Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
File: 3B9B3CE2EAF511EB80321B4DD8A014CE.roa (raw, json)
Hash identifier: 21cqsf1kkadnxHAYK8Fz76w0x+XsANVZBvNxtrhVkEw=
Subject key identifier: 0B:95:98:65:A5:E5:6E:0B:61:90:EB:15:88:04:9D:F7:8F:0F:6B:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
Signing time: Thu 22 Jul 2021 14:01:07 +0000
ROA not before: Thu 22 Jul 2021 14:01:02 +0000
ROA not after: Thu 22 Sep 2022 14:01:02 +0000
asID: 1239
IP address blocks: 156.236.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 14:01:02 2021 GMT
Not After : Sep 22 14:01:02 2022 GMT
Subject: CN=60f97a23-25f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:c6:00:14:79:33:b5:b5:ba:11:3a:f6:44:
db:c9:69:01:05:39:66:66:e1:ef:e8:42:df:ae:96:
81:75:10:08:b3:3d:b2:f5:be:af:61:bf:c1:d1:6e:
5d:1e:0a:94:61:e7:aa:3b:a1:cd:7e:30:49:c4:ed:
f6:1e:c0:b8:c5:4b:d6:8a:67:65:92:ea:e9:57:ad:
b4:41:de:18:1a:b6:0e:fe:8d:a7:e2:44:9a:63:2b:
c6:52:e9:c5:1e:57:14:68:bc:9c:e9:a2:65:72:39:
6b:51:3f:1c:bf:83:bc:dd:b8:fc:62:22:0c:5c:c1:
9c:74:86:f3:1f:f7:19:80:25:31:2e:0d:5a:38:36:
e9:1d:38:3f:54:c0:1d:e3:d6:9d:c4:dd:c6:24:d3:
ae:90:c1:ee:db:e1:a7:c6:85:e6:d0:4e:f2:52:4d:
81:64:18:ca:49:f3:4c:06:38:30:eb:67:13:a4:7a:
a5:3f:68:f8:fd:23:aa:0f:86:d9:5b:9c:65:17:51:
12:f6:96:05:21:99:dc:6f:b8:25:dd:17:f2:92:7c:
7e:b8:01:5b:57:be:3d:21:8e:7b:48:63:89:b6:2e:
ba:c0:a1:3b:59:6e:03:00:a8:b4:fa:1c:3a:ad:37:
e6:62:6e:3c:19:3c:00:25:bb:61:a6:96:9e:71:42:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:98:65:A5:E5:6E:0B:61:90:EB:15:88:04:9D:F7:8F:0F:6B:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B9B3CE2EAF511EB80321B4DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.238.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1e:1d:21:0c:39:eb:25:2a:91:31:88:ab:64:27:e3:ed:7e:
a2:ea:9b:08:7d:b3:e2:75:25:3b:16:d2:78:20:e3:57:2a:ad:
b2:45:14:f1:bc:ec:75:14:5b:92:ed:81:04:da:3c:11:33:bd:
5e:81:d3:19:cb:3f:a7:43:c4:50:ee:1b:56:a6:f9:9c:9d:17:
76:4a:da:d1:71:55:6b:ac:90:07:f6:c8:fd:e3:43:85:f3:84:
da:a4:ae:70:ed:7e:e8:fb:4e:7b:1c:bc:31:8a:f5:42:88:8b:
db:1a:c6:8e:2a:cd:3a:2d:d0:b9:88:9a:2f:10:17:1d:2e:ac:
51:72:d6:76:29:bd:9f:d1:13:43:96:e0:2d:59:2c:48:eb:36:
1b:23:b3:b6:a7:e2:7b:27:81:91:92:73:ae:eb:e8:ef:9f:57:
22:c8:12:61:c3:e6:b5:db:eb:4a:c0:9e:68:ba:b1:2e:e6:a3:
3e:25:1e:b3:a4:bc:1c:f4:cf:8e:a2:e5:85:bb:32:12:bd:e8:
66:51:39:a3:28:99:c4:12:8b:9a:cd:09:e1:98:4a:1d:92:10:
6e:69:13:7b:b8:53:c2:25:1e:cb:d2:7b:7e:8a:6b:c0:f5:b7:
21:62:47:87:35:42:c1:68:25:03:d9:a5:7d:b3:3f:fd:6b:c6:
89:7b:71:5e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB8owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MjIxNDAxMDJaFw0yMjA5MjIxNDAxMDJaMBgxFjAU
BgNVBAMMDTYwZjk3YTIzLTI1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4U8YAFHkztbW6ETr2RNvJaQEFOWZm4e/oQt+uloF1EAizPbL1vq9hv8HR
bl0eCpRh56o7oc1+MEnE7fYewLjFS9aKZ2WS6ulXrbRB3hgatg7+jafiRJpjK8ZS
6cUeVxRovJzpomVyOWtRPxy/g7zduPxiIgxcwZx0hvMf9xmAJTEuDVo4NukdOD9U
wB3j1p3E3cYk066Qwe7b4afGhebQTvJSTYFkGMpJ80wGODDrZxOkeqU/aPj9I6oP
htlbnGUXURL2lgUhmdxvuCXdF/KSfH64AVtXvj0hjntIY4m2LrrAoTtZbgMAqLT6
HDqtN+ZibjwZPAAlu2Gmlp5xQhEzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUC5WY
ZaXlbgthkOsViASd948Pa7AwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzNCOUIzQ0UyRUFGNTExRUI4MDMyMUI0REQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7O4wDQYJKoZIhvcNAQELBQAD
ggEBAIgeHSEMOeslKpExiKtkJ+PtfqLqmwh9s+J1JTsW0ngg41cqrbJFFPG87HUU
W5LtgQTaPBEzvV6B0xnLP6dDxFDuG1am+ZydF3ZK2tFxVWuskAf2yP3jQ4XzhNqk
rnDtfuj7TnscvDGK9UKIi9saxo4qzTot0LmImi8QFx0urFFy1nYpvZ/RE0OW4C1Z
LEjrNhsjs7an4nsngZGSc67r6O+fVyLIEmHD5rXb60rAnmi6sS7moz4lHrOkvBz0
z46i5YW7MhK96GZROaMomcQSi5rNCeGYSh2SEG5pE3u4U8IlHsvSe36Ka8D1tyFi
R4c1QsFoJQPZpX2zP/1rxol7cV4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org