Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B10A68432F511ECBEC5163ED8A014CE.roa
File: 3B10A68432F511ECBEC5163ED8A014CE.roa (raw, json)
Hash identifier: NdB1483Au2WRHkcqwBLHdMo/LYlIMrx2pNei+OYFE08=
Subject key identifier: 35:83:F3:C9:BA:1B:C8:0F:BB:6F:50:50:5E:1C:FF:0C:0A:ED:F2:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B10A68432F511ECBEC5163ED8A014CE.roa
Signing time: Fri 22 Oct 2021 05:02:19 +0000
ROA not before: Fri 22 Oct 2021 05:02:14 +0000
ROA not after: Mon 22 Aug 2022 05:02:14 +0000
asID: 3257
IP address blocks: 156.239.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 05:02:14 2021 GMT
Not After : Aug 22 05:02:14 2022 GMT
Subject: CN=617245da-c513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:4c:0e:45:48:55:c4:e8:f5:12:2c:7b:7a:
3f:f6:d4:dd:4c:af:fc:3b:95:d0:3c:25:6d:f6:1a:
0f:5e:0c:51:44:07:d0:be:fd:f4:20:79:bb:9c:2a:
4e:02:9c:dc:a0:8d:c2:ad:05:79:ac:39:02:51:23:
b7:55:fd:b2:07:96:74:23:b0:07:a2:55:8f:ab:f5:
20:f3:e2:f5:25:a1:a2:ca:7b:2e:e6:e6:5c:49:72:
1a:e1:d4:e4:0a:ea:39:a9:10:9a:36:91:44:84:e6:
0e:09:46:eb:cd:94:23:77:53:25:95:88:7e:39:b1:
aa:47:f7:67:f3:1b:f8:e0:68:ff:b4:cc:4b:d1:3b:
31:dc:0c:fb:d3:52:12:c6:c4:a9:f6:cc:4f:3f:a8:
a7:1c:e1:77:c9:75:3c:7d:66:a6:b8:d7:7a:8e:08:
71:9c:a7:f9:0a:25:0f:21:46:aa:04:43:fd:d5:d0:
3e:cc:95:4d:fd:1a:20:f9:49:5c:de:81:01:6a:6f:
df:f3:48:91:54:31:bc:e2:1a:5d:28:37:b1:44:5d:
3f:fd:d2:ff:85:6f:98:45:99:4d:96:e7:79:8d:bd:
a3:7c:3e:42:45:ea:f8:f0:d3:c2:f1:5d:ca:a2:ea:
9f:91:1b:72:31:24:fa:9b:ad:5e:4e:2a:aa:36:c5:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:F3:C9:BA:1B:C8:0F:BB:6F:50:50:5E:1C:FF:0C:0A:ED:F2:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B10A68432F511ECBEC5163ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a6:6b:06:f8:80:29:f4:3e:9b:4f:b5:6c:b0:a9:98:80:e2:
a6:8c:4f:55:5b:94:62:60:df:8c:08:19:31:de:f2:61:4b:1a:
e8:02:6a:4e:09:15:82:2d:9f:b2:59:45:07:3c:4d:df:8f:40:
be:87:39:1c:2c:14:6b:a0:31:57:76:1d:38:6d:ad:09:21:26:
4b:54:f3:67:f1:47:84:99:5e:fd:dd:d3:05:b6:40:06:9b:93:
42:6f:2e:7c:32:3e:78:4c:c9:3a:6b:79:42:99:4b:f3:5c:36:
ec:31:43:4d:cb:9c:ba:a9:7b:67:e9:52:43:7a:be:33:a4:54:
69:c0:6b:9e:b9:b0:57:b7:84:61:bf:96:70:d3:84:31:45:51:
96:74:9f:29:f4:79:f1:ce:ee:bb:9d:80:60:24:5c:aa:eb:ad:
84:cd:56:e8:dd:78:e7:77:cc:22:dd:12:a9:9c:4a:78:2c:c8:
61:90:84:c5:12:a9:88:1b:89:36:59:bc:96:6d:31:a5:0a:56:
0a:67:4b:25:cf:e3:37:a2:d4:93:72:ee:fd:93:bf:95:e9:29:
ae:5c:77:ee:17:8c:70:1b:b4:f1:55:f9:ed:58:cf:9e:4e:7e:
80:33:f9:b2:1e:ec:67:08:17:ee:c0:fc:67:00:ce:7f:91:73:
aa:f5:76:5a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjIwNTAyMTRaFw0yMjA4MjIwNTAyMTRaMBgxFjAU
BgNVBAMMDTYxNzI0NWRhLWM1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEKUwORUhVxOj1Eix7ej/21N1Mr/w7ldA8JW32Gg9eDFFEB9C+/fQgebuc
Kk4CnNygjcKtBXmsOQJRI7dV/bIHlnQjsAeiVY+r9SDz4vUloaLKey7m5lxJchrh
1OQK6jmpEJo2kUSE5g4JRuvNlCN3UyWViH45sapH92fzG/jgaP+0zEvROzHcDPvT
UhLGxKn2zE8/qKcc4XfJdTx9Zqa413qOCHGcp/kKJQ8hRqoEQ/3V0D7MlU39GiD5
SVzegQFqb9/zSJFUMbziGl0oN7FEXT/90v+Fb5hFmU2W53mNvaN8PkJF6vjw08Lx
Xcqi6p+RG3IxJPqbrV5OKqo2xVYxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNYPz
ybobyA+7b1BQXhz/DArt8vwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzNCMTBBNjg0MzJGNTExRUNCRUM1MTYzRUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc76IwDQYJKoZIhvcNAQELBQAD
ggEBAEamawb4gCn0PptPtWywqZiA4qaMT1VblGJg34wIGTHe8mFLGugCak4JFYIt
n7JZRQc8Td+PQL6HORwsFGugMVd2HThtrQkhJktU82fxR4SZXv3d0wW2QAabk0Jv
LnwyPnhMyTpreUKZS/NcNuwxQ03LnLqpe2fpUkN6vjOkVGnAa565sFe3hGG/lnDT
hDFFUZZ0nyn0efHO7rudgGAkXKrrrYTNVujdeOd3zCLdEqmcSngsyGGQhMUSqYgb
iTZZvJZtMaUKVgpnSyXP4zei1JNy7v2Tv5XpKa5cd+4XjHAbtPFV+e1Yz55OfoAz
+bIe7GcIF+7A/GcAzn+Rc6r1dlo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org