Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACB42B84A6511EFA81F0AAF762E951A.roa
File: 2ACB42B84A6511EFA81F0AAF762E951A.roa (raw, json)
Hash identifier: REktQ/FBEY1Y3zlcyXMMeRcbJitYtGJYtgrJsoe+E0g=
Subject key identifier: FF:92:91:F9:0D:12:40:20:38:A4:0B:87:A8:98:B3:FB:97:61:4F:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACB42B84A6511EFA81F0AAF762E951A.roa
Signing time: Thu 25 Jul 2024 09:06:24 +0000
ROA not before: Thu 25 Jul 2024 09:06:21 +0000
ROA not after: Sat 03 Aug 2024 09:06:21 +0000
asID: 22773
IP address blocks: 156.237.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40957 (0x9ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:06:21 2024 GMT
Not After : Aug 3 09:06:21 2024 GMT
Subject: CN=66a21590-ac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:e5:5d:f3:53:4f:3e:cc:37:d1:16:63:39:
9d:df:9f:dd:6f:d0:39:29:78:0c:2a:3b:6d:d2:64:
37:26:5b:26:b4:b9:9c:5f:57:4e:b5:48:18:36:d6:
9e:d4:64:06:3e:8b:fd:8e:17:d0:0a:db:d5:c6:85:
86:73:f6:34:a5:57:cc:bd:69:19:65:c2:7a:5f:eb:
7e:36:cc:3e:5b:87:80:14:6c:08:bb:14:56:b9:78:
22:87:77:fe:44:a8:13:b9:0a:93:80:17:ea:a6:2e:
fd:3e:86:c6:2c:e8:22:13:2b:af:07:c1:ad:3d:10:
4a:1e:29:33:ca:ea:e6:70:05:25:99:ef:a9:71:5e:
cd:6b:40:fd:49:05:35:52:85:2f:81:2c:f8:dd:a5:
52:71:43:ba:d3:13:b2:47:cf:60:f0:2d:2a:83:4a:
0f:94:7b:ef:f1:0d:55:18:dc:d0:9d:69:50:24:6c:
55:90:5e:f3:aa:64:1c:76:c7:b7:8e:c0:b0:d9:d5:
0c:17:49:53:52:91:ef:e8:62:d2:33:d2:af:6f:03:
e7:af:86:3a:e6:b0:bf:1a:f9:c5:30:22:41:c2:4d:
64:0e:82:1d:b8:9a:c3:4e:36:8e:d0:7d:d2:21:5c:
bb:0c:75:33:76:d6:a4:0c:39:b6:34:ee:fa:23:0a:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:91:F9:0D:12:40:20:38:A4:0B:87:A8:98:B3:FB:97:61:4F:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACB42B84A6511EFA81F0AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:4d:34:f9:c7:7e:b3:c0:6c:b9:dd:40:ee:73:75:93:9d:3a:
7a:95:ff:ee:7c:19:27:da:9c:9c:bc:62:da:96:02:3c:76:62:
10:51:5c:b3:5d:af:39:89:4b:72:85:d6:af:77:1f:98:db:e1:
44:c5:6f:5d:e4:7b:92:06:72:98:ea:0b:89:8e:e9:89:a3:fe:
f8:39:a4:9d:51:1c:42:f5:e5:fc:3a:87:e8:d3:f5:2e:76:e6:
0d:da:52:c5:67:27:f7:db:69:44:b4:86:e1:34:35:e2:ee:46:
e2:ff:b7:75:75:ba:f9:60:d0:37:83:a6:e7:c9:b3:41:d2:ff:
10:1a:bd:89:e9:d7:9d:28:a2:72:93:6d:76:85:44:62:7c:75:
15:47:15:ac:f3:d4:ca:81:e8:fd:18:d2:15:b6:6f:70:5a:e4:
6b:15:5a:8b:f1:f4:8c:20:86:88:66:78:1d:63:1f:23:28:71:
96:33:e9:08:1e:91:c1:78:5f:f2:00:fb:44:f4:44:4a:1b:1d:
4a:8c:db:db:bc:c1:b6:c0:25:1c:01:24:d8:d1:ed:61:d7:4c:
18:da:dd:41:b4:2b:34:f2:1b:8c:f6:cb:3e:02:61:b2:5f:5a:
45:dc:00:95:37:70:a8:d1:93:5e:b8:15:9e:1b:9c:3b:33:e7:
dc:7f:f3:6d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDkwNjIxWhcNMjQwODAzMDkwNjIxWjAYMRYw
FAYDVQQDEw02NmEyMTU5MC1hYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6YLlXfNTTz7MN9EWYzmd35/db9A5KXgMKjtt0mQ3JlsmtLmcX1dOtUgY
Ntae1GQGPov9jhfQCtvVxoWGc/Y0pVfMvWkZZcJ6X+t+Nsw+W4eAFGwIuxRWuXgi
h3f+RKgTuQqTgBfqpi79PobGLOgiEyuvB8GtPRBKHikzyurmcAUlme+pcV7Na0D9
SQU1UoUvgSz43aVScUO60xOyR89g8C0qg0oPlHvv8Q1VGNzQnWlQJGxVkF7zqmQc
dse3jsCw2dUMF0lTUpHv6GLSM9KvbwPnr4Y65rC/GvnFMCJBwk1kDoIduJrDTjaO
0H3SIVy7DHUzdtakDDm2NO76IwrrOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP+S
kfkNEkAgOKQLh6iYs/uXYU9EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQUNCNDJCODRBNjUxMUVGQTgxRjBBQUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBNTTT5x36zwGy53UDuc3WTnTp6lf/ufBkn2pycvGLalgI8dmIQUVyzXa85
iUtyhdavdx+Y2+FExW9d5HuSBnKY6guJjumJo/74OaSdURxC9eX8Oofo0/UuduYN
2lLFZyf322lEtIbhNDXi7kbi/7d1dbr5YNA3g6bnybNB0v8QGr2J6dedKKJyk212
hURifHUVRxWs89TKgej9GNIVtm9wWuRrFVqL8fSMIIaIZngdYx8jKHGWM+kIHpHB
eF/yAPtE9ERKGx1KjNvbvMG2wCUcASTY0e1h10wY2t1BtCs08huM9ss+AmGyX1pF
3ACVN3Co0ZNeuBWeG5w7M+fcf/Nt
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org