Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CA6BAA47DB11EF91025D70762E951A.roa
File: 29CA6BAA47DB11EF91025D70762E951A.roa (raw, json)
Hash identifier: 10LMduDclEn8gzgZrri5q4uecxYRPJxcS2h8/2/lU80=
Subject key identifier: 18:2C:9A:74:A4:AD:79:20:4E:DC:36:A2:42:D7:53:CA:D1:87:4D:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CA6BAA47DB11EF91025D70762E951A.roa
Signing time: Mon 22 Jul 2024 03:33:30 +0000
ROA not before: Mon 22 Jul 2024 03:33:26 +0000
ROA not after: Fri 23 Aug 2024 03:33:26 +0000
asID: 48031
IP address blocks: 156.246.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40431 (0x9def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:33:26 2024 GMT
Not After : Aug 23 03:33:26 2024 GMT
Subject: CN=669dd30a-f818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:f1:44:a4:26:8b:ed:1b:2b:62:12:6f:9c:
01:86:56:fd:63:42:ca:48:ec:c6:67:59:64:3c:5f:
a0:5e:c4:bb:d4:c9:a8:77:a8:da:1e:dd:70:81:3d:
20:d3:90:21:f9:d8:56:63:8c:1b:d1:51:79:df:6f:
9f:36:cf:e5:43:1c:bd:65:0b:5d:04:ef:b6:98:ec:
0e:cc:a8:f9:26:6e:a8:53:1d:59:b1:c2:b0:4f:a3:
a6:ff:db:2a:2b:15:62:66:5f:e3:82:d8:ed:66:c8:
43:5b:06:54:30:bb:3a:80:ff:bf:97:8f:56:7c:b5:
d5:84:88:2b:b3:3e:6a:3a:6e:02:b9:a7:39:3d:70:
24:6b:8e:da:9a:81:8a:a9:90:6b:89:cc:93:3a:ca:
31:af:8f:82:f9:12:2e:a5:c7:87:ee:74:ab:e9:fb:
3f:6e:79:0e:3e:e6:6e:76:70:b1:8a:ad:ea:9f:3f:
8b:98:7e:8b:88:66:91:b5:97:bf:f0:39:0d:01:cb:
6e:c4:e5:f1:cc:8e:41:ef:fd:a7:81:ea:97:ed:37:
2d:66:93:f3:ec:ae:e9:00:fa:50:1d:71:4b:fb:79:
7e:89:a6:fd:52:a7:79:82:5f:02:11:8e:d5:92:58:
70:9e:d7:1b:a4:e0:ce:49:bd:b9:37:b6:81:ce:e2:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:9A:74:A4:AD:79:20:4E:DC:36:A2:42:D7:53:CA:D1:87:4D:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CA6BAA47DB11EF91025D70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0/19
Signature Algorithm: sha256WithRSAEncryption
20:50:75:95:62:86:3c:a2:25:61:54:34:eb:5c:e5:97:a8:ed:
fb:b1:20:66:9f:2b:1f:da:57:85:2b:96:8e:8f:fd:b6:2d:1f:
64:2f:d8:3f:be:59:86:e1:44:c2:80:82:b7:a0:28:a6:15:96:
79:2c:12:d4:7e:17:4e:a7:bb:9a:5a:44:2d:16:c4:fc:5d:47:
ac:6a:bf:bb:ab:a2:93:d1:aa:ef:cd:f7:50:26:98:36:0d:73:
d0:a3:d4:b3:fd:e3:2c:8b:c9:57:ec:ae:fc:c4:0e:aa:1f:b9:
2a:13:61:3c:f5:c2:2e:82:22:f5:65:21:b4:81:b7:d1:07:f3:
22:d6:f3:70:6e:87:4e:42:c5:5b:81:0d:79:ea:74:04:dc:7f:
1d:a2:1a:47:cc:2f:c9:e9:83:e1:92:12:3b:2f:19:2b:27:db:
4e:53:b3:53:84:26:a8:45:23:64:d2:f6:d3:46:6d:2c:ae:38:
42:62:4a:4b:3c:39:44:8c:b3:7e:d1:f3:74:84:0d:39:5d:eb:
0e:96:82:95:b9:78:00:02:91:3b:c6:0e:83:92:b6:62:7a:7b:
19:4f:b5:37:6c:09:51:39:b8:49:1f:6f:84:92:11:6b:4c:25:
25:47:91:74:0f:2c:0c:ae:ac:a8:54:49:54:40:c8:65:ea:40:
25:88:50:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ3vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDMzMzI2WhcNMjQwODIzMDMzMzI2WjAYMRYw
FAYDVQQDEw02NjlkZDMwYS1mODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3DxRKQmi+0bK2ISb5wBhlb9Y0LKSOzGZ1lkPF+gXsS71Mmod6jaHt1w
gT0g05Ah+dhWY4wb0VF532+fNs/lQxy9ZQtdBO+2mOwOzKj5Jm6oUx1ZscKwT6Om
/9sqKxViZl/jgtjtZshDWwZUMLs6gP+/l49WfLXVhIgrsz5qOm4Cuac5PXAka47a
moGKqZBricyTOsoxr4+C+RIupceH7nSr6fs/bnkOPuZudnCxiq3qnz+LmH6LiGaR
tZe/8DkNActuxOXxzI5B7/2ngeqX7TctZpPz7K7pAPpQHXFL+3l+iab9Uqd5gl8C
EY7VklhwntcbpODOSb25N7aBzuLuHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBgs
mnSkrXkgTtw2okLXU8rRh02NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOUNBNkJBQTQ3REIxMUVGOTEwMjVENzA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPaAMA0GCSqGSIb3DQEBCwUA
A4IBAQAgUHWVYoY8oiVhVDTrXOWXqO37sSBmnysf2leFK5aOj/22LR9kL9g/vlmG
4UTCgIK3oCimFZZ5LBLUfhdOp7uaWkQtFsT8XUesar+7q6KT0arvzfdQJpg2DXPQ
o9Sz/eMsi8lX7K78xA6qH7kqE2E89cIugiL1ZSG0gbfRB/Mi1vNwbodOQsVbgQ15
6nQE3H8dohpHzC/J6YPhkhI7LxkrJ9tOU7NThCaoRSNk0vbTRm0srjhCYkpLPDlE
jLN+0fN0hA05XesOloKVuXgAApE7xg6DkrZiensZT7U3bAlRObhJH2+EkhFrTCUl
R5F0DywMrqyoVElUQMhl6kAliFCH
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org