Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284260D4A44111ECB955ADC55A40D577.roa
File: 284260D4A44111ECB955ADC55A40D577.roa (raw, json)
Hash identifier: VKCP7QNCEa/ccyU7gWHlwSHimJ+bKaSGxuRLemsM9X8=
Subject key identifier: BD:53:0E:E1:E7:D5:7C:E4:9D:B8:B6:B4:A9:23:B3:B5:53:5B:77:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 127F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284260D4A44111ECB955ADC55A40D577.roa
Signing time: Tue 15 Mar 2022 09:20:30 +0000
ROA not before: Tue 15 Mar 2022 09:20:26 +0000
ROA not after: Sat 31 Dec 2022 09:20:26 +0000
asID: 135097
IP address blocks: 156.255.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4735 (0x127f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:20:26 2022 GMT
Not After : Dec 31 09:20:26 2022 GMT
Subject: CN=62305a5e-4428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:b5:20:e7:1e:e2:1b:7a:83:6c:ee:fc:d2:
43:8d:a5:6e:a1:e4:38:42:01:6c:bc:38:ff:90:fa:
53:28:36:d3:c6:e3:68:8d:32:57:dc:64:89:e4:1d:
56:61:1c:e0:02:af:61:0f:2e:7e:5e:2c:c5:9b:c7:
1d:c5:a7:ac:69:6f:b1:6d:53:cf:c1:59:56:36:b7:
3b:12:e6:f5:d4:8f:fa:7c:ce:be:c8:1c:fb:37:75:
8c:ce:ca:b7:60:61:f0:2b:ef:44:de:43:73:4e:29:
2e:62:1b:35:6a:39:52:29:5f:73:bc:3f:8a:06:1e:
9b:ab:de:04:15:0d:d3:89:e3:5f:03:37:c4:a0:87:
22:4d:5d:49:98:44:49:d6:d8:74:de:44:70:80:da:
7f:25:e7:fa:04:47:28:a8:e4:52:f5:09:5c:7c:bb:
f5:49:18:28:4c:9d:5f:5f:c1:ce:4f:4d:7d:5e:91:
fb:fd:cf:1e:f2:79:1f:fa:b1:82:a7:5c:a1:90:3f:
a7:f8:c3:5e:d2:b8:91:f9:40:40:04:c1:2b:f0:46:
b8:3d:5b:30:ca:f3:db:1b:df:1a:09:d3:68:17:3d:
a7:fc:f9:d6:90:6b:f9:7f:f1:c6:03:17:a4:f8:d6:
33:02:cb:09:4e:7b:5c:c7:92:40:76:76:77:5f:0e:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:0E:E1:E7:D5:7C:E4:9D:B8:B6:B4:A9:23:B3:B5:53:5B:77:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/284260D4A44111ECB955ADC55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7f:6f:53:d3:88:1d:10:ea:40:84:8d:9c:e1:c8:d2:f1:6e:
03:2c:4f:63:34:fd:75:89:e5:bc:75:de:05:47:70:80:f2:0a:
fa:b1:a6:77:02:c8:da:64:f1:38:1b:dc:f9:62:78:a7:39:bf:
7b:49:c1:12:9e:c8:41:48:35:f4:17:93:00:a3:62:a9:af:b5:
80:28:56:f2:91:f5:3d:ca:59:56:ec:29:f5:17:77:72:cd:c8:
36:4e:83:fd:ce:6e:e3:81:da:bd:b4:3e:8a:a9:c0:73:73:22:
83:ff:c1:56:d2:9e:9e:d2:46:09:9a:5c:bb:b9:c5:4f:84:0d:
7d:ac:bc:7d:c5:7a:c8:5d:75:2b:28:a1:95:6c:77:0e:c5:c5:
c0:5a:a2:2e:de:4e:37:39:8e:19:9d:20:1e:5b:6a:7b:e6:0d:
60:db:43:e7:bc:2e:40:46:2e:aa:97:80:17:69:16:d7:7d:66:
bc:e9:11:97:82:b3:18:a3:1f:7f:2e:3c:e8:78:fe:fd:16:e9:
48:8a:7e:bb:d6:e1:83:93:69:73:ba:b6:ef:0f:4f:08:2e:4a:
af:48:fe:42:b5:d9:0f:3f:d5:e3:5c:dd:7d:6f:20:76:6b:e0:
b4:21:89:ce:20:96:79:4b:7c:81:b9:ec:0b:d8:15:38:b8:0d:
f7:2c:cf:52
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEn8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMTUwOTIwMjZaFw0yMjEyMzEwOTIwMjZaMBgxFjAU
BgNVBAMMDTYyMzA1YTVlLTQ0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9ebUg5x7iG3qDbO780kONpW6h5DhCAWy8OP+Q+lMoNtPG42iNMlfcZInk
HVZhHOACr2EPLn5eLMWbxx3Fp6xpb7FtU8/BWVY2tzsS5vXUj/p8zr7IHPs3dYzO
yrdgYfAr70TeQ3NOKS5iGzVqOVIpX3O8P4oGHpur3gQVDdOJ418DN8SghyJNXUmY
REnW2HTeRHCA2n8l5/oERyio5FL1CVx8u/VJGChMnV9fwc5PTX1ekfv9zx7yeR/6
sYKnXKGQP6f4w17SuJH5QEAEwSvwRrg9WzDK89sb3xoJ02gXPaf8+daQa/l/8cYD
F6T41jMCywlOe1zHkkB2dndfDg0BAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvVMO
4efVfOSduLa0qSOztVNbd3cwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzI4NDI2MEQ0QTQ0MTExRUNCOTU1QURDNTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/wowDQYJKoZIhvcNAQELBQAD
ggEBAJR/b1PTiB0Q6kCEjZzhyNLxbgMsT2M0/XWJ5bx13gVHcIDyCvqxpncCyNpk
8Tgb3PlieKc5v3tJwRKeyEFINfQXkwCjYqmvtYAoVvKR9T3KWVbsKfUXd3LNyDZO
g/3ObuOB2r20PoqpwHNzIoP/wVbSnp7SRgmaXLu5xU+EDX2svH3FeshddSsooZVs
dw7FxcBaoi7eTjc5jhmdIB5banvmDWDbQ+e8LkBGLqqXgBdpFtd9ZrzpEZeCsxij
H38uPOh4/v0W6UiKfrvW4YOTaXO6tu8PTwguSq9I/kK12Q8/1eNc3X1vIHZr4LQh
ic4glnlLfIG57AvYFTi4Dfcsz1I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org