Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56C09AB61B11ECAFBE9AB15A40D577.roa
File: 2F56C09AB61B11ECAFBE9AB15A40D577.roa (raw, json)
Hash identifier: PbyhLjAHuP2ysgjhLA2Etv7cPon5AxaLoWmx+gSaZ6M=
Subject key identifier: 4B:91:36:C7:54:37:18:0F:F5:27:78:4B:C8:52:58:D1:8B:6E:68:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56C09AB61B11ECAFBE9AB15A40D577.roa
Signing time: Thu 07 Apr 2022 02:34:02 +0000
ROA not before: Thu 07 Apr 2022 02:33:57 +0000
ROA not after: Wed 30 Nov 2022 02:33:57 +0000
asID: 131471
IP address blocks: 45.206.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4837 (0x12e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 02:33:57 2022 GMT
Not After : Nov 30 02:33:57 2022 GMT
Subject: CN=624e4d9a-61f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:df:85:ac:75:9e:44:d3:9f:e2:29:14:b9:
f6:d8:d3:03:fa:00:17:a2:a0:9a:a0:be:50:c0:99:
80:f2:10:0f:75:c5:c8:10:39:bd:3a:d5:e2:37:ee:
c2:2b:b0:c6:79:e6:49:54:74:fe:58:67:32:d2:4b:
74:42:d1:fc:aa:82:bb:fb:01:f3:db:c0:57:ba:c4:
7e:5c:da:c4:4d:70:49:d5:b4:06:58:e1:d4:d6:22:
aa:72:75:6e:f0:cf:6d:18:30:c6:21:a4:52:26:f5:
8d:ec:28:59:ab:d6:60:7b:a4:dd:75:1a:15:47:04:
f0:43:31:59:40:cd:df:77:59:24:97:cd:b3:f0:3e:
aa:47:7f:71:2d:e8:cb:59:ab:14:68:5e:fc:d5:26:
a0:f9:88:a6:f7:3a:d7:59:37:9b:dc:44:7e:2a:a3:
89:e1:70:83:09:78:c3:0a:b3:f1:81:cf:ff:f7:05:
6d:15:53:fd:6d:cd:69:45:e2:90:3a:2f:74:f3:a2:
26:02:fc:ce:12:7e:27:58:b2:39:bc:92:ca:ad:52:
49:12:e8:bb:e2:89:44:1b:51:78:44:d4:32:76:43:
0a:56:1c:5d:f6:8b:fa:16:b2:cb:21:27:ed:f7:59:
6d:b7:6d:06:ca:89:db:c2:66:29:27:7e:0e:3b:2c:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:36:C7:54:37:18:0F:F5:27:78:4B:C8:52:58:D1:8B:6E:68:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56C09AB61B11ECAFBE9AB15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
63:97:04:95:08:3d:cd:79:f5:be:48:72:64:38:47:bc:16:be:
45:5a:25:70:27:80:88:32:b4:ff:54:ca:f2:49:10:9e:98:fe:
6e:fb:bc:b9:2b:8f:67:02:65:4f:44:30:30:84:ea:4d:77:9d:
b7:7a:2c:00:17:8b:b1:12:f7:30:fa:43:87:49:26:b4:1c:41:
e3:78:6a:d9:0d:ce:68:a6:79:9e:e8:d5:f0:be:c2:73:96:eb:
48:88:e0:38:ce:34:51:13:80:c9:dd:e2:9d:c2:07:7a:3c:92:
79:ee:02:ea:f6:40:e0:2b:6c:01:7f:99:60:09:35:56:9f:bb:
b6:46:49:ef:ab:f9:79:7c:5e:c7:89:2d:96:79:45:a0:c2:a6:
a2:fa:79:fa:d7:28:3d:1b:66:e7:5d:78:2b:96:a6:aa:56:4c:
12:e0:07:64:b0:36:2b:49:84:1e:5b:52:1a:90:1c:5e:7c:8e:
0a:49:48:a4:17:ef:4f:04:0b:83:7b:f6:a0:80:26:5f:74:9d:
8a:f1:56:fc:5e:44:ca:fc:2b:cf:d1:2c:0b:3e:a3:6c:d6:cf:
2a:6a:92:5e:c6:36:98:eb:f9:2a:1c:b2:06:f5:ce:be:da:48:
a8:24:34:45:5c:bc:7a:a7:cb:ad:db:27:5d:77:8c:59:19:26:
49:5b:52:21
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEuUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MDcwMjMzNTdaFw0yMjExMzAwMjMzNTdaMBgxFjAU
BgNVBAMMDTYyNGU0ZDlhLTYxZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyh9+FrHWeRNOf4ikUufbY0wP6ABeioJqgvlDAmYDyEA91xcgQOb061eI3
7sIrsMZ55klUdP5YZzLSS3RC0fyqgrv7AfPbwFe6xH5c2sRNcEnVtAZY4dTWIqpy
dW7wz20YMMYhpFIm9Y3sKFmr1mB7pN11GhVHBPBDMVlAzd93WSSXzbPwPqpHf3Et
6MtZqxRoXvzVJqD5iKb3OtdZN5vcRH4qo4nhcIMJeMMKs/GBz//3BW0VU/1tzWlF
4pA6L3TzoiYC/M4SfidYsjm8ksqtUkkS6LviiUQbUXhE1DJ2QwpWHF32i/oWsssh
J+33WW23bQbKidvCZiknfg47LGsLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUS5E2
x1Q3GA/1J3hLyFJY0YtuaCAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzJGNTZDMDlBQjYxQjExRUNBRkJFOUFCMTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtziAwDQYJKoZIhvcNAQELBQAD
ggEBAGOXBJUIPc159b5IcmQ4R7wWvkVaJXAngIgytP9UyvJJEJ6Y/m77vLkrj2cC
ZU9EMDCE6k13nbd6LAAXi7ES9zD6Q4dJJrQcQeN4atkNzmimeZ7o1fC+wnOW60iI
4DjONFETgMnd4p3CB3o8knnuAur2QOArbAF/mWAJNVafu7ZGSe+r+Xl8XseJLZZ5
RaDCpqL6efrXKD0bZuddeCuWpqpWTBLgB2SwNitJhB5bUhqQHF58jgpJSKQX708E
C4N79qCAJl90nYrxVvxeRMr8K8/RLAs+o2zWzypqkl7GNpjr+Socsgb1zr7aSKgk
NEVcvHqny63bJ113jFkZJklbUiE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org