Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111D1B7C22EA11EF9A8E79377DDC24C2.roa
File: 111D1B7C22EA11EF9A8E79377DDC24C2.roa (raw, json)
Hash identifier: MG1gFlPzL47i5uiE37+gZyWPbakwsXP6sVIz2PZWQAA=
Subject key identifier: BC:DD:0C:D9:EA:4C:9A:26:D1:C4:30:92:69:B8:0C:72:AD:18:12:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8F09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111D1B7C22EA11EF9A8E79377DDC24C2.roa
Signing time: Wed 05 Jun 2024 03:16:58 +0000
ROA not before: Wed 05 Jun 2024 03:16:54 +0000
ROA not after: Mon 02 Sep 2024 03:16:54 +0000
asID: 135377
IP address blocks: 156.229.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36617 (0x8f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 03:16:54 2024 GMT
Not After : Sep 2 03:16:54 2024 GMT
Subject: CN=665fd8aa-b53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:45:9f:41:7b:1a:69:80:a0:ab:c5:bf:17:
0b:51:a8:a1:95:ad:fe:26:8f:22:17:20:2c:54:13:
c9:fd:ad:17:98:f4:27:c8:37:ea:ab:5d:ba:12:1b:
e0:70:ce:38:18:0b:19:22:0b:48:ad:b0:bf:10:bd:
04:93:c8:ae:7e:52:2b:2e:ea:93:32:d5:9c:4f:f7:
5b:11:4f:c8:79:3f:b1:80:66:de:ad:5e:06:38:bc:
bf:2b:db:03:13:1c:9d:43:41:1b:85:68:b9:ef:c1:
91:b4:8f:40:53:3f:a6:b7:5a:0b:f3:5f:b3:f1:7d:
43:b0:84:1a:c9:a8:7e:7b:db:b3:44:2f:b9:f1:72:
19:49:71:18:c2:50:73:c8:df:bc:c6:56:f3:3e:09:
27:37:50:21:44:e1:82:00:74:bf:7b:78:14:81:07:
08:c5:74:36:ea:44:b7:ff:99:a3:b1:3c:8a:96:91:
07:a4:f0:bb:f2:db:2e:9b:e4:40:cc:93:e5:7a:c8:
c3:c1:cd:eb:f8:f4:34:05:fd:e8:c9:f0:de:db:ff:
05:72:67:12:8d:71:de:b1:5d:d5:e5:16:d8:7c:d9:
52:8f:6f:0e:a2:09:fc:51:62:c6:6b:d3:25:b7:9e:
66:17:81:67:61:66:23:14:c1:9e:a1:45:9a:3f:84:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:0C:D9:EA:4C:9A:26:D1:C4:30:92:69:B8:0C:72:AD:18:12:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/111D1B7C22EA11EF9A8E79377DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.16.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:89:20:c7:6c:35:44:d5:a2:85:06:db:01:27:09:65:7e:e3:
ee:f9:8b:0e:c9:39:6a:f9:50:d7:32:4e:0a:dc:e0:68:bf:60:
45:92:fb:8b:e1:06:49:ea:67:91:3a:70:cb:55:67:91:8f:57:
09:08:b5:a8:1f:10:3e:ac:af:4b:48:58:dd:e1:0e:2e:42:35:
bc:34:c0:29:3a:fc:e6:35:fb:5c:8a:3e:95:19:73:3f:e2:b3:
c2:65:9e:91:d2:ac:d3:09:c7:2a:7c:0b:e5:0d:a2:71:2e:e0:
62:b5:da:1b:c4:e1:00:89:60:17:fa:41:0c:97:1a:29:71:f9:
8d:2b:be:35:74:38:5e:93:39:49:3f:f2:95:59:56:07:81:b4:
42:40:48:56:9b:66:80:6e:fe:ff:19:16:13:42:1f:fd:05:91:
b8:d8:74:2c:bc:7b:56:ed:7d:67:9f:c8:6f:c8:b6:00:88:96:
23:1e:de:18:a4:56:c5:1a:3e:88:b1:d8:fd:9f:3f:25:b7:be:
1d:9e:41:00:fe:9f:a0:73:5a:9e:96:6d:3d:58:b8:71:f3:0d:
70:60:12:2b:98:97:87:9b:a3:c7:ca:f1:4a:73:a7:c1:5e:ce:
ce:66:26:98:b3:3f:79:b3:5f:64:d6:4b:80:18:41:e0:05:1e:
14:44:e4:a7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI8JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjA1MDMxNjU0WhcNMjQwOTAyMDMxNjU0WjAYMRYw
FAYDVQQDEw02NjVmZDhhYS1iNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk4BFn0F7GmmAoKvFvxcLUaihla3+Jo8iFyAsVBPJ/a0XmPQnyDfqq126
EhvgcM44GAsZIgtIrbC/EL0Ek8iuflIrLuqTMtWcT/dbEU/IeT+xgGberV4GOLy/
K9sDExydQ0EbhWi578GRtI9AUz+mt1oL81+z8X1DsIQayah+e9uzRC+58XIZSXEY
wlBzyN+8xlbzPgknN1AhROGCAHS/e3gUgQcIxXQ26kS3/5mjsTyKlpEHpPC78tsu
m+RAzJPlesjDwc3r+PQ0Bf3oyfDe2/8FcmcSjXHesV3V5RbYfNlSj28Oogn8UWLG
a9Mlt55mF4FnYWYjFMGeoUWaP4TafwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLzd
DNnqTJom0cQwkmm4DHKtGBIlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMTFEMUI3QzIyRUExMUVGOUE4RTc5Mzc3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOUQMA0GCSqGSIb3DQEBCwUA
A4IBAQCuiSDHbDVE1aKFBtsBJwllfuPu+YsOyTlq+VDXMk4K3OBov2BFkvuL4QZJ
6meROnDLVWeRj1cJCLWoHxA+rK9LSFjd4Q4uQjW8NMApOvzmNftcij6VGXM/4rPC
ZZ6R0qzTCccqfAvlDaJxLuBitdobxOEAiWAX+kEMlxopcfmNK741dDhekzlJP/KV
WVYHgbRCQEhWm2aAbv7/GRYTQh/9BZG42HQsvHtW7X1nn8hvyLYAiJYjHt4YpFbF
Gj6Isdj9nz8lt74dnkEA/p+gc1qelm09WLhx8w1wYBIrmJeHm6PHyvFKc6fBXs7O
ZiaYsz95s19k1kuAGEHgBR4UROSn
-----END CERTIFICATE-----
Generated at Mon Sep 2 10:21:47 2024 by rpki-client on console-ams.rpki-client.org