Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FCA4FE8418611EFA8FE7A90762E951A.roa
File: 3FCA4FE8418611EFA8FE7A90762E951A.roa (raw, json)
Hash identifier: onzC4Qb6UPB+dYMRRhr1wER9/o/eJm5NtZHMsVs4JuE=
Subject key identifier: 1A:9E:C1:0D:00:69:1E:81:A1:2A:5E:AA:51:3C:F6:ED:37:47:BF:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FCA4FE8418611EFA8FE7A90762E951A.roa
Signing time: Sun 14 Jul 2024 02:10:32 +0000
ROA not before: Sun 14 Jul 2024 02:10:29 +0000
ROA not after: Tue 13 Aug 2024 02:10:29 +0000
asID: 138915
IP address blocks: 156.244.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39993 (0x9c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:10:29 2024 GMT
Not After : Aug 13 02:10:29 2024 GMT
Subject: CN=66933398-5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:e3:9c:45:ff:43:40:81:de:3e:3f:c3:9e:
b9:07:cd:8a:8e:b7:c3:85:f4:24:71:e2:4b:91:fb:
ac:4a:bf:03:63:62:b1:e4:b2:48:59:a5:13:32:47:
27:37:52:89:90:34:5d:79:29:35:02:a4:7f:4d:31:
ec:65:7e:80:ae:de:08:ea:d5:6d:66:21:8b:7e:ab:
b0:67:04:c4:64:c6:2a:e6:0f:37:15:82:b5:c4:cf:
74:cd:e2:ba:1d:d2:e7:f6:37:6a:d5:aa:bf:ad:51:
e6:a7:03:63:b2:3c:18:51:41:55:0b:56:c9:a7:81:
1f:43:47:67:8a:43:bc:98:a1:fa:d2:3e:87:8c:e1:
18:5f:47:20:98:01:01:a5:b5:a2:11:44:4a:49:91:
09:dc:03:16:26:55:b7:fd:0e:fd:01:df:60:6f:ed:
1b:e5:84:2e:86:a7:f2:9a:54:df:34:0b:bc:e4:0f:
24:ae:86:16:9a:ff:c3:7f:da:c8:ef:ee:0d:16:02:
55:2a:bf:4a:2c:08:3b:a5:4c:6c:4c:69:8e:1c:bf:
5f:ba:ec:35:63:c1:9e:1b:a7:0e:2c:43:9f:20:11:
c4:b1:12:5d:38:fd:2a:b4:b0:f2:02:0b:66:19:19:
99:e3:56:82:89:67:84:a1:2d:f1:4b:f7:53:52:b8:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:C1:0D:00:69:1E:81:A1:2A:5E:AA:51:3C:F6:ED:37:47:BF:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FCA4FE8418611EFA8FE7A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.21.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bd:58:db:4c:17:93:6a:61:ef:1b:9a:b4:96:76:53:62:b1:
a9:6c:07:40:4c:e2:ae:ba:ea:8d:0d:48:d5:14:84:b1:91:a7:
2c:e1:ce:4d:53:0d:9a:f5:2c:1b:c6:46:f4:2e:4e:8f:8e:d4:
9a:6b:bc:04:bf:dc:e2:be:39:d7:0f:fb:8c:e3:47:c8:9a:9e:
55:ba:57:64:88:a6:70:0f:29:b7:b1:89:73:1e:0e:73:33:19:
b3:72:20:00:aa:5f:11:36:d3:ef:d7:6b:a7:cf:33:1c:cd:2a:
16:73:9a:4d:d9:ca:e7:04:70:05:40:05:a7:be:fa:df:8e:61:
ba:11:b3:6f:ab:02:9f:18:b8:e4:94:12:3b:64:1d:13:9a:17:
7c:92:1a:a5:ab:70:91:23:4b:44:88:4f:51:7d:2d:d2:59:19:
d0:6e:0a:0d:26:c7:da:06:3e:00:b3:f5:63:5d:f5:84:ea:60:
48:30:61:45:96:ce:7c:0e:8e:f2:11:0d:d3:72:9b:b2:53:15:
ea:c2:95:1a:70:9a:1f:9f:3c:43:6b:77:47:e0:86:6c:56:a0:
ed:8a:39:ff:9b:d8:52:75:0b:88:a1:41:6d:05:75:ae:83:93:
63:69:71:d9:4b:2e:e0:d4:58:b8:5b:74:7e:82:c1:e7:66:dd:
a0:35:98:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJw5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE0MDIxMDI5WhcNMjQwODEzMDIxMDI5WjAYMRYw
FAYDVQQDEw02NjkzMzM5OC01NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAor7jnEX/Q0CB3j4/w565B82KjrfDhfQkceJLkfusSr8DY2Kx5LJIWaUT
MkcnN1KJkDRdeSk1AqR/TTHsZX6Art4I6tVtZiGLfquwZwTEZMYq5g83FYK1xM90
zeK6HdLn9jdq1aq/rVHmpwNjsjwYUUFVC1bJp4EfQ0dnikO8mKH60j6HjOEYX0cg
mAEBpbWiEURKSZEJ3AMWJlW3/Q79Ad9gb+0b5YQuhqfymlTfNAu85A8kroYWmv/D
f9rI7+4NFgJVKr9KLAg7pUxsTGmOHL9fuuw1Y8GeG6cOLEOfIBHEsRJdOP0qtLDy
AgtmGRmZ41aCiWeEoS3xS/dTUrjycwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBqe
wQ0AaR6BoSpeqlE89u03R793MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRkNBNEZFODQxODYxMUVGQThGRTdBOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQVMA0GCSqGSIb3DQEBCwUA
A4IBAQByvVjbTBeTamHvG5q0lnZTYrGpbAdATOKuuuqNDUjVFISxkacs4c5NUw2a
9Swbxkb0Lk6PjtSaa7wEv9zivjnXD/uM40fImp5VuldkiKZwDym3sYlzHg5zMxmz
ciAAql8RNtPv12unzzMczSoWc5pN2crnBHAFQAWnvvrfjmG6EbNvqwKfGLjklBI7
ZB0Tmhd8khqlq3CRI0tEiE9RfS3SWRnQbgoNJsfaBj4As/VjXfWE6mBIMGFFls58
Do7yEQ3TcpuyUxXqwpUacJofnzxDa3dH4IZsVqDtijn/m9hSdQuIoUFtBXWug5Nj
aXHZSy7g1Fi4W3R+gsHnZt2gNZip
-----END CERTIFICATE-----
Generated at Tue Aug 13 07:40:39 2024 by rpki-client on console-fra.rpki-client.org