Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E510BC1807AB11EF8164B76C017001B1.roa
File: E510BC1807AB11EF8164B76C017001B1.roa (raw, json)
Hash identifier: UUriTilX7OXDXg7ZjDHabZF62qIvRdW1GiOAA5KSoys=
Subject key identifier: 57:27:EF:05:F5:53:C1:EB:C3:58:53:D7:A6:12:90:12:AD:58:70:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8735
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E510BC1807AB11EF8164B76C017001B1.roa
Signing time: Wed 01 May 2024 11:13:54 +0000
ROA not before: Wed 01 May 2024 11:13:50 +0000
ROA not after: Thu 16 May 2024 11:13:50 +0000
asID: 54467
IP address blocks: 156.239.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34613 (0x8735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:13:50 2024 GMT
Not After : May 16 11:13:50 2024 GMT
Subject: CN=663223f1-7609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:ef:7a:c5:4d:83:d0:3c:d5:c0:39:d2:4a:
06:fd:17:d5:b7:e5:c9:76:e9:e8:0d:f9:66:3d:6f:
cc:ea:49:0b:37:27:f3:40:81:9f:24:70:f4:25:fa:
38:76:09:ce:5d:32:12:0e:35:18:0e:0e:2e:df:0e:
17:b2:78:64:ee:60:59:b2:88:75:d2:32:1f:fc:d4:
51:e4:4e:fb:a2:3c:42:fc:bd:46:2a:89:6f:6d:35:
db:9f:8a:1e:4e:11:30:03:2d:59:1a:48:aa:17:34:
51:b4:ea:1e:3d:ab:04:3b:aa:4c:93:77:1b:4c:dc:
4f:72:54:aa:52:20:e1:3b:2d:39:0a:e7:31:c4:07:
a3:73:cb:d7:be:b1:c2:af:de:fc:71:f2:49:67:14:
dd:0b:60:44:5b:52:df:15:dc:3f:68:03:44:ec:53:
43:83:ec:6b:43:9c:13:21:50:26:95:ba:55:ac:31:
50:66:87:1e:24:a7:02:48:16:80:bd:85:18:28:38:
29:bf:a4:98:60:06:1c:0f:28:3d:15:f0:ff:1d:5d:
ec:7e:f5:9d:93:97:63:40:81:7b:82:c7:65:bc:14:
50:61:e6:fb:37:d9:4a:86:da:74:ec:84:d3:12:d8:
71:03:14:50:b6:e3:08:fb:ff:e8:fb:e8:f4:6a:95:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:EF:05:F5:53:C1:EB:C3:58:53:D7:A6:12:90:12:AD:58:70:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E510BC1807AB11EF8164B76C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:a7:df:03:ab:f7:d8:5f:b1:05:f7:cb:ae:3f:e3:66:51:00:
f3:a7:67:e1:f6:aa:be:65:51:df:99:35:38:f5:47:2c:56:3e:
4e:f4:6a:83:5c:69:18:32:c2:04:9a:e5:a1:cc:c2:dc:ca:76:
ae:b1:e1:a1:aa:d1:76:16:9b:7d:b2:02:08:44:c1:54:39:94:
cc:02:3b:42:0f:d4:8b:11:16:42:16:23:bc:90:cc:cf:ef:0a:
b4:72:9c:fc:3f:cf:2b:68:7a:23:a3:f4:ae:05:39:c5:31:a8:
af:58:b6:f4:18:1e:4d:4b:59:fb:c9:1f:69:0e:97:27:a7:17:
70:dd:c0:c8:5f:70:2a:87:1e:b8:9a:57:60:98:50:ea:8c:0d:
39:e4:49:36:00:56:24:cc:83:3a:86:a8:be:2f:ca:38:f7:a3:
b0:c9:54:82:63:40:4b:ea:65:8d:aa:13:99:64:29:3f:3b:ea:
f7:11:62:4c:85:49:b3:eb:74:a0:9a:f7:de:55:66:21:72:11:
30:58:a6:84:59:57:c3:7e:11:b1:2e:d3:7e:d4:6a:19:aa:f3:
b8:69:ba:a4:70:dd:3e:25:94:31:28:8e:ff:b7:b1:d5:71:ba:
33:dc:a6:d4:ae:a1:34:7a:84:b0:c3:e9:a5:6b:b0:b2:2f:19:
98:1d:4e:b3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIc1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTAxMTExMzUwWhcNMjQwNTE2MTExMzUwWjAYMRYw
FAYDVQQDEw02NjMyMjNmMS03NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyVPvesVNg9A81cA50koG/RfVt+XJdunoDflmPW/M6kkLNyfzQIGfJHD0
Jfo4dgnOXTISDjUYDg4u3w4Xsnhk7mBZsoh10jIf/NRR5E77ojxC/L1GKolvbTXb
n4oeThEwAy1ZGkiqFzRRtOoePasEO6pMk3cbTNxPclSqUiDhOy05CucxxAejc8vX
vrHCr978cfJJZxTdC2BEW1LfFdw/aANE7FNDg+xrQ5wTIVAmlbpVrDFQZoceJKcC
SBaAvYUYKDgpv6SYYAYcDyg9FfD/HV3sfvWdk5djQIF7gsdlvBRQYeb7N9lKhtp0
7ITTEthxAxRQtuMI+//o++j0apVW4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFcn
7wX1U8Hrw1hT16YSkBKtWHAZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNTEwQkMxODA3QUIxMUVGODE2NEI3NkMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO/gMA0GCSqGSIb3DQEBCwUA
A4IBAQBNp98Dq/fYX7EF98uuP+NmUQDzp2fh9qq+ZVHfmTU49UcsVj5O9GqDXGkY
MsIEmuWhzMLcynauseGhqtF2Fpt9sgIIRMFUOZTMAjtCD9SLERZCFiO8kMzP7wq0
cpz8P88raHojo/SuBTnFMaivWLb0GB5NS1n7yR9pDpcnpxdw3cDIX3Aqhx64mldg
mFDqjA055Ek2AFYkzIM6hqi+L8o496OwyVSCY0BL6mWNqhOZZCk/O+r3EWJMhUmz
63SgmvfeVWYhchEwWKaEWVfDfhGxLtN+1GoZqvO4abqkcN0+JZQxKI7/t7HVcboz
3KbUrqE0eoSww+mla7CyLxmYHU6z
-----END CERTIFICATE-----
Generated at Fri May 17 02:04:04 2024 by rpki-client on console-fra.rpki-client.org