Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BC6E4C488A11ECA083C23ED8A014CE.roa
File: 04BC6E4C488A11ECA083C23ED8A014CE.roa (raw, json)
Hash identifier: WDQihVfzlRuuVRePFS0Miv9M8r79UjHYmIdfp0s7INw=
Subject key identifier: 3E:3B:B7:74:AA:F5:00:E6:D1:01:6D:1C:6E:F9:58:03:C7:A2:B9:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BC6E4C488A11ECA083C23ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:10:16 +0000
ROA not before: Fri 19 Nov 2021 16:10:13 +0000
ROA not after: Sat 19 Nov 2022 16:10:13 +0000
asID: 139879
IP address blocks: 156.247.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:10:13 2021 GMT
Not After : Nov 19 16:10:13 2022 GMT
Subject: CN=61967ae8-6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:b2:b8:d3:bd:90:97:57:96:11:2f:1d:85:
ac:9f:39:c3:a9:a2:48:6d:42:a0:28:0a:e0:9c:7d:
18:13:ca:e3:e5:93:54:38:09:cc:36:74:7b:66:40:
09:ea:a0:f0:8a:c7:d9:2e:7a:88:98:2e:88:98:ef:
15:5f:8f:e9:d0:7c:e9:a3:26:fc:70:ca:62:27:2f:
eb:bb:18:9d:9d:07:d4:43:81:24:c7:ff:75:b1:78:
8b:bf:df:30:58:f7:50:f4:97:79:a1:21:52:a1:80:
f7:31:88:ec:b3:d9:5c:c5:a6:2a:eb:5f:da:aa:d1:
7e:9b:f7:dd:bd:1f:56:da:b2:3b:d9:40:3c:2c:44:
70:fc:91:18:4d:86:66:ac:46:f7:3e:d4:c2:97:8c:
7a:69:fc:e1:f5:ae:86:15:88:79:fb:33:81:ce:de:
6f:5a:8a:f1:22:95:b5:34:08:3c:1f:54:59:8b:3c:
90:23:f5:a5:f5:01:57:ff:6c:fb:a7:5e:d0:84:60:
6f:37:26:5a:fd:6b:84:e3:e1:f2:65:5d:92:cf:26:
26:96:5c:4f:d7:50:de:fd:55:8c:c8:0d:b7:65:39:
ba:46:ff:d2:f3:05:af:9c:aa:4d:7f:d7:34:7a:db:
d1:af:cc:2b:c1:be:e4:32:2d:de:8b:41:a7:c9:1c:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:B7:74:AA:F5:00:E6:D1:01:6D:1C:6E:F9:58:03:C7:A2:B9:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BC6E4C488A11ECA083C23ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b8:14:aa:ad:14:29:2c:95:05:53:33:46:0e:ba:5d:8f:3e:
d7:45:8f:cd:9b:e4:00:3b:03:c7:ae:9b:0d:00:7d:21:9c:a2:
82:d7:f0:a0:be:c9:a2:87:ac:92:46:c9:7e:85:5c:44:68:a3:
2e:ce:de:1b:aa:0a:02:71:cd:e8:78:ab:2b:ef:9a:37:4e:52:
5a:f4:4d:ca:c0:53:97:2a:26:f1:06:fa:6e:3a:16:0e:34:77:
c8:5e:2c:3d:f5:55:43:06:77:ed:a4:7a:83:b0:83:7a:82:3e:
8d:f2:09:b3:98:d9:73:76:40:9b:21:0b:21:77:d5:52:e7:ec:
34:be:7f:df:15:8c:83:7c:a3:53:9f:ae:84:11:b0:fa:d4:01:
be:32:5c:0e:65:14:14:e6:e1:c3:56:f6:e1:bd:64:ad:b3:58:
2f:fd:0e:fb:45:83:e1:96:c1:57:0e:65:2d:aa:48:5a:3f:51:
43:ed:c7:34:a1:06:59:5d:53:25:50:1a:66:48:aa:61:a5:79:
ce:86:99:08:75:be:97:e0:3e:27:83:62:46:cc:c0:ab:b5:3e:
b3:fd:e9:99:c1:02:e9:b4:8f:58:d0:37:0e:98:bb:93:63:98:
4c:c2:c2:18:11:98:a1:ee:f4:f5:73:95:28:ac:d8:3c:03:6c:
35:1c:9c:16
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNjEwMTNaFw0yMjExMTkxNjEwMTNaMBgxFjAU
BgNVBAMMDTYxOTY3YWU4LTYyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCxbK4072Ql1eWES8dhayfOcOpokhtQqAoCuCcfRgTyuPlk1Q4Ccw2dHtm
QAnqoPCKx9kueoiYLoiY7xVfj+nQfOmjJvxwymInL+u7GJ2dB9RDgSTH/3WxeIu/
3zBY91D0l3mhIVKhgPcxiOyz2VzFpirrX9qq0X6b9929H1basjvZQDwsRHD8kRhN
hmasRvc+1MKXjHpp/OH1roYViHn7M4HO3m9aivEilbU0CDwfVFmLPJAj9aX1AVf/
bPunXtCEYG83Jlr9a4Tj4fJlXZLPJiaWXE/XUN79VYzIDbdlObpG/9LzBa+cqk1/
1zR629GvzCvBvuQyLd6LQafJHOKRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUPju3
dKr1AObRAW0cbvlYA8eiuWYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA0QkM2RTRDNDg4QTExRUNBMDgzQzIzRUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc98YwDQYJKoZIhvcNAQELBQAD
ggEBAKe4FKqtFCkslQVTM0YOul2PPtdFj82b5AA7A8eumw0AfSGcooLX8KC+yaKH
rJJGyX6FXERooy7O3huqCgJxzeh4qyvvmjdOUlr0TcrAU5cqJvEG+m46Fg40d8he
LD31VUMGd+2keoOwg3qCPo3yCbOY2XN2QJshCyF31VLn7DS+f98VjIN8o1OfroQR
sPrUAb4yXA5lFBTm4cNW9uG9ZK2zWC/9DvtFg+GWwVcOZS2qSFo/UUPtxzShBlld
UyVQGmZIqmGlec6GmQh1vpfgPieDYkbMwKu1PrP96ZnBAum0j1jQNw6Yu5NjmEzC
whgRmKHu9PVzlSis2DwDbDUcnBY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org