc:eb:fa:d8:a6:14:46:7e:e3:a0:
0b:14:d3:08:0b:f7:39:0e:bf:25:d2:ab:a3:02:f0:ca:c4:c3:
6d:53:47:a5:11:ca:b6:bd:93:9b:e7:cb:88:2e:79:91:07:fb:
37:71:d5:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIykMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTI4MTYzMDE2WhcNMjQwOTA3MTYzMDE2WjAYMRYw
FAYDVQQDEw02NjU2MDY5Yi1kNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsE8jZy7QG2eO6G3Y45eRX422gk3RGj7HO7n1vmXfTGogqfpHNAw4FYjf
RdFJIW/EML6sSdr5BP1SXRymBBas+HGv646fXpJBkvRmTYdulngCOYQ6gKUKTAKr
eIq54inRtxkCzuR0hYJeObNNbo9VXzzTR39m9UW8piKe6sCpV+bUN6+QgjOFkkQ9
a6cJx8uujM+pyFD0I+yi4L9LRdXadSUnuTAxK1wat7tl4NdTdI5Vg1Znu4fq7Qxq
6cWt/FOEgQ6H/LG3IdxpWXbSXO7594tkn6mrB0LR36Ul5aaWzUgLg7bo+c7g+Ewu
Xk2eGay9ihxGJ6E5VkBWJ3hQ/wMLcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHHF
GuuvN6HN5C+9Yj8c4LydvSmUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjkyRjYxQzFEMEYxMUVGQjkzQkJENTU3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOGgMA0GCSqGSIb3DQEBCwUA
A4IBAQAxcrNF8TGk0NshXyb1fzwOdxgA8JEUp06uiMeeoXk7yOpAruqJbFEHuhXv
oFYuJEHBNXhXZr8VS4/fV4FRD17JpGd0iFJxJY/eBaey9dSr39NRFx0Ybb2L6h20
Ds76RqaZCNehKyzJEokUcLkZnPtTH3PRmRnSgZWrx8t7gSnmn6wD5FsjhhXAldqH
JTXnVVY4A1ThheAmgtBgt9C5oqUHKA5MnoMNhcCltKksVfrMJ+rlWiQgxOFM7Odt
ajncWmulElivOI/ZMrnJ40/Rbtzr+timFEZ+46ALFNMIC/c5Dr8l0qujAvDKxMNt
U0elEcq2vZOb58uILnmRB/s3cdUs
-----END CERTIFICATE-----
Generated at Sun Sep 8 03:49:17 2024 by rpki-client on console-fra.rpki-client.org