Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD9C1330039011EFA1F512F7007001B1.roa
File: CD9C1330039011EFA1F512F7007001B1.roa (raw, json)
Hash identifier: FaTA6R+3W7AsgxKyn4kzH4IQ+yhmqWAAuY99Qf50wKw=
Subject key identifier: C0:4F:65:52:58:81:2B:88:1F:59:E4:39:5B:5D:22:84:98:5B:FA:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8613
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD9C1330039011EFA1F512F7007001B1.roa
Signing time: Fri 26 Apr 2024 05:49:53 +0000
ROA not before: Fri 26 Apr 2024 05:49:50 +0000
ROA not after: Sun 05 May 2024 05:49:50 +0000
asID: 141883
IP address blocks: 156.255.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34323 (0x8613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:49:50 2024 GMT
Not After : May 5 05:49:50 2024 GMT
Subject: CN=662b4081-b4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:46:5a:f6:72:6b:47:b7:5e:d1:92:63:6e:
28:2b:02:3c:06:4f:fd:b6:f3:31:42:c6:ea:91:85:
61:2a:a7:a1:3a:89:60:ab:20:8c:49:35:75:cd:ce:
b7:38:5f:a5:eb:9b:2d:e4:1c:e3:d2:4f:09:04:4d:
a0:a8:2a:6e:68:3f:37:45:21:bb:4f:88:0e:d3:7a:
86:aa:ca:88:66:52:58:a8:c5:ac:d0:10:04:38:56:
3a:e7:7b:2e:a8:12:7c:9b:f3:5e:ed:c9:7a:db:bd:
bb:65:01:28:75:ce:75:fd:74:1c:02:64:21:3a:4c:
d6:8f:73:5b:dc:ac:95:d9:32:0a:12:da:2d:b7:e5:
f6:37:83:30:3c:5b:8a:7e:c8:d1:9f:b7:13:14:5b:
cf:c8:ee:b4:1e:7d:3e:b8:6e:a7:92:02:73:dd:e0:
3b:e7:b6:58:1f:8f:b5:ac:0a:76:55:e4:0d:65:33:
5d:78:b3:18:2c:cc:3c:32:b9:5a:a9:32:0b:47:21:
7c:ef:b5:ae:5d:28:53:05:eb:f4:64:f1:7c:cd:d2:
e5:94:ea:b2:2f:4e:28:88:3e:cf:82:26:0d:96:40:
f5:fc:b9:17:02:74:89:d2:49:13:b3:7d:c5:f8:fa:
3e:88:8f:25:2a:e8:a9:88:97:f4:95:6d:7f:bc:c2:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:65:52:58:81:2B:88:1F:59:E4:39:5B:5D:22:84:98:5B:FA:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD9C1330039011EFA1F512F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a1:f1:b3:e2:6b:51:dd:f6:4c:59:d1:2b:1e:f9:39:6c:e2:
06:04:dc:5e:37:46:55:c4:36:0b:b7:8a:8b:57:b3:dd:42:86:
db:60:55:97:6c:0e:6c:af:73:c8:9b:96:cb:3e:8c:71:82:ca:
68:3f:87:19:56:1b:9b:88:e1:c6:88:88:ac:60:26:d2:fa:75:
e8:ce:1d:d7:0f:36:09:84:0f:b6:27:cb:8a:f1:50:b8:0e:15:
49:b7:49:5e:05:24:6b:8b:e3:7e:d3:5b:88:ea:9b:e5:55:1c:
4b:c7:bd:27:28:25:e0:2f:2d:09:81:49:15:fe:a7:39:66:67:
61:fa:d9:23:a3:b1:d0:57:6b:2e:31:bf:c7:7f:e7:17:d6:56:
a6:34:be:b6:a4:c1:b6:d2:d9:7e:3e:37:1c:57:6b:e0:38:28:
be:45:ec:6e:8b:9d:f6:b4:db:81:4b:3b:d4:61:aa:9b:06:93:
25:17:e0:0e:e3:62:3b:b7:39:c3:81:cb:2d:3d:f0:b7:e5:23:
19:cf:09:00:15:61:0b:d3:0e:55:eb:1f:8d:68:76:31:83:b5:
29:cc:7b:65:98:e9:4b:28:7b:35:9a:d2:54:15:88:c5:fb:0c:
56:1d:b0:6e:58:c0:07:04:f1:78:62:89:10:9c:c3:62:a8:05:
60:17:ba:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIYTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDU0OTUwWhcNMjQwNTA1MDU0OTUwWjAYMRYw
FAYDVQQDEw02NjJiNDA4MS1iNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZVGWvZya0e3XtGSY24oKwI8Bk/9tvMxQsbqkYVhKqehOolgqyCMSTV1
zc63OF+l65st5Bzj0k8JBE2gqCpuaD83RSG7T4gO03qGqsqIZlJYqMWs0BAEOFY6
53suqBJ8m/Ne7cl62727ZQEodc51/XQcAmQhOkzWj3Nb3KyV2TIKEtott+X2N4Mw
PFuKfsjRn7cTFFvPyO60Hn0+uG6nkgJz3eA757ZYH4+1rAp2VeQNZTNdeLMYLMw8
MrlaqTILRyF877WuXShTBev0ZPF8zdLllOqyL04oiD7PgiYNlkD1/LkXAnSJ0kkT
s33F+Po+iI8lKuipiJf0lW1/vMJgmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMBP
ZVJYgSuIH1nkOVtdIoSYW/q6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDlDMTMzMDAzOTAxMUVGQTFGNTEyRjcwMDcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8AMA0GCSqGSIb3DQEBCwUA
A4IBAQAFofGz4mtR3fZMWdErHvk5bOIGBNxeN0ZVxDYLt4qLV7PdQobbYFWXbA5s
r3PIm5bLPoxxgspoP4cZVhubiOHGiIisYCbS+nXozh3XDzYJhA+2J8uK8VC4DhVJ
t0leBSRri+N+01uI6pvlVRxLx70nKCXgLy0JgUkV/qc5Zmdh+tkjo7HQV2suMb/H
f+cX1lamNL62pMG20tl+PjccV2vgOCi+Rexui532tNuBSzvUYaqbBpMlF+AO42I7
tznDgcstPfC35SMZzwkAFWEL0w5V6x+NaHYxg7UpzHtlmOlLKHs1mtJUFYjF+wxW
HbBuWMAHBPF4YokQnMNiqAVgF7r3
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org