Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C83B13C3B1611EDA30913BCF1222468.roa
File: 1C83B13C3B1611EDA30913BCF1222468.roa (raw, json)
Hash identifier: xwujylHiZ69i1L+wV4ldeekM6AGL9mocr8nzuq4UkkA=
Subject key identifier: DA:2A:11:2E:25:78:E8:47:63:AD:AD:82:90:FE:95:20:4E:C8:41:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 185A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C83B13C3B1611EDA30913BCF1222468.roa
Signing time: Fri 23 Sep 2022 08:02:47 +0000
ROA not before: Fri 23 Sep 2022 08:02:44 +0000
ROA not after: Fri 30 Dec 2022 08:02:44 +0000
asID: 328608
IP address blocks: 156.240.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6234 (0x185a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 23 08:02:44 2022 GMT
Not After : Dec 30 08:02:44 2022 GMT
Subject: CN=632d6827-44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:b2:d1:44:9d:ad:c4:1f:25:f2:79:bd:c5:
25:c0:ee:bd:44:50:45:77:7a:f1:13:8a:aa:39:8b:
d9:3c:68:61:a5:cb:c4:79:c8:ea:e3:83:bf:7e:8c:
56:d6:81:20:ad:b5:f1:35:e1:d3:5d:e7:4c:d7:a9:
b6:03:fe:45:5e:26:a5:e9:bf:e8:3f:89:2a:d8:05:
b8:2d:42:f2:76:7d:6b:aa:28:ab:2a:9a:df:5b:3d:
58:ee:8a:8d:a2:13:5f:a0:f0:1b:fa:b7:38:fa:a4:
b4:f8:ca:f9:7b:89:ac:02:66:e6:db:0b:35:51:07:
89:8f:a8:4a:b5:12:3d:cb:c6:d8:46:ba:c0:20:5f:
af:91:ff:16:3e:50:15:34:57:0a:ac:18:23:ef:40:
0e:ad:cd:51:fc:92:bd:45:6f:5a:1b:9b:c1:92:e6:
c1:ce:4f:13:5b:7e:52:11:59:79:c8:9a:1c:b6:c5:
23:6e:7b:ff:5e:51:a2:78:be:22:ed:08:ca:fd:c6:
d6:92:08:3c:e4:26:bc:49:3f:35:0a:87:ad:aa:e9:
4e:27:cd:a5:0a:a7:a7:d2:8a:83:1c:44:08:45:22:
fc:f0:c4:96:8a:ab:54:0b:75:e4:8b:66:db:ab:ea:
52:48:cc:ea:e0:68:70:a7:b5:b9:0f:17:c4:8a:1b:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:11:2E:25:78:E8:47:63:AD:AD:82:90:FE:95:20:4E:C8:41:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C83B13C3B1611EDA30913BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.128.0/18
Signature Algorithm: sha256WithRSAEncryption
46:95:f0:fa:4f:a9:fe:42:6b:f3:00:c5:74:0d:42:a7:ab:d9:
d4:4a:72:8b:e6:ad:16:25:64:e7:b2:13:d8:d7:50:9d:9f:8b:
3c:c5:05:63:42:b9:c0:b5:40:ef:f3:b7:ca:93:c7:84:2a:fb:
32:25:b4:75:ae:d7:31:55:eb:3b:c1:b1:de:04:89:40:ce:ff:
c2:9e:87:dd:ec:d7:f9:2e:ef:aa:d1:c2:5c:7b:e0:5f:bb:2e:
20:26:0f:aa:e8:5b:c0:e4:22:38:d2:08:90:d6:0c:aa:18:9e:
82:75:32:e7:53:68:0c:8e:0d:a6:4a:41:8d:8f:31:c4:8e:0b:
4b:0c:21:0a:1e:92:ad:8f:49:ff:dd:1a:23:a7:5f:31:02:95:
e4:a7:47:b8:0b:09:8e:11:8d:f6:70:f4:a4:0d:75:3d:4b:fe:
e8:9e:16:9e:a0:76:de:31:6f:3e:3f:fc:17:92:58:cf:a3:98:
6e:74:f8:54:d6:e2:f6:9f:ae:aa:87:01:91:3e:93:8d:56:78:
3b:a6:c2:3b:f6:d4:81:f4:43:91:52:d8:d5:2f:b0:79:89:43:
08:81:80:cd:a8:39:ff:38:f5:7a:93:0d:84:65:99:a3:f1:27:
ab:e0:6a:07:44:f2:86:5e:95:6f:dd:1f:e3:63:0c:c6:19:cb:
3d:c0:4e:9f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGFowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MjMwODAyNDRaFw0yMjEyMzAwODAyNDRaMBgxFjAU
BgNVBAMMDTYzMmQ2ODI3LTQ0YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIUrLRRJ2txB8l8nm9xSXA7r1EUEV3evETiqo5i9k8aGGly8R5yOrjg79+
jFbWgSCttfE14dNd50zXqbYD/kVeJqXpv+g/iSrYBbgtQvJ2fWuqKKsqmt9bPVju
io2iE1+g8Bv6tzj6pLT4yvl7iawCZubbCzVRB4mPqEq1Ej3LxthGusAgX6+R/xY+
UBU0VwqsGCPvQA6tzVH8kr1Fb1obm8GS5sHOTxNbflIRWXnImhy2xSNue/9eUaJ4
viLtCMr9xtaSCDzkJrxJPzUKh62q6U4nzaUKp6fSioMcRAhFIvzwxJaKq1QLdeSL
Ztur6lJIzOrgaHCntbkPF8SKG5wZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2ioR
LiV46Edjra2CkP6VIE7IQcwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFDODNCMTNDM0IxNjExRURBMzA5MTNCQ0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAac8IAwDQYJKoZIhvcNAQELBQAD
ggEBAEaV8PpPqf5Ca/MAxXQNQqer2dRKcovmrRYlZOeyE9jXUJ2fizzFBWNCucC1
QO/zt8qTx4Qq+zIltHWu1zFV6zvBsd4EiUDO/8Keh93s1/ku76rRwlx74F+7LiAm
D6roW8DkIjjSCJDWDKoYnoJ1MudTaAyODaZKQY2PMcSOC0sMIQoekq2PSf/dGiOn
XzECleSnR7gLCY4RjfZw9KQNdT1L/uieFp6gdt4xbz4//BeSWM+jmG50+FTW4vaf
rqqHAZE+k41WeDumwjv21IH0Q5FS2NUvsHmJQwiBgM2oOf849XqTDYRlmaPxJ6vg
agdE8oZelW/dH+NjDMYZyz3ATp8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org