Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D341C52EAF411EBA409494BD8A014CE.roa
File: 1D341C52EAF411EBA409494BD8A014CE.roa (raw, json)
Hash identifier: NI1+ZnBUIN/O2kNLP7em47FSKubVk8ht6FsyyJcRR3s=
Subject key identifier: 85:A1:7C:0F:01:6F:13:2C:30:82:48:F2:7E:5F:66:80:63:C2:A3:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D341C52EAF411EBA409494BD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:53:06 +0000
ROA not before: Thu 22 Jul 2021 13:53:01 +0000
ROA not after: Thu 22 Sep 2022 13:53:01 +0000
asID: 1239
IP address blocks: 156.236.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:53:01 2021 GMT
Not After : Sep 22 13:53:01 2022 GMT
Subject: CN=60f97842-f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:19:2b:ab:83:ab:5a:d1:24:2a:07:60:e9:
11:96:81:b6:69:33:b0:42:44:0a:a2:b2:76:54:51:
eb:b6:dc:91:d1:d4:6f:47:a1:39:60:df:2a:19:4b:
b4:a7:d0:05:15:95:5a:8a:c0:00:e5:f1:a8:29:ac:
20:67:fb:cb:24:41:43:0e:3f:a6:90:a2:3a:b9:cb:
48:33:93:3c:c6:24:5a:f6:40:3c:a2:a1:18:53:70:
3c:27:06:2f:ae:73:35:73:90:ba:91:21:ed:72:67:
26:b0:58:bf:57:7d:4b:53:fc:b7:8e:45:f5:ed:79:
17:bd:88:b8:8b:75:f9:ad:bd:d4:bf:d6:56:39:7b:
68:0e:bd:fd:d7:67:1d:f8:d0:2a:4c:c9:a6:c0:9f:
5c:06:dc:e3:d5:82:34:91:08:2a:92:aa:58:c4:78:
96:00:e4:7e:32:a5:92:9c:14:21:32:64:29:d6:81:
7a:7a:c3:89:7e:06:87:db:74:9f:89:ae:c0:6e:dc:
25:7c:30:48:82:77:4a:6b:2a:18:63:de:47:c2:32:
7e:2a:7d:56:aa:fe:35:c5:37:56:37:b0:40:17:fe:
a8:50:cd:fb:07:2f:e0:ea:04:a2:59:13:0d:b4:f8:
61:df:4b:2a:b2:d7:07:97:73:10:5f:53:09:96:dd:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:7C:0F:01:6F:13:2C:30:82:48:F2:7E:5F:66:80:63:C2:A3:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D341C52EAF411EBA409494BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bc:0a:ec:30:8e:ff:b2:02:59:82:58:8f:89:d4:4d:62:05:
ec:48:96:16:a5:5e:cf:19:24:f7:b2:5b:28:c6:e7:f3:5a:09:
13:8b:d3:b3:7f:d8:60:c9:a5:17:cf:e7:b7:ac:78:9d:5c:40:
fd:e6:85:b0:90:48:9a:99:2f:d9:5c:b5:70:1a:2a:51:ab:9f:
a3:9a:71:97:f6:77:ed:3c:c3:1d:1b:63:e4:5d:be:fc:1c:44:
28:78:77:9d:c9:66:e1:6e:03:c0:f4:0c:43:07:b0:1f:35:b3:
9d:84:07:b1:df:92:22:a6:22:5e:68:3f:65:85:63:fb:5f:98:
0a:e1:30:80:65:32:9d:83:8e:bb:02:aa:78:c2:b7:13:c9:c2:
af:14:30:12:87:4e:63:7a:64:1e:e4:e2:c7:40:65:99:74:f2:
94:9d:c1:5d:bd:3c:20:b5:60:17:f7:d5:3c:f8:23:8d:ee:4b:
8f:44:2f:91:0c:ac:dd:bf:dd:0e:7a:02:1f:44:03:a9:19:09:
35:96:61:1e:28:23:41:d6:71:9d:44:81:c6:83:55:03:10:c0:
d6:0b:f5:f1:e9:88:db:0f:fc:63:ab:57:68:16:10:d5:5e:00:
14:77:dd:10:d6:51:2e:77:a1:84:e5:c5:42:64:21:29:d2:d4:
86:b8:7e:79
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjIxMzUzMDFaFw0yMjA5MjIxMzUzMDFaMBgxFjAU
BgNVBAMMDTYwZjk3ODQyLWY2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrWBkrq4OrWtEkKgdg6RGWgbZpM7BCRAqisnZUUeu23JHR1G9HoTlg3yoZ
S7Sn0AUVlVqKwADl8agprCBn+8skQUMOP6aQojq5y0gzkzzGJFr2QDyioRhTcDwn
Bi+uczVzkLqRIe1yZyawWL9XfUtT/LeORfXteRe9iLiLdfmtvdS/1lY5e2gOvf3X
Zx340CpMyabAn1wG3OPVgjSRCCqSqljEeJYA5H4ypZKcFCEyZCnWgXp6w4l+Bofb
dJ+JrsBu3CV8MEiCd0prKhhj3kfCMn4qfVaq/jXFN1Y3sEAX/qhQzfsHL+DqBKJZ
Ew20+GHfSyqy1weXcxBfUwmW3UBBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhaF8
DwFvEywwgkjyfl9mgGPCoycwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFEMzQxQzUyRUFGNDExRUJBNDA5NDk0QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7MswDQYJKoZIhvcNAQELBQAD
ggEBAGq8Cuwwjv+yAlmCWI+J1E1iBexIlhalXs8ZJPeyWyjG5/NaCROL07N/2GDJ
pRfP57eseJ1cQP3mhbCQSJqZL9lctXAaKlGrn6OacZf2d+08wx0bY+RdvvwcRCh4
d53JZuFuA8D0DEMHsB81s52EB7HfkiKmIl5oP2WFY/tfmArhMIBlMp2DjrsCqnjC
txPJwq8UMBKHTmN6ZB7k4sdAZZl08pSdwV29PCC1YBf31Tz4I43uS49EL5EMrN2/
3Q56Ah9EA6kZCTWWYR4oI0HWcZ1EgcaDVQMQwNYL9fHpiNsP/GOrV2gWENVeABR3
3RDWUS53oYTlxUJkISnS1Ia4fnk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org