Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70218A0A7A0C11ED83DD278EF1222468.roa
File: 70218A0A7A0C11ED83DD278EF1222468.roa (raw, json)
Hash identifier: cZu/ql9gi2Wyi4VJ8Xs3MOIKiEXSMC2AhwkG45h1vXI=
Subject key identifier: AA:C2:E7:D2:17:D2:2E:7D:21:0B:B7:BA:F0:D9:36:D8:13:4D:09:12
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0C
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70218A0A7A0C11ED83DD278EF1222468.roa
Signing time: Mon 12 Dec 2022 11:02:16 +0000
ROA not before: Mon 12 Dec 2022 11:02:12 +0000
ROA not after: Mon 11 Dec 2023 11:02:12 +0000
asID: 34549
IP address blocks: 66.251.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 12 11:02:12 2022 GMT
Not After : Dec 11 11:02:12 2023 GMT
Subject: CN=63970a38-919e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:46:0f:64:6c:5c:03:92:37:50:a0:ca:e8:
7f:5b:0b:33:28:e8:be:29:26:fa:24:b7:0e:3b:83:
b5:68:b4:d5:e9:3a:fa:75:5e:4d:6d:40:0e:cd:0e:
1d:50:a1:c7:9a:51:57:03:b0:f0:dd:43:6d:62:bb:
c6:4b:85:96:b0:6e:ce:67:ed:6b:38:6c:b0:4c:c8:
74:67:7a:a5:2e:6c:78:72:6d:09:13:cc:6f:0b:54:
c7:0a:d2:c6:7d:d2:80:18:27:35:00:06:45:d2:5b:
76:71:82:08:46:38:02:ca:c1:3e:df:81:b4:c4:f8:
cc:9f:7f:5a:be:93:0d:6f:7a:b2:bf:d5:57:7b:d7:
9a:e7:0d:2c:f2:fb:6e:59:4b:98:4d:b0:d6:b4:56:
a3:ee:6b:32:fe:78:31:dc:13:5f:4f:8d:be:56:31:
6b:2a:6e:a2:f3:29:a0:94:b2:7c:0a:4c:da:56:f9:
ae:a2:1e:3f:ca:c3:6c:d3:11:d8:bd:5c:b6:60:1e:
28:bf:26:b4:e4:71:d5:62:32:3b:18:2c:66:2b:3b:
5f:f2:a4:ff:4a:ed:bd:97:8f:2c:99:b2:2a:41:63:
d3:5b:85:72:ca:51:3f:99:d9:c4:bf:2a:2c:58:a3:
ed:2c:c2:c6:70:4f:69:c2:a0:6e:8b:ff:e6:c1:6f:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:E7:D2:17:D2:2E:7D:21:0B:B7:BA:F0:D9:36:D8:13:4D:09:12
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/70218A0A7A0C11ED83DD278EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.132.0/22
Signature Algorithm: sha256WithRSAEncryption
eb:80:02:a3:a3:86:ad:93:d4:03:f3:90:dd:46:88:17:b5:f7:
ad:1b:3b:9e:08:5c:a2:10:3c:47:65:07:0a:19:63:26:43:a0:
43:30:66:44:2c:1c:37:c7:ae:a3:15:ad:5e:53:32:61:15:8e:
5f:10:91:75:c3:6f:8a:57:4c:cb:a1:44:6a:d1:51:80:29:be:
00:21:e6:09:ac:70:02:1a:23:55:ee:bf:ec:f6:8c:91:35:85:
38:e9:8c:9e:74:57:d7:d5:30:1c:20:f9:69:5c:a3:1f:39:e5:
77:ae:f8:c5:57:6f:fa:e6:19:14:b4:78:dc:2a:60:bb:9e:c3:
78:a9:f0:2e:46:5b:1b:8a:23:18:bc:22:44:a8:ba:a2:08:bf:
be:99:0e:dc:c5:77:af:99:1f:a8:35:df:d0:f9:cb:51:6c:e8:
b3:90:6f:9a:ea:01:be:04:97:58:2d:4e:9d:5b:f8:a8:aa:df:
7e:56:55:7f:d6:40:a2:f9:14:11:dd:25:58:62:73:1e:a3:37:
e7:97:21:8c:be:c6:57:67:0c:31:fd:4e:e3:78:9a:d3:c5:c1:
d4:36:a6:ad:64:0e:6c:c3:70:a0:56:e6:4e:37:d4:d8:fd:22:
39:5a:36:56:34:4e:e6:15:43:db:cc:44:da:76:02:a4:3e:88:
e3:90:96:0f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
OUY5Q0FSMTEwLwYDVQQFEygwOUZCMzEzNkVDRDVFM0Q3Q0YwMEIzMkMxMjFGMTJF
OEFGRDBBNjAxMB4XDTIyMTIxMjExMDIxMloXDTIzMTIxMTExMDIxMlowGDEWMBQG
A1UEAwwNNjM5NzBhMzgtOTE5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL76Rg9kbFwDkjdQoMrof1sLMyjovikm+iS3DjuDtWi01ek6+nVeTW1ADs0O
HVChx5pRVwOw8N1DbWK7xkuFlrBuzmftazhssEzIdGd6pS5seHJtCRPMbwtUxwrS
xn3SgBgnNQAGRdJbdnGCCEY4AsrBPt+BtMT4zJ9/Wr6TDW96sr/VV3vXmucNLPL7
bllLmE2w1rRWo+5rMv54MdwTX0+NvlYxaypuovMpoJSyfApM2lb5rqIeP8rDbNMR
2L1ctmAeKL8mtORx1WIyOxgsZis7X/Kk/0rtvZePLJmyKkFj01uFcspRP5nZxL8q
LFij7SzCxnBPacKgbov/5sFvnKkCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSqwufS
F9IufSELt7rw2TbYE00JEjAfBgNVHSMEGDAWgBQJ+zE27NXj188AsywSHxLor9Cm
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0NjgvQ2ZzeE51
elY0OWZQQUxNc0VoOFM2S19RcGdFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Q2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvNzAyMThBMEE3QTBDMTFFRDgzREQyNzhFRjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAkL7hDANBgkqhkiG9w0BAQsFAAOC
AQEA64ACo6OGrZPUA/OQ3UaIF7X3rRs7nghcohA8R2UHChljJkOgQzBmRCwcN8eu
oxWtXlMyYRWOXxCRdcNvildMy6FEatFRgCm+ACHmCaxwAhojVe6/7PaMkTWFOOmM
nnRX19UwHCD5aVyjHznld674xVdv+uYZFLR43Cpgu57DeKnwLkZbG4ojGLwiRKi6
ogi/vpkO3MV3r5kfqDXf0PnLUWzos5BvmuoBvgSXWC1OnVv4qKrfflZVf9ZAovkU
Ed0lWGJzHqM355chjL7GV2cMMf1O43ia08XB1DamrWQObMNwoFbmTjfU2P0iOVo2
VjRO5hVD28xE2nYCpD6I45CWDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org