Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B034AC200A11ECBE2DB47CD8A014CE.roa
File: 15B034AC200A11ECBE2DB47CD8A014CE.roa (raw, json)
Hash identifier: mop5Z+uXGnjaSpImlOol21FrdchY97hm00dp+nymPVU=
Subject key identifier: C4:C3:D5:29:8C:ED:41:1E:1C:12:0E:F1:3B:61:B4:68:7D:B6:C3:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B034AC200A11ECBE2DB47CD8A014CE.roa
Signing time: Tue 28 Sep 2021 03:13:43 +0000
ROA not before: Tue 28 Sep 2021 03:13:39 +0000
ROA not after: Wed 28 Sep 2022 03:13:39 +0000
asID: 132839
IP address blocks: 156.252.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:13:39 2021 GMT
Not After : Sep 28 03:13:39 2022 GMT
Subject: CN=61528867-1fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:33:b2:19:14:e3:32:5d:a5:d6:a5:9a:b7:
b7:bd:52:2c:f5:64:f3:ab:a7:08:4d:57:27:c3:c4:
c1:3f:31:36:d5:24:d3:c3:bc:b8:72:fd:b6:43:0c:
b6:25:91:2d:79:de:77:a0:0c:d0:c2:c8:a2:25:7b:
71:02:fd:a3:0c:82:95:63:bb:37:41:13:95:1b:fb:
40:56:d1:85:08:5e:ff:4f:5d:31:52:f2:3e:fe:fe:
11:70:dd:e8:23:1a:00:27:80:d1:f6:03:08:dc:d9:
d7:76:6c:76:ef:0f:ed:b7:f6:49:12:a9:54:c5:9d:
22:95:0d:b8:f8:df:65:1f:dd:b6:45:db:0a:df:c2:
c2:ca:89:18:ed:7b:ee:3f:69:46:42:15:4a:e1:74:
bb:91:23:66:45:bd:fe:ca:70:a2:e0:94:c7:31:07:
e1:73:5e:0e:87:30:d2:ab:67:b7:e5:fa:2d:ba:30:
e3:38:7a:d0:ab:da:a3:4c:93:dd:90:93:29:a4:55:
2a:64:c0:4b:e8:0e:3b:0d:20:3f:78:52:f2:e5:26:
ea:2c:0c:df:67:1f:31:b5:63:a7:47:a1:0f:18:13:
23:16:8e:f1:33:c2:b0:71:41:43:8a:7b:4d:b8:bb:
6f:cc:d9:d4:3d:a8:0c:5d:9e:b5:b3:e3:5d:b8:12:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:D5:29:8C:ED:41:1E:1C:12:0E:F1:3B:61:B4:68:7D:B6:C3:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B034AC200A11ECBE2DB47CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:f7:d9:b5:45:79:6f:f1:65:f7:8a:00:6d:6b:3f:c6:a4:
c6:3a:3a:0c:40:af:db:f1:7c:a0:11:71:ee:b1:6b:42:ae:10:
f8:68:93:69:2e:a0:97:34:de:58:b8:83:ac:a1:86:44:c0:5c:
19:0a:c9:2c:1c:8b:09:eb:16:e8:2b:99:57:22:20:a1:c9:be:
aa:61:b2:a4:3c:54:ec:14:4a:17:07:fa:4d:47:af:22:a9:f0:
60:33:a3:29:d3:b4:69:a2:30:ac:22:52:99:83:3f:33:ec:e7:
d7:59:c6:0e:06:fa:80:ea:b8:22:4e:13:09:4a:d1:0a:ef:c3:
55:57:9f:a8:a8:ab:37:38:54:c4:c9:59:c8:60:48:15:05:f4:
ce:d7:98:af:6f:ce:79:3e:a1:e8:f6:7a:13:26:cf:bf:0d:62:
35:92:3d:a8:ef:76:09:b6:71:fd:94:48:05:da:a3:b9:86:ca:
79:2a:1b:1a:84:36:03:6e:e1:20:b7:3e:4c:f2:b8:3f:d0:f6:
eb:86:0f:5f:5b:8b:67:56:bc:2e:0b:c2:15:4f:6f:94:62:62:
41:9a:ae:66:0c:53:3b:2d:8b:8b:08:d7:61:1c:12:35:2b:7b:
67:ff:ec:44:48:9b:8e:a2:32:86:b6:f0:fb:a6:33:42:3d:cb:
a7:06:b8:07
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA5MjgwMzEzMzlaFw0yMjA5MjgwMzEzMzlaMBgxFjAU
BgNVBAMMDTYxNTI4ODY3LTFmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsezOyGRTjMl2l1qWat7e9Uiz1ZPOrpwhNVyfDxME/MTbVJNPDvLhy/bZD
DLYlkS153negDNDCyKIle3EC/aMMgpVjuzdBE5Ub+0BW0YUIXv9PXTFS8j7+/hFw
3egjGgAngNH2Awjc2dd2bHbvD+239kkSqVTFnSKVDbj432Uf3bZF2wrfwsLKiRjt
e+4/aUZCFUrhdLuRI2ZFvf7KcKLglMcxB+FzXg6HMNKrZ7fl+i26MOM4etCr2qNM
k92QkymkVSpkwEvoDjsNID94UvLlJuosDN9nHzG1Y6dHoQ8YEyMWjvEzwrBxQUOK
e024u2/M2dQ9qAxdnrWz4124EtWjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUxMPV
KYztQR4cEg7xO2G0aH22w3YwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzE1QjAzNEFDMjAwQTExRUNCRTJEQjQ3Q0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/EcwDQYJKoZIhvcNAQELBQAD
ggEBAJto99m1RXlv8WX3igBtaz/GpMY6OgxAr9vxfKARce6xa0KuEPhok2kuoJc0
3li4g6yhhkTAXBkKySwciwnrFugrmVciIKHJvqphsqQ8VOwUShcH+k1HryKp8GAz
oynTtGmiMKwiUpmDPzPs59dZxg4G+oDquCJOEwlK0Qrvw1VXn6ioqzc4VMTJWchg
SBUF9M7XmK9vznk+oej2ehMmz78NYjWSPajvdgm2cf2USAXao7mGynkqGxqENgNu
4SC3PkzyuD/Q9uuGD19bi2dWvC4LwhVPb5RiYkGarmYMUzsti4sI12EcEjUre2f/
7ERIm46iMoa28PumM0I9y6cGuAc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org