Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41019D04A44311EC93B8ABCB5A40D577.roa
File: 41019D04A44311EC93B8ABCB5A40D577.roa (raw, json)
Hash identifier: k/O9FpFLYNQJ2WelQCTJ8fZZnsaMOS9N+iVo5G89Kp4=
Subject key identifier: A7:BF:8A:7B:9A:88:24:9E:68:8A:33:53:79:C7:48:51:83:8B:0E:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 128D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41019D04A44311EC93B8ABCB5A40D577.roa
Signing time: Tue 15 Mar 2022 09:35:30 +0000
ROA not before: Tue 15 Mar 2022 09:35:26 +0000
ROA not after: Sat 31 Dec 2022 09:35:26 +0000
asID: 133201
IP address blocks: 156.255.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4749 (0x128d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:35:26 2022 GMT
Not After : Dec 31 09:35:26 2022 GMT
Subject: CN=62305de2-d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:fb:1d:c9:04:ce:35:61:5d:74:08:e9:e7:
03:a0:67:22:66:49:14:cb:96:28:23:7d:b0:f2:a9:
1e:5b:a7:ef:3f:e5:ae:b0:d3:3b:ad:d8:78:1f:54:
81:e9:2d:22:48:fc:a6:1c:43:f6:81:27:69:c0:99:
98:e7:d1:88:2f:7d:7e:b0:37:df:18:d4:a3:c7:c6:
a9:24:d1:5d:8d:84:de:0c:31:6c:f2:11:33:31:80:
69:da:42:c8:86:d2:a4:c4:fd:01:ab:fd:b9:00:2e:
44:30:ee:9a:5d:b6:b9:24:bf:a5:88:48:5c:ea:1e:
57:dd:76:17:a6:44:30:ed:db:a2:b8:68:f2:73:08:
50:88:12:1d:45:03:e6:b3:7b:37:9b:b9:d6:7d:8f:
68:f4:59:ca:41:bc:2c:6e:ce:a7:db:ec:76:c0:3c:
b6:a6:07:99:7d:c0:92:95:7b:00:a1:17:f0:4f:9f:
5b:d7:61:67:0c:2c:f1:86:0a:f6:fa:b7:7a:3d:e1:
33:d0:01:d5:08:aa:13:51:ee:f4:bb:3d:3d:da:84:
cb:0d:7d:28:9b:ee:2a:b3:0f:0c:9c:5a:4b:31:eb:
3b:0b:f4:73:e3:c2:5e:ce:84:cc:a3:84:6b:6e:3b:
a5:ac:e5:a1:f5:f3:62:7b:d8:14:fa:87:85:72:78:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:8A:7B:9A:88:24:9E:68:8A:33:53:79:C7:48:51:83:8B:0E:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41019D04A44311EC93B8ABCB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:78:66:eb:49:08:64:1d:ec:b5:d5:20:96:a4:3b:cf:cd:f1:
7b:d4:5e:f6:d8:c3:5f:5f:55:c2:9c:cf:93:b3:ac:8e:0d:ec:
c1:14:e7:c0:c7:55:56:d1:ba:cd:8c:85:e5:23:c7:3e:6e:b9:
03:04:af:eb:4d:c0:2c:47:50:f9:4a:d2:c7:ee:be:20:35:74:
22:49:10:b3:78:58:34:bb:14:ec:9f:fe:d8:2e:1f:9d:6a:b7:
09:b9:bf:3d:b5:a4:7f:73:5f:3d:f1:a7:c4:1d:ec:55:67:18:
c5:85:7e:b4:38:0e:37:0d:f3:b3:a8:f1:c1:4c:16:9e:53:5a:
5f:09:66:f3:f7:68:ab:d4:39:fc:fe:b9:40:17:af:97:32:95:
4a:4e:62:e2:99:37:65:00:d9:3d:f5:c7:10:99:4e:1b:96:2b:
86:32:22:99:e3:3f:5d:dc:59:e2:27:69:01:ac:24:33:2a:30:
65:a0:0a:a9:54:fa:52:9f:66:87:5d:f3:e1:37:66:e7:49:1a:
8f:6d:58:25:67:0a:b5:7d:48:8f:51:84:54:44:4b:b1:c0:93:
20:df:a5:6d:e4:6c:8b:f1:52:ad:6e:fa:a6:ed:ee:18:e2:4c:
a4:3c:5a:f5:43:89:23:df:8b:25:46:3a:d9:22:c7:79:e6:ed:
fa:a3:7c:7f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMTUwOTM1MjZaFw0yMjEyMzEwOTM1MjZaMBgxFjAU
BgNVBAMMDTYyMzA1ZGUyLWQ0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLl/sdyQTONWFddAjp5wOgZyJmSRTLligjfbDyqR5bp+8/5a6w0zut2Hgf
VIHpLSJI/KYcQ/aBJ2nAmZjn0YgvfX6wN98Y1KPHxqkk0V2NhN4MMWzyETMxgGna
QsiG0qTE/QGr/bkALkQw7ppdtrkkv6WISFzqHlfddhemRDDt26K4aPJzCFCIEh1F
A+azezebudZ9j2j0WcpBvCxuzqfb7HbAPLamB5l9wJKVewChF/BPn1vXYWcMLPGG
Cvb6t3o94TPQAdUIqhNR7vS7PT3ahMsNfSib7iqzDwycWksx6zsL9HPjwl7OhMyj
hGtuO6Ws5aH182J72BT6h4VyeIorAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUp7+K
e5qIJJ5oijNTecdIUYOLDp4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQxMDE5RDA0QTQ0MzExRUM5M0I4QUJDQjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/w4wDQYJKoZIhvcNAQELBQAD
ggEBAC54ZutJCGQd7LXVIJakO8/N8XvUXvbYw19fVcKcz5OzrI4N7MEU58DHVVbR
us2MheUjxz5uuQMEr+tNwCxHUPlK0sfuviA1dCJJELN4WDS7FOyf/tguH51qtwm5
vz21pH9zXz3xp8Qd7FVnGMWFfrQ4DjcN87Oo8cFMFp5TWl8JZvP3aKvUOfz+uUAX
r5cylUpOYuKZN2UA2T31xxCZThuWK4YyIpnjP13cWeInaQGsJDMqMGWgCqlU+lKf
Zodd8+E3ZudJGo9tWCVnCrV9SI9RhFRES7HAkyDfpW3kbIvxUq1u+qbt7hjiTKQ8
WvVDiSPfiyVGOtkix3nm7fqjfH8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org