Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195D91C2499611EFB83CC1AE762E951A.roa
File: 195D91C2499611EFB83CC1AE762E951A.roa (raw, json)
Hash identifier: tR6Qv2PdnXxOD8Xdi64S+UlIVfEr3QrPeHEbblC+N6Q=
Subject key identifier: E0:BD:AE:B8:D5:CA:E7:6B:8C:F5:D3:FC:E3:82:5F:50:A8:A7:EF:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195D91C2499611EFB83CC1AE762E951A.roa
Signing time: Wed 24 Jul 2024 08:24:09 +0000
ROA not before: Wed 24 Jul 2024 08:24:06 +0000
ROA not after: Fri 23 Aug 2024 08:24:06 +0000
asID: 202656
IP address blocks: 156.246.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40721 (0x9f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:24:06 2024 GMT
Not After : Aug 23 08:24:06 2024 GMT
Subject: CN=66a0ba29-a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:a3:45:65:63:f2:14:65:80:5b:97:60:b6:
82:e9:de:71:11:58:51:b9:f4:86:94:6b:2b:5c:55:
b5:75:eb:62:ea:1e:8d:14:83:34:38:25:4e:b5:0c:
fa:88:6f:fd:50:69:53:cd:4c:dd:87:5f:36:e8:98:
1b:73:06:69:ac:b2:2b:6c:3f:fb:99:2d:42:ec:cd:
7b:3a:e9:55:8a:f9:00:5b:88:48:ed:f8:59:2b:c4:
02:96:06:90:3d:5b:c5:99:2c:f9:9b:3a:37:3e:1b:
fd:1f:92:b4:c0:de:55:0f:f6:a2:36:96:e5:a9:40:
94:74:1e:14:7d:4c:52:f8:29:fc:8d:78:ca:01:bb:
61:05:c7:6e:ac:8a:24:2a:85:4a:30:0f:f8:09:1e:
c3:db:96:88:26:30:6b:b8:7a:11:f6:bf:58:c0:8c:
38:84:3b:c3:7e:b7:9c:89:76:f5:a1:42:0e:f8:51:
2c:4e:58:93:34:15:f4:bb:b1:9b:d5:6c:4e:c6:36:
43:f2:21:af:bc:45:08:e0:cb:ce:f6:41:b8:5f:60:
3f:fd:4e:69:8d:09:47:9b:90:a6:f5:66:97:cd:dd:
19:87:9c:b7:43:2c:9f:42:d1:33:3a:94:35:5d:f4:
41:f6:11:46:25:d8:ad:c6:e9:5b:32:12:5f:ae:b6:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:AE:B8:D5:CA:E7:6B:8C:F5:D3:FC:E3:82:5F:50:A8:A7:EF:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195D91C2499611EFB83CC1AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.163.0/24
Signature Algorithm: sha256WithRSAEncryption
56:85:41:03:2f:b6:65:a1:a1:3a:e5:9a:cd:7b:9a:a1:ef:9b:
97:df:8b:c6:52:16:50:81:b7:22:47:a4:b7:02:dd:40:f8:87:
0a:2e:71:e7:72:da:f8:8a:a2:6c:45:fa:e7:71:78:4b:10:b6:
9c:ab:e0:f7:e9:36:d7:81:f2:e3:d9:cd:10:2d:a7:6f:45:a7:
d4:22:74:e4:22:d9:4e:23:0f:d0:a4:07:3b:7b:a3:b5:b7:76:
47:33:65:bf:ad:4e:f8:b2:ea:bf:59:1c:dd:4b:0b:e5:69:e6:
cc:e9:51:46:d8:6f:bf:73:d7:74:ae:68:4e:ba:0a:fc:70:5e:
ad:67:04:7b:37:ab:18:ac:5f:35:ff:9a:d6:37:c0:47:71:e8:
28:75:db:79:24:ab:c1:53:37:65:a3:9e:cd:44:38:fa:82:c5:
58:ee:18:50:7e:74:2b:56:07:0b:6f:0c:c5:3c:bf:6f:9a:0e:
20:9e:5a:a0:b0:5a:95:b8:2d:11:68:ff:a5:0f:73:9c:c7:d4:
1a:1e:f2:18:a1:1a:8d:49:d7:bf:63:de:d4:45:c1:c2:d6:e9:
45:6c:e9:4e:2c:a6:f5:91:af:f7:25:62:c9:c3:d4:a9:95:74:
17:ee:f6:d2:c6:c5:64:d6:e0:89:4d:be:9d:d6:5d:b5:8a:14:
f0:9a:1c:9b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ8RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDgyNDA2WhcNMjQwODIzMDgyNDA2WjAYMRYw
FAYDVQQDEw02NmEwYmEyOS1hMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm9mjRWVj8hRlgFuXYLaC6d5xEVhRufSGlGsrXFW1deti6h6NFIM0OCVO
tQz6iG/9UGlTzUzdh1826JgbcwZprLIrbD/7mS1C7M17OulVivkAW4hI7fhZK8QC
lgaQPVvFmSz5mzo3Phv9H5K0wN5VD/aiNpblqUCUdB4UfUxS+Cn8jXjKAbthBcdu
rIokKoVKMA/4CR7D25aIJjBruHoR9r9YwIw4hDvDfreciXb1oUIO+FEsTliTNBX0
u7Gb1WxOxjZD8iGvvEUI4MvO9kG4X2A//U5pjQlHm5Cm9WaXzd0Zh5y3QyyfQtEz
OpQ1XfRB9hFGJditxulbMhJfrrbcxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOC9
rrjVyudrjPXT/OOCX1Cop+/DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOTVEOTFDMjQ5OTYxMUVGQjgzQ0MxQUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPajMA0GCSqGSIb3DQEBCwUA
A4IBAQBWhUEDL7ZloaE65ZrNe5qh75uX34vGUhZQgbciR6S3At1A+IcKLnHnctr4
iqJsRfrncXhLELacq+D36TbXgfLj2c0QLadvRafUInTkItlOIw/QpAc7e6O1t3ZH
M2W/rU74suq/WRzdSwvlaebM6VFG2G+/c9d0rmhOugr8cF6tZwR7N6sYrF81/5rW
N8BHcegoddt5JKvBUzdlo57NRDj6gsVY7hhQfnQrVgcLbwzFPL9vmg4gnlqgsFqV
uC0RaP+lD3Ocx9QaHvIYoRqNSde/Y97URcHC1ulFbOlOLKb1ka/3JWLJw9SplXQX
7vbSxsVk1uCJTb6d1l21ihTwmhyb
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org