Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B1E3A27CA11EFA655FDE27CDC24C2.roa
File: A00B1E3A27CA11EFA655FDE27CDC24C2.roa (raw, json)
Hash identifier: sFVEVLuYjxEr2P8DOTtKZOLhIo0QcOjLGTUHmlYOroI=
Subject key identifier: C6:CA:99:2C:71:6E:AC:6F:9E:A7:2A:EF:BC:97:9E:F7:A6:A9:F4:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9096
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B1E3A27CA11EFA655FDE27CDC24C2.roa
Signing time: Tue 11 Jun 2024 08:14:29 +0000
ROA not before: Tue 11 Jun 2024 08:14:26 +0000
ROA not after: Tue 25 Jun 2024 08:14:26 +0000
asID: 44559
IP address blocks: 156.225.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37014 (0x9096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:14:26 2024 GMT
Not After : Jun 25 08:14:26 2024 GMT
Subject: CN=66680765-4502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:cc:48:88:74:ed:32:95:d6:1e:39:26:1e:
ed:d9:f0:51:83:ac:ba:36:e3:40:89:1a:8a:2f:7e:
bb:cc:0a:71:27:98:ba:88:34:84:8d:92:3b:a9:05:
d4:e9:b0:ba:ea:6c:d8:f0:fb:22:18:76:91:73:aa:
ab:38:49:17:c5:ab:fc:21:d2:ad:25:7a:9b:22:96:
66:0b:bf:10:b4:b9:9b:11:4c:c1:ed:ae:14:43:41:
2a:1a:31:84:ce:08:ed:f9:32:95:f4:b8:a8:36:bc:
60:78:b0:57:e3:4e:7b:fb:fe:8a:74:ad:24:bf:14:
dd:bf:00:c0:5d:35:b9:6e:be:a9:39:60:9f:d1:8d:
55:d1:05:80:52:1e:b3:42:2d:48:37:ef:88:db:d4:
d6:eb:f7:5a:53:d4:91:2f:de:4d:63:61:88:76:94:
63:81:66:9e:b5:34:12:7f:88:52:b7:00:e5:4c:48:
94:31:47:16:10:40:ae:ea:7c:f0:2a:4b:80:db:b7:
dc:db:4c:a6:fc:5e:f5:cf:62:d8:96:6a:82:0b:b9:
fd:84:f4:bd:52:43:e5:87:ca:1b:83:04:8e:ba:6d:
c5:f9:18:1f:96:ca:06:2e:b2:65:7a:f1:86:0c:ed:
1a:1f:5f:44:ed:f1:e4:cf:36:23:7a:c8:80:8d:8f:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CA:99:2C:71:6E:AC:6F:9E:A7:2A:EF:BC:97:9E:F7:A6:A9:F4:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00B1E3A27CA11EFA655FDE27CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.74.0/23
Signature Algorithm: sha256WithRSAEncryption
99:34:4d:ab:84:db:f0:ed:aa:77:d5:f6:44:a2:1b:b9:9e:f6:
3b:cf:57:82:63:20:a0:b1:f3:b9:9e:4e:96:ea:95:ca:65:5c:
3b:d7:ba:9c:37:ce:43:5f:37:f6:4e:fa:66:02:d7:1f:34:af:
b7:26:9f:5e:dc:17:8a:7f:0a:f4:d4:7a:1c:28:d6:c0:73:3d:
f0:aa:8b:1b:6c:52:fa:f5:3a:45:26:2c:a6:4f:bf:91:a1:49:
53:4d:81:cc:72:d7:c3:ae:d0:8a:51:bd:0a:69:d6:41:33:af:
1b:8d:4a:9b:5a:fe:61:78:d0:15:25:44:78:53:8a:40:66:9e:
c8:15:ae:88:c9:c1:a6:54:ba:15:8b:1a:c2:0b:33:0b:8b:99:
38:15:d4:db:4f:dd:2e:b5:bd:6a:a0:10:87:aa:7c:87:e8:40:
ec:bf:a6:f5:21:bc:86:e9:46:d6:c5:59:1b:f8:71:be:32:52:
dc:96:1a:21:10:0f:02:fe:7f:c3:9c:bf:1a:4f:d1:51:e4:cd:
2b:47:42:00:33:f9:f6:fa:4f:20:bd:56:d6:2b:63:08:83:be:
1f:fe:18:6a:45:02:f5:31:42:6e:2c:dd:43:cf:e0:d7:f8:2c:
fe:a4:09:27:d8:5e:49:e8:f5:b5:85:38:98:d0:d9:58:e4:f2:
ae:0b:4a:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJCWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjExMDgxNDI2WhcNMjQwNjI1MDgxNDI2WjAYMRYw
FAYDVQQDEw02NjY4MDc2NS00NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5AbMSIh07TKV1h45Jh7t2fBRg6y6NuNAiRqKL367zApxJ5i6iDSEjZI7
qQXU6bC66mzY8PsiGHaRc6qrOEkXxav8IdKtJXqbIpZmC78QtLmbEUzB7a4UQ0Eq
GjGEzgjt+TKV9LioNrxgeLBX4057+/6KdK0kvxTdvwDAXTW5br6pOWCf0Y1V0QWA
Uh6zQi1IN++I29TW6/daU9SRL95NY2GIdpRjgWaetTQSf4hStwDlTEiUMUcWEECu
6nzwKkuA27fc20ym/F71z2LYlmqCC7n9hPS9UkPlh8obgwSOum3F+RgflsoGLrJl
evGGDO0aH19E7fHkzzYjesiAjY9GMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMbK
mSxxbqxvnqcq77yXnvemqfT8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMDBCMUUzQTI3Q0ExMUVGQTY1NUZERTI3Q0RDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOFKMA0GCSqGSIb3DQEBCwUA
A4IBAQCZNE2rhNvw7ap31fZEohu5nvY7z1eCYyCgsfO5nk6W6pXKZVw717qcN85D
Xzf2TvpmAtcfNK+3Jp9e3BeKfwr01HocKNbAcz3wqosbbFL69TpFJiymT7+RoUlT
TYHMctfDrtCKUb0KadZBM68bjUqbWv5heNAVJUR4U4pAZp7IFa6IycGmVLoVixrC
CzMLi5k4FdTbT90utb1qoBCHqnyH6EDsv6b1IbyG6UbWxVkb+HG+MlLclhohEA8C
/n/DnL8aT9FR5M0rR0IAM/n2+k8gvVbWK2MIg74f/hhqRQL1MUJuLN1Dz+DX+Cz+
pAkn2F5J6PW1hTiY0NlY5PKuC0qp
-----END CERTIFICATE-----
Generated at Tue Jun 25 12:08:03 2024 by rpki-client on console-fra.rpki-client.org