Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B6D1A847D411EF9A59C1B9762E951A.roa
File: 12B6D1A847D411EF9A59C1B9762E951A.roa (raw, json)
Hash identifier: teB8SVc6t5vfT64Rc9b86L+jp7L/ZA/rZzNmcjxw63I=
Subject key identifier: AE:11:13:88:49:97:44:65:E1:3A:5E:49:44:68:BC:1F:B9:49:63:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B6D1A847D411EF9A59C1B9762E951A.roa
Signing time: Mon 22 Jul 2024 02:42:44 +0000
ROA not before: Mon 22 Jul 2024 02:42:41 +0000
ROA not after: Fri 23 Aug 2024 02:42:41 +0000
asID: 44559
IP address blocks: 156.246.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40385 (0x9dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:42:41 2024 GMT
Not After : Aug 23 02:42:41 2024 GMT
Subject: CN=669dc724-e5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:c5:62:8d:05:81:f7:a8:d0:c0:92:ca:84:
df:59:ef:7e:ee:2f:fa:3a:d3:6c:37:81:a7:14:da:
3c:7a:30:af:1d:8d:90:f7:75:dd:49:93:ec:f5:f6:
e2:27:4b:80:e2:9b:cb:0f:fd:64:2b:af:5b:72:9f:
48:e3:60:59:d5:7e:f5:c1:fc:79:54:37:81:ab:23:
3b:eb:41:58:b6:30:6a:ad:3d:ca:ea:1d:67:18:08:
1d:60:d5:cc:7a:da:0f:27:8f:62:1c:be:20:96:2a:
0e:77:c6:6f:85:38:60:c3:5e:f6:00:92:9c:d7:ed:
9d:23:05:51:d5:7d:4b:31:61:32:4a:75:07:83:25:
53:cb:dd:18:a6:30:10:36:be:bf:23:a9:7d:43:07:
ea:c2:ed:43:e5:56:bd:74:9a:79:74:23:08:5f:e0:
20:c6:b8:aa:08:5a:79:c1:b8:54:41:e6:6d:bf:ae:
09:88:c2:c8:f0:b9:df:b0:8d:26:a1:78:45:a3:83:
40:5a:67:f6:b4:15:d6:1b:51:32:19:05:77:9d:97:
20:5b:30:55:98:6a:82:9f:c5:7d:f4:5e:1a:f7:4d:
c9:91:de:df:58:8a:80:84:ee:0b:e5:41:2e:b6:42:
c1:68:42:2a:fa:f4:7d:b0:a3:bd:1d:60:f8:1d:a8:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:13:88:49:97:44:65:E1:3A:5E:49:44:68:BC:1F:B9:49:63:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B6D1A847D411EF9A59C1B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.254.0/24
Signature Algorithm: sha256WithRSAEncryption
38:14:c3:a6:a1:7f:d2:72:6f:3b:76:cb:91:03:51:32:c8:04:
de:a6:23:77:c6:a7:28:7f:ed:3b:b5:e2:3d:cf:64:c3:0a:c3:
00:5a:c5:c5:f1:8b:34:fe:e6:e3:41:70:eb:e4:5b:8e:37:b6:
54:de:c5:3e:4f:e4:8c:68:bc:a7:c5:ed:d2:2f:1f:96:34:ff:
bf:ae:e5:63:0f:70:c8:fb:90:57:07:27:48:9b:ae:2d:a3:e3:
be:8f:7d:2b:54:71:cc:1e:e5:9b:b7:5e:76:04:77:59:64:c0:
4b:3b:da:3f:7b:f1:87:87:72:8c:62:a6:86:b0:ab:96:e1:45:
84:68:37:c6:89:20:77:cc:8b:9b:5e:27:0f:7a:67:6f:84:76:
79:09:36:d6:26:91:91:9f:81:d6:da:8e:d8:1e:87:07:dc:f0:
18:96:c8:2c:8b:ce:48:ba:45:40:9d:d7:32:33:31:ae:38:53:
9e:65:77:3b:f6:b7:9c:da:ba:9a:a0:ab:b6:36:ec:b4:29:a5:
cf:bb:95:db:2a:a9:59:ce:79:d4:8a:c8:19:62:11:ff:9b:f6:
6a:b9:2a:26:dc:ab:b2:a1:e5:0d:1b:8f:2a:7b:64:c0:61:5f:
2e:96:72:66:6b:3c:f4:5b:da:02:90:6b:e2:8a:3d:e3:79:7e:
a9:89:9f:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ3BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDI0MjQxWhcNMjQwODIzMDI0MjQxWjAYMRYw
FAYDVQQDEw02NjlkYzcyNC1lNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzS/FYo0Fgfeo0MCSyoTfWe9+7i/6OtNsN4GnFNo8ejCvHY2Q93XdSZPs
9fbiJ0uA4pvLD/1kK69bcp9I42BZ1X71wfx5VDeBqyM760FYtjBqrT3K6h1nGAgd
YNXMetoPJ49iHL4glioOd8ZvhThgw172AJKc1+2dIwVR1X1LMWEySnUHgyVTy90Y
pjAQNr6/I6l9Qwfqwu1D5Va9dJp5dCMIX+AgxriqCFp5wbhUQeZtv64JiMLI8Lnf
sI0moXhFo4NAWmf2tBXWG1EyGQV3nZcgWzBVmGqCn8V99F4a903Jkd7fWIqAhO4L
5UEutkLBaEIq+vR9sKO9HWD4HajLkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK4R
E4hJl0Rl4TpeSURovB+5SWMwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMkI2RDFBODQ3RDQxMUVGOUE1OUMxQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPb+MA0GCSqGSIb3DQEBCwUA
A4IBAQA4FMOmoX/Scm87dsuRA1EyyATepiN3xqcof+07teI9z2TDCsMAWsXF8Ys0
/ubjQXDr5FuON7ZU3sU+T+SMaLynxe3SLx+WNP+/ruVjD3DI+5BXBydIm64to+O+
j30rVHHMHuWbt152BHdZZMBLO9o/e/GHh3KMYqaGsKuW4UWEaDfGiSB3zIubXicP
emdvhHZ5CTbWJpGRn4HW2o7YHocH3PAYlsgsi85IukVAndcyMzGuOFOeZXc79rec
2rqaoKu2Nuy0KaXPu5XbKqlZznnUisgZYhH/m/ZquSom3KuyoeUNG48qe2TAYV8u
lnJmazz0W9oCkGviij3jeX6piZ+J
-----END CERTIFICATE-----
Generated at Fri Aug 23 05:56:27 2024 by rpki-client on console-fra.rpki-client.org