Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/56519F92C59311E98DDA9230F8AEA228.roa
File: 56519F92C59311E98DDA9230F8AEA228.roa (raw, json)
Hash identifier: JGqSQhd+nkak8pGWFhKZIt0E33oyVPk8/4yxC1AxU7w=
Subject key identifier: 6E:5A:42:68:72:26:19:A9:5A:6D:9F:ED:D2:41:56:4B:AE:B5:45:C2
Certificate issuer: /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial: 02
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/56519F92C59311E98DDA9230F8AEA228.roa
Signing time: Fri 23 Aug 2019 10:47:02 +0000
ROA not before: Fri 23 Aug 2019 10:46:57 +0000
ROA not after: Wed 23 Aug 2023 10:46:57 +0000
asID: 327942
IP address blocks: 196.223.112.0/24 maxlen: 24
196.223.113.0/24 maxlen: 24
196.223.114.0/24 maxlen: 24
196.223.115.0/24 maxlen: 24
196.223.116.0/24 maxlen: 24
196.223.117.0/24 maxlen: 24
196.223.118.0/24 maxlen: 24
196.223.119.0/24 maxlen: 24
196.223.120.0/24 maxlen: 24
196.223.121.0/24 maxlen: 24
196.223.122.0/24 maxlen: 24
196.223.123.0/24 maxlen: 24
196.223.124.0/24 maxlen: 24
196.223.125.0/24 maxlen: 24
196.223.126.0/24 maxlen: 24
196.223.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Validity
Not Before: Aug 23 10:46:57 2019 GMT
Not After : Aug 23 10:46:57 2023 GMT
Subject: CN=5d5fc425-bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:0b:c8:74:f8:03:0b:16:26:03:30:30:7c:
ca:69:14:a8:cf:63:48:a2:20:6a:33:8e:74:44:cb:
43:91:46:db:28:2e:9b:5f:ce:87:05:c8:80:a0:47:
c2:7a:a1:fa:7a:0b:d0:70:8b:51:2f:9f:b9:c8:98:
6c:bc:c0:fd:06:5c:8b:6d:03:00:8a:65:02:78:1f:
14:91:df:ff:b0:1f:f3:28:5b:cf:66:c3:6f:4c:39:
ea:32:42:53:d5:ad:96:18:66:b5:51:f0:5f:7d:17:
9d:de:57:e1:06:e5:89:fe:a7:80:7a:4a:d4:75:32:
2e:e3:74:66:65:90:7e:28:61:97:89:9a:05:ae:2d:
06:c7:c1:c0:59:ed:7a:21:43:eb:e5:46:0d:a6:d0:
35:43:6e:8d:ed:ef:33:30:17:78:a5:5c:dc:e8:41:
21:e1:90:42:ff:bf:6f:f4:38:32:4f:ea:f4:ee:27:
4a:af:66:38:96:a2:77:76:20:c0:77:a1:60:00:ca:
8d:5a:1c:75:6f:4e:3a:42:b2:a0:fb:5f:1d:e7:cc:
24:ae:81:c2:2c:24:66:e0:db:d9:23:4d:49:30:07:
66:9b:52:fa:6c:cc:41:f5:0c:ab:0d:c0:fa:2f:4d:
fe:ae:3c:46:99:6e:3d:ac:ff:d9:39:24:cc:49:56:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:42:68:72:26:19:A9:5A:6D:9F:ED:D2:41:56:4B:AE:B5:45:C2
X509v3 Authority Key Identifier:
keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/56519F92C59311E98DDA9230F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.223.112.0/20
Signature Algorithm: sha256WithRSAEncryption
37:46:d9:4c:e1:bf:4f:2a:ab:2f:fb:7f:91:54:27:d0:08:61:
48:22:31:b9:30:7b:aa:9d:9a:d7:81:c4:8e:ba:78:c7:40:20:
02:74:3e:c4:f2:94:23:15:1b:81:0d:5f:1e:31:fb:19:31:b6:
72:ad:bc:a8:68:04:00:c8:7b:3b:fa:bf:5c:5a:49:75:75:41:
89:fc:19:2d:0e:2f:31:00:c3:1e:31:88:23:8e:d3:16:3d:79:
be:24:24:ed:2a:ef:60:77:7b:9f:79:11:db:94:53:9a:ce:49:
74:bd:80:13:96:c9:83:58:d3:b2:6c:f2:d3:d3:06:55:c5:64:
ff:f3:e9:9e:cb:35:91:fb:8a:16:56:51:bf:fb:0a:33:47:26:
54:9b:e5:2e:de:98:20:ec:e3:f7:b6:75:12:eb:14:a5:6c:93:
a1:88:35:0d:b4:fa:9d:3d:e3:42:40:10:fb:81:61:d4:8d:98:
b8:76:98:90:6c:d2:fd:d3:1c:08:b2:ba:84:91:0b:c6:97:cd:
56:38:b4:70:64:e8:14:e1:c3:0b:4e:10:30:72:45:ba:6b:53:
ae:3c:75:e2:00:14:4b:91:44:ec:6f:8a:ac:dd:d4:4b:37:af:
99:16:59:8f:9f:b0:09:d5:4a:1b:73:7b:7c:8a:d1:94:1e:6c:
a9:63:eb:4d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
Q0M1NEFGMTEwLwYDVQQFEyg0NEFGMjM2NkI2MzE0QzUxNzdBRUNEMTUyMTg3N0Q3
QzVBQjFFQzZGMB4XDTE5MDgyMzEwNDY1N1oXDTIzMDgyMzEwNDY1N1owGDEWMBQG
A1UEAxMNNWQ1ZmM0MjUtYmYzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdxC8h0+AMLFiYDMDB8ymkUqM9jSKIgajOOdETLQ5FG2ygum1/OhwXIgKBH
wnqh+noL0HCLUS+fuciYbLzA/QZci20DAIplAngfFJHf/7Af8yhbz2bDb0w56jJC
U9WtlhhmtVHwX30Xnd5X4Qblif6ngHpK1HUyLuN0ZmWQfihhl4maBa4tBsfBwFnt
eiFD6+VGDabQNUNuje3vMzAXeKVc3OhBIeGQQv+/b/Q4Mk/q9O4nSq9mOJaid3Yg
wHehYADKjVocdW9OOkKyoPtfHefMJK6BwiwkZuDb2SNNSTAHZptS+mzMQfUMqw3A
+i9N/q48RpluPaz/2TkkzElWSWUCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBRuWkJo
ciYZqVptn+3SQVZLrrVFwjAfBgNVHSMEGDAWgBREryNmtjFMUXeuzRUhh318WrHs
bzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0NDNTQvNkY3OEY5QTRDNTkxMTFFOUI2QzYyRTJGRjhBRUEyMjgvUks4alpy
WXhURkYzcnMwVklZZDlmRnF4N0c4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUks4alpyWXhURkYzcnMwVklZZDlmRnF4N0c4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0NDNTQvNkY3OEY5QTRDNTkxMTFFOUI2QzYyRTJGRjhB
RUEyMjgvNTY1MTlGOTJDNTkzMTFFOThEREE5MjMwRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExN9wMA0GCSqGSIb3DQEBCwUAA4IBAQA3
RtlM4b9PKqsv+3+RVCfQCGFIIjG5MHuqnZrXgcSOunjHQCACdD7E8pQjFRuBDV8e
MfsZMbZyrbyoaAQAyHs7+r9cWkl1dUGJ/BktDi8xAMMeMYgjjtMWPXm+JCTtKu9g
d3ufeRHblFOazkl0vYATlsmDWNOybPLT0wZVxWT/8+meyzWR+4oWVlG/+wozRyZU
m+Uu3pgg7OP3tnUS6xSlbJOhiDUNtPqdPeNCQBD7gWHUjZi4dpiQbNL90xwIsrqE
kQvGl81WOLRwZOgU4cMLThAwckW6a1OuPHXiABRLkUTsb4qs3dRLN6+ZFlmPn7AJ
1Uobc3t8itGUHmypY+tN
-----END CERTIFICATE-----
Generated at Thu Aug 24 01:32:34 2023 by rpki-client on console-fra.rpki-client.org