Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/175B23D4ECA411EE9A833FC1775412E6.roa
File: 175B23D4ECA411EE9A833FC1775412E6.roa (raw, json)
Hash identifier: 4KgW3kek+YDIf/WmTByF9KadVt3BhaLYydqxEJmRJrc=
Subject key identifier: 5F:27:86:DD:85:32:DE:E6:9E:47:86:C4:9C:CC:BB:2F:2F:CC:02:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/175B23D4ECA411EE9A833FC1775412E6.roa
Signing time: Thu 28 Mar 2024 01:40:01 +0000
ROA not before: Thu 28 Mar 2024 01:39:57 +0000
ROA not after: Tue 30 Apr 2024 01:39:57 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32973 (0x80cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 01:39:57 2024 GMT
Not After : Apr 30 01:39:57 2024 GMT
Subject: CN=6604ca70-b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:05:22:24:a6:19:f6:23:c1:fe:57:1e:61:
8a:30:da:9a:64:a0:32:23:3c:5f:62:5d:a9:08:45:
92:a2:0b:0e:e5:ee:f0:ad:df:02:08:73:62:f6:e0:
d0:18:44:b1:a2:5a:d8:0d:86:20:77:df:f1:94:c1:
86:47:25:00:94:20:6b:73:10:77:44:83:f5:ff:94:
c1:3d:13:88:36:28:f9:34:8a:7f:a8:49:5c:da:2e:
cd:82:9b:67:3c:8d:ce:d9:cb:83:7b:d5:29:91:3e:
0e:4c:e5:ec:30:d0:60:a9:98:bd:dc:37:fe:22:d5:
4c:19:2b:fe:12:8e:e5:21:b4:b1:1b:07:7a:45:74:
9b:02:22:a7:c4:a8:8b:0b:e6:6c:4a:99:af:69:46:
4c:a6:e6:44:62:ae:84:b5:2d:5a:11:09:d1:c4:f6:
70:ac:79:2f:9f:3e:20:17:41:3b:57:83:46:75:5d:
d9:6d:94:3d:7c:7e:4f:14:4e:5b:19:06:73:37:44:
c8:36:a4:ae:84:60:17:ca:f9:93:5c:5c:0b:e9:b0:
a4:42:4d:3f:a7:74:73:b0:fb:31:7e:8a:a1:5d:1b:
16:b3:1e:42:64:5c:ab:91:d6:f6:49:04:10:3e:ab:
31:05:fb:4b:42:03:0b:46:2f:af:3c:7b:10:c5:4d:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:86:DD:85:32:DE:E6:9E:47:86:C4:9C:CC:BB:2F:2F:CC:02:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/175B23D4ECA411EE9A833FC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
96:9c:40:48:92:30:8a:c1:7f:4c:f2:5e:aa:52:6d:d0:63:1a:
6d:85:1d:88:03:7d:74:c1:3f:a3:a7:db:52:1a:1b:19:57:16:
57:7f:ac:7a:84:bf:4f:75:67:4d:31:b2:c5:7d:9f:59:d0:d3:
cc:5a:e6:34:4f:64:97:62:44:20:39:84:c3:1f:52:61:94:e6:
a8:1e:eb:a3:ae:db:62:de:5b:0e:7f:45:70:8d:f5:e3:bb:86:
e4:9d:56:d2:17:3a:aa:9b:59:f9:ef:c4:35:41:3b:69:44:39:
f8:fc:a8:59:94:87:1f:85:29:3f:05:af:f4:6c:97:d6:87:f8:
65:28:f6:e6:2f:ba:ce:02:e6:aa:c1:31:a9:91:0a:b2:f2:75:
98:5d:d0:d9:e1:34:6f:66:83:85:15:53:9a:67:a7:37:e7:e3:
5b:71:71:51:25:ce:df:65:13:b6:fb:ff:cc:b0:be:72:d4:cc:
13:ae:69:41:91:1b:f5:27:77:d1:f0:83:8d:0d:0c:f1:33:2a:
64:93:a9:1e:09:7e:ef:ab:08:c7:e8:db:5e:01:24:aa:03:1c:
db:59:aa:ea:71:44:6b:cd:ff:e2:5f:b6:75:88:84:e3:42:13:
5e:19:ee:3e:7e:29:5b:21:d5:75:70:fa:bd:bb:2e:ec:c8:07:
cf:0b:d3:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI4MDEzOTU3WhcNMjQwNDMwMDEzOTU3WjAYMRYw
FAYDVQQDEw02NjA0Y2E3MC1iNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0kwFIiSmGfYjwf5XHmGKMNqaZKAyIzxfYl2pCEWSogsO5e7wrd8CCHNi
9uDQGESxolrYDYYgd9/xlMGGRyUAlCBrcxB3RIP1/5TBPROINij5NIp/qElc2i7N
gptnPI3O2cuDe9UpkT4OTOXsMNBgqZi93Df+ItVMGSv+Eo7lIbSxGwd6RXSbAiKn
xKiLC+ZsSpmvaUZMpuZEYq6EtS1aEQnRxPZwrHkvnz4gF0E7V4NGdV3ZbZQ9fH5P
FE5bGQZzN0TINqSuhGAXyvmTXFwL6bCkQk0/p3RzsPsxfoqhXRsWsx5CZFyrkdb2
SQQQPqsxBftLQgMLRi+vPHsQxU23aQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF8n
ht2FMt7mnkeGxJzMuy8vzALiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzVCMjNENEVDQTQxMUVFOUE4MzNGQzE3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQCWnEBIkjCKwX9M8l6qUm3QYxpthR2IA310wT+jp9tSGhsZVxZXf6x6hL9P
dWdNMbLFfZ9Z0NPMWuY0T2SXYkQgOYTDH1JhlOaoHuujrtti3lsOf0VwjfXju4bk
nVbSFzqqm1n578Q1QTtpRDn4/KhZlIcfhSk/Ba/0bJfWh/hlKPbmL7rOAuaqwTGp
kQqy8nWYXdDZ4TRvZoOFFVOaZ6c35+NbcXFRJc7fZRO2+//MsL5y1MwTrmlBkRv1
J3fR8IONDQzxMypkk6keCX7vqwjH6NteASSqAxzbWarqcURrzf/iX7Z1iITjQhNe
Ge4+filbIdV1cPq9uy7syAfPC9PY
-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org