Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FF34E45A511EFADAFBD65762E951A.roa
File: 032FF34E45A511EFADAFBD65762E951A.roa (raw, json)
Hash identifier: 8p1VaLDGcEKjJdGOuGHrYJtNUZDG2ge4ZxfbDDdN8AI=
Subject key identifier: 2C:DA:CF:8D:8F:50:3E:0A:16:21:39:7B:11:50:B4:1D:0C:C1:2D:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FF34E45A511EFADAFBD65762E951A.roa
Signing time: Fri 19 Jul 2024 08:00:50 +0000
ROA not before: Fri 19 Jul 2024 08:00:46 +0000
ROA not after: Mon 29 Jul 2024 08:00:46 +0000
asID: 54467
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40332 (0x9d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:00:46 2024 GMT
Not After : Jul 29 08:00:46 2024 GMT
Subject: CN=669a1d32-0505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:1b:ee:b1:0e:15:01:07:65:d4:bb:c3:ed:
5d:42:65:07:eb:46:ca:a0:4c:7f:d5:d5:b0:d7:33:
ca:d7:d2:ee:6b:73:91:c4:ff:1d:05:44:35:c2:e2:
28:8f:32:56:57:e9:13:b4:13:25:f9:d4:26:df:c7:
c9:09:16:e2:6c:77:cb:7a:2f:05:86:03:5e:ec:e8:
ec:72:e3:33:23:dc:b6:90:f8:ba:93:1e:86:ba:98:
0a:d0:6f:80:30:8e:53:93:5a:4d:24:27:0d:31:62:
66:bf:2b:52:bc:62:db:0f:58:0a:05:47:36:91:9d:
99:03:f5:7d:60:3c:18:53:46:69:62:2d:cc:58:52:
72:71:73:c8:e8:f6:c3:52:da:9e:ff:2f:6f:cc:68:
5e:c1:ac:cf:b9:85:03:3a:80:f6:6c:73:4a:f2:3b:
43:f1:57:52:b9:49:ea:0a:13:65:28:fe:70:0b:26:
d2:49:c5:b5:19:bf:d3:16:57:77:15:e6:54:1a:db:
35:27:3f:a2:0a:6e:09:b8:01:3c:8d:d6:6b:4f:f3:
a6:2d:69:24:93:0d:54:7d:cf:e9:44:3f:27:20:ec:
0d:fb:17:d7:d1:22:d9:01:be:d3:c7:74:55:ab:32:
85:22:fd:77:87:0a:39:6f:1d:ba:4b:e3:68:12:a7:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:CF:8D:8F:50:3E:0A:16:21:39:7B:11:50:B4:1D:0C:C1:2D:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FF34E45A511EFADAFBD65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:17:7b:6a:c7:bf:97:21:7d:30:88:d2:fe:0f:e0:d2:c5:c4:
80:ed:d8:9d:40:e2:40:44:60:31:9f:1e:01:7e:01:80:e6:d4:
49:a7:d9:7b:78:6a:7f:96:44:d8:ad:b0:c8:99:87:b7:ca:2d:
38:8e:da:e8:e6:4c:03:08:da:5a:82:cb:64:f7:f2:ba:ab:53:
f6:c0:d4:93:00:b5:34:4c:57:15:71:52:fb:a4:f9:38:f5:92:
0a:c6:77:3e:f8:bc:55:37:6a:80:8b:3d:80:7f:73:88:1f:5a:
b5:68:49:3f:5f:69:9d:d0:0f:54:64:27:f3:3a:ec:cf:76:0a:
2f:8f:81:8b:9e:12:1c:ae:41:9e:53:6b:64:54:82:b3:35:36:
b7:62:73:e5:2e:86:ab:61:b2:c5:8d:2e:86:bc:3a:2e:c1:06:
77:82:a1:1c:18:88:11:87:70:ab:a8:4c:46:89:f9:c0:65:ae:
2d:34:c1:49:d3:f9:c7:b6:c9:44:b1:d2:a6:53:e4:17:67:aa:
ff:27:e3:76:82:34:5c:02:72:5e:0a:d3:ce:17:5a:0e:ab:e0:
1c:71:d0:6e:6f:17:57:de:d3:d2:bb:54:32:71:3d:80:b5:53:
18:20:85:c8:7c:89:d6:12:8a:b7:3d:82:89:1e:fc:68:c3:1d:
2e:ee:7b:d6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ2MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE5MDgwMDQ2WhcNMjQwNzI5MDgwMDQ2WjAYMRYw
FAYDVQQDEw02NjlhMWQzMi0wNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9ob7rEOFQEHZdS7w+1dQmUH60bKoEx/1dWw1zPK19Lua3ORxP8dBUQ1
wuIojzJWV+kTtBMl+dQm38fJCRbibHfLei8FhgNe7OjscuMzI9y2kPi6kx6GupgK
0G+AMI5Tk1pNJCcNMWJmvytSvGLbD1gKBUc2kZ2ZA/V9YDwYU0ZpYi3MWFJycXPI
6PbDUtqe/y9vzGhewazPuYUDOoD2bHNK8jtD8VdSuUnqChNlKP5wCybSScW1Gb/T
Fld3FeZUGts1Jz+iCm4JuAE8jdZrT/OmLWkkkw1Ufc/pRD8nIOwN+xfX0SLZAb7T
x3RVqzKFIv13hwo5bx26S+NoEqdZ1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCza
z42PUD4KFiE5exFQtB0MwS0/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMzJGRjM0RTQ1QTUxMUVGQURBRkJENjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO8AMA0GCSqGSIb3DQEBCwUA
A4IBAQCbF3tqx7+XIX0wiNL+D+DSxcSA7didQOJARGAxnx4BfgGA5tRJp9l7eGp/
lkTYrbDImYe3yi04jtro5kwDCNpagstk9/K6q1P2wNSTALU0TFcVcVL7pPk49ZIK
xnc++LxVN2qAiz2Af3OIH1q1aEk/X2md0A9UZCfzOuzPdgovj4GLnhIcrkGeU2tk
VIKzNTa3YnPlLoarYbLFjS6GvDouwQZ3gqEcGIgRh3CrqExGifnAZa4tNMFJ0/nH
tslEsdKmU+QXZ6r/J+N2gjRcAnJeCtPOF1oOq+AccdBubxdX3tPSu1QycT2AtVMY
IIXIfInWEoq3PYKJHvxowx0u7nvW
-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org