Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2279CD26250C11ED965016EAF1222468.roa
File: 2279CD26250C11ED965016EAF1222468.roa (raw, json)
Hash identifier: US6xUs2uXiPVCTnD4NWXHxjOtZhOAfcDpNjFTbBxjDs=
Subject key identifier: 25:EA:0B:4B:3B:11:E3:69:65:E1:2E:4D:AB:78:7B:49:73:CB:29:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1711
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2279CD26250C11ED965016EAF1222468.roa
Signing time: Fri 26 Aug 2022 06:55:57 +0000
ROA not before: Fri 26 Aug 2022 06:55:54 +0000
ROA not after: Sun 15 Jan 2023 06:55:54 +0000
asID: 139057
IP address blocks: 156.225.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5905 (0x1711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 06:55:54 2022 GMT
Not After : Jan 15 06:55:54 2023 GMT
Subject: CN=63086e7d-a25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:e2:9b:dd:05:9f:65:3e:9e:d4:81:8d:a6:
49:03:7a:67:65:9b:8c:40:0d:a7:42:56:41:4b:04:
13:43:2e:3f:a1:01:ac:f7:b0:0a:10:19:47:e1:b7:
7f:e8:4d:fe:0a:3f:3f:5c:d5:ef:cf:04:c1:52:16:
82:ec:28:fc:fc:86:a6:4f:56:f4:73:26:19:00:14:
15:ee:33:09:6c:43:bb:29:ba:64:5a:b1:da:3b:4a:
d5:e3:53:67:cc:fb:41:71:63:b9:3c:32:bd:89:24:
1f:e0:af:c4:05:43:75:94:9a:ef:da:ee:6b:71:b6:
61:c4:cb:83:7a:97:1a:81:eb:11:82:e5:12:07:99:
ae:83:26:47:c7:2e:cb:6f:44:b9:f2:07:14:6c:d1:
89:54:7d:45:10:52:5a:74:3c:0e:cb:be:df:6a:6c:
8e:1e:2e:9b:2d:a6:8f:67:59:57:5e:0f:2c:fa:6a:
7d:12:fb:4c:8e:a6:6a:3f:e8:15:54:da:29:82:6f:
7a:79:a9:a3:6a:6a:d5:06:de:4c:1d:78:34:7b:a1:
56:ca:c3:48:c6:5a:5e:2d:4a:e1:43:3a:54:23:ad:
04:f0:8c:9d:f6:9e:35:dc:8a:22:0b:61:07:24:1f:
31:23:0a:db:be:14:bc:7d:2c:c8:78:00:58:ba:fe:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:0B:4B:3B:11:E3:69:65:E1:2E:4D:AB:78:7B:49:73:CB:29:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2279CD26250C11ED965016EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bd:1d:98:ee:0e:2e:97:12:7f:44:b9:73:00:a6:5e:42:7f:
13:d2:8a:bf:93:f5:7e:8e:bc:b6:ae:d7:e9:75:d6:e4:a5:0f:
78:a8:7f:f2:1e:09:71:84:26:bd:1d:94:90:27:18:43:34:d2:
92:cc:dd:cd:ca:02:dd:0c:d0:c2:11:7b:87:a6:3d:b2:0f:87:
ce:ad:a6:38:33:09:07:0d:57:d8:83:a1:f4:a1:62:fd:62:8e:
71:be:50:4f:6a:4c:fc:e6:76:90:78:34:00:6e:e2:2c:ce:6f:
71:46:af:90:1b:af:70:6d:02:3e:b8:17:ba:10:1b:33:2a:1d:
9a:3c:69:a7:9b:63:5e:67:e7:0e:1c:2b:9a:eb:32:6d:f1:d9:
e9:c5:6c:34:fe:66:5f:25:6c:52:83:8c:44:22:e9:3d:df:55:
61:e0:3c:8c:8d:cb:55:3d:18:cc:6a:f2:3c:c8:14:b7:2d:4f:
2a:6d:dd:4e:95:b3:9b:2e:c0:d7:56:b8:3b:6f:37:d6:9e:46:
35:49:ba:8f:65:5d:d0:67:81:2b:20:07:7c:ea:6c:e7:e2:67:
ec:16:0a:43:93:14:60:e7:7b:a0:f1:ce:78:14:ab:26:e6:64:
00:31:35:ce:01:d2:b7:00:84:30:fb:b5:4c:a1:e9:44:a7:00:
fc:57:10:97
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFxEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MjYwNjU1NTRaFw0yMzAxMTUwNjU1NTRaMBgxFjAU
BgNVBAMMDTYzMDg2ZTdkLWEyNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzyeKb3QWfZT6e1IGNpkkDemdlm4xADadCVkFLBBNDLj+hAaz3sAoQGUfh
t3/oTf4KPz9c1e/PBMFSFoLsKPz8hqZPVvRzJhkAFBXuMwlsQ7spumRasdo7StXj
U2fM+0FxY7k8Mr2JJB/gr8QFQ3WUmu/a7mtxtmHEy4N6lxqB6xGC5RIHma6DJkfH
LstvRLnyBxRs0YlUfUUQUlp0PA7Lvt9qbI4eLpstpo9nWVdeDyz6an0S+0yOpmo/
6BVU2imCb3p5qaNqatUG3kwdeDR7oVbKw0jGWl4tSuFDOlQjrQTwjJ32njXciiIL
YQckHzEjCtu+FLx9LMh4AFi6/kTHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJeoL
SzsR42ll4S5Nq3h7SXPLKXMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzIyNzlDRDI2MjUwQzExRUQ5NjUwMTZFQUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4W8wDQYJKoZIhvcNAQELBQAD
ggEBAD29HZjuDi6XEn9EuXMApl5CfxPSir+T9X6OvLau1+l11uSlD3iof/IeCXGE
Jr0dlJAnGEM00pLM3c3KAt0M0MIRe4emPbIPh86tpjgzCQcNV9iDofShYv1ijnG+
UE9qTPzmdpB4NABu4izOb3FGr5Abr3BtAj64F7oQGzMqHZo8aaebY15n5w4cK5rr
Mm3x2enFbDT+Zl8lbFKDjEQi6T3fVWHgPIyNy1U9GMxq8jzIFLctTypt3U6Vs5su
wNdWuDtvN9aeRjVJuo9lXdBngSsgB3zqbOfiZ+wWCkOTFGDne6DxzngUqybmZAAx
Nc4B0rcAhDD7tUyh6USnAPxXEJc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org