Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/0BBBD1249EAC11ECAB4927E25A40D577.roa
File: 0BBBD1249EAC11ECAB4927E25A40D577.roa (raw, json)
Hash identifier: fvr2hbrQGFdR7Smi+IW202EaALc9mns5WeEFmXMMyik=
Subject key identifier: EF:6D:A8:AF:7C:A6:83:D3:D9:0E:F3:18:8F:B6:0D:95:11:B7:CC:F3
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 0418
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/0BBBD1249EAC11ECAB4927E25A40D577.roa
Signing time: Tue 08 Mar 2022 06:50:31 +0000
ROA not before: Tue 08 Mar 2022 06:50:19 +0000
ROA not after: Sat 08 Apr 2023 06:50:19 +0000
asID: 37520
IP address blocks: 146.231.0.0/16 maxlen: 18
192.42.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR
Validity
Not Before: Mar 8 06:50:19 2022 GMT
Not After : Apr 8 06:50:19 2023 GMT
Subject: CN=6226fcb7-6c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:40:2b:a8:bc:6e:b6:fc:66:73:61:c1:a7:
84:2f:72:95:87:07:24:1e:41:64:0a:55:76:dc:9d:
aa:66:dc:c7:a1:35:5f:47:5f:dd:09:2a:17:8e:c1:
33:71:7b:60:e8:1e:c8:fa:39:fc:37:1a:2e:b7:e0:
0e:96:a7:e7:19:da:bf:b5:4f:ab:70:6b:50:af:48:
da:88:59:c8:1f:3a:00:02:67:4b:ee:4f:60:5e:2d:
60:3e:df:75:05:43:42:31:cb:3b:c3:b6:19:93:77:
34:4c:d7:5e:25:af:99:c3:65:98:a6:d9:a3:0a:20:
d1:53:cf:e2:8e:9d:17:bf:56:86:b9:7c:de:11:71:
bf:eb:d8:c5:1d:2e:79:d6:37:47:5e:7e:7f:bd:74:
b4:94:22:63:15:91:01:bc:79:e6:e8:c0:66:ca:85:
7a:f7:5b:21:06:09:a7:3b:07:cd:4c:8d:7a:78:c4:
1a:3f:47:66:18:71:6c:8d:2c:25:2f:27:c2:3a:79:
95:95:a3:e2:2b:c5:09:15:a1:1c:a3:ed:d8:29:77:
14:19:c8:d4:dc:ba:67:22:cb:73:9e:3b:54:3e:4e:
ec:c8:3f:e3:55:1a:91:34:cb:43:aa:c9:ba:bb:77:
48:22:6d:f9:6f:5e:ff:61:bc:dd:06:b5:92:69:21:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:A8:AF:7C:A6:83:D3:D9:0E:F3:18:8F:B6:0D:95:11:B7:CC:F3
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/0BBBD1249EAC11ECAB4927E25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.231.0.0/16
192.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9b:eb:9e:a2:29:79:28:e6:19:6a:24:2d:3e:92:c9:fe:bb:
1a:ec:8e:a4:cc:c7:1d:a5:84:54:79:34:91:be:76:cf:b1:4b:
77:a9:3c:24:72:d7:8c:9b:ef:9c:f8:a0:9f:80:a3:d8:2d:30:
4e:09:1f:c7:2f:dc:d9:91:c2:23:d2:cf:e8:75:38:c7:ba:54:
34:09:03:9b:d7:79:f0:8e:cd:fb:db:99:4c:ac:56:b7:d3:cd:
ce:3e:8f:22:39:36:66:6d:37:a6:9a:51:76:1d:6f:62:43:28:
f0:c4:26:d8:a8:3c:09:f3:c3:8f:b6:2a:01:8f:53:be:a4:b7:
71:c0:31:eb:7c:86:ca:c9:ec:9a:06:96:8d:7c:03:7a:d7:8d:
9c:26:38:e8:be:57:94:a6:f3:d0:79:fa:f2:50:cd:90:70:f2:
7c:e9:85:93:3f:12:f2:b6:7a:bb:86:34:29:86:6e:0d:02:32:
db:fa:dd:ac:4c:05:d7:e5:5f:0c:85:27:24:02:4e:bf:5c:65:
ad:3c:37:30:fa:19:58:e3:65:98:71:bb:58:09:e7:8e:0d:d2:
5c:b6:2f:21:92:ae:46:22:6a:63:4f:16:da:2b:36:a1:d3:94:
bd:8e:06:de:95:09:57:49:a3:9a:a3:1a:c2:c2:de:54:4a:3a:
07:22:51:b4
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkFGMDJBUjExMC8GA1UEBRMoOTMzRTAyOTYxRTBBQkQ4MzVDQkM3RUUyODNGMTU3
MTk0NzQ2MzIzRjAeFw0yMjAzMDgwNjUwMTlaFw0yMzA0MDgwNjUwMTlaMBgxFjAU
BgNVBAMMDTYyMjZmY2I3LTZjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNaEArqLxutvxmc2HBp4QvcpWHByQeQWQKVXbcnapm3MehNV9HX90JKheO
wTNxe2DoHsj6Ofw3Gi634A6Wp+cZ2r+1T6twa1CvSNqIWcgfOgACZ0vuT2BeLWA+
33UFQ0IxyzvDthmTdzRM114lr5nDZZim2aMKINFTz+KOnRe/Voa5fN4Rcb/r2MUd
LnnWN0defn+9dLSUImMVkQG8eebowGbKhXr3WyEGCac7B81MjXp4xBo/R2YYcWyN
LCUvJ8I6eZWVo+IrxQkVoRyj7dgpdxQZyNTcumciy3OeO1Q+TuzIP+NVGpE0y0Oq
ybq7d0gibflvXv9hvN0GtZJpIahxAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU722o
r3ymg9PZDvMYj7YNlRG3zPMwHwYDVR0jBBgwFoAUkz4Clh4KvYNcvH7ig/FXGUdG
Mj8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVBMjI4L2t6NENs
aDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6NENsaDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVB
MjI4LzBCQkJEMTI0OUVBQzExRUNBQjQ5MjdFMjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
JAYIKwYBBQUHAQcBAf8EFTATMBEEAgABMAsDAwCS5wMEAMAqYzANBgkqhkiG9w0B
AQsFAAOCAQEAApvrnqIpeSjmGWokLT6Syf67GuyOpMzHHaWEVHk0kb52z7FLd6k8
JHLXjJvvnPign4Cj2C0wTgkfxy/c2ZHCI9LP6HU4x7pUNAkDm9d58I7N+9uZTKxW
t9PNzj6PIjk2Zm03pppRdh1vYkMo8MQm2Kg8CfPDj7YqAY9TvqS3ccAx63yGysns
mgaWjXwDeteNnCY46L5XlKbz0Hn68lDNkHDyfOmFkz8S8rZ6u4Y0KYZuDQIy2/rd
rEwF1+VfDIUnJAJOv1xlrTw3MPoZWONlmHG7WAnnjg3SXLYvIZKuRiJqY08W2is2
odOUvY4G3pUJV0mjmqMawsLeVEo6ByJRtA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:06 2025 by rpki-client