Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C6401448C811EF8BC4F1B6762E951A.roa
File: 42C6401448C811EF8BC4F1B6762E951A.roa (raw, json)
Hash identifier: Dduqm4xc3kvM7tHoET5K/lGgt+kjfxd+ZzLsivgF9io=
Subject key identifier: C7:05:4A:AB:9C:82:FA:9E:E3:62:DE:F3:49:31:A6:C4:68:BC:EE:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C6401448C811EF8BC4F1B6762E951A.roa
Signing time: Tue 23 Jul 2024 07:50:42 +0000
ROA not before: Fri 26 Jul 2024 07:50:39 +0000
ROA not after: Fri 23 Aug 2024 07:50:39 +0000
asID: 202656
IP address blocks: 156.246.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40566 (0x9e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:50:39 2024 GMT
Not After : Aug 23 07:50:39 2024 GMT
Subject: CN=669f60d2-e558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:a4:72:ed:bc:c9:e3:63:15:95:09:05:d3:
10:f0:e6:40:75:16:8d:c1:7d:33:17:62:c8:e1:82:
d9:18:e0:36:2c:8e:1f:c9:27:16:24:1c:87:51:f1:
3d:f4:ec:17:d8:9d:a3:f4:2e:e7:4b:c4:11:db:fc:
7d:8e:5d:c8:17:01:ed:29:ab:35:89:ca:ae:3f:13:
6e:ba:fb:fb:1b:79:21:55:76:3d:f3:d7:67:12:10:
2c:90:7e:c9:0b:9c:d4:da:26:bc:93:48:53:9d:4f:
a6:35:1e:cf:06:47:4e:50:24:1d:bf:68:95:f1:2e:
b1:1c:32:30:cc:ec:58:e1:8b:81:a4:fd:08:8e:8f:
f9:fc:ee:02:76:77:15:cd:12:15:ec:e9:98:b9:ac:
4d:2a:76:c3:88:4e:df:d2:20:c2:93:79:81:92:01:
17:e6:57:9a:ef:30:46:59:59:d5:96:05:c5:bb:9e:
14:b8:34:cf:4a:ec:31:14:4c:9e:54:fb:bf:4f:92:
44:70:8b:97:7d:5d:a8:7e:56:3c:5a:ec:99:f1:ae:
cf:90:3b:cb:55:83:6c:4a:db:cf:11:b6:3f:eb:b5:
df:00:9e:36:08:a2:4e:05:66:5a:11:8e:2c:03:3e:
8d:d5:d1:b6:ba:ff:d3:02:5d:18:85:90:da:c6:cc:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:05:4A:AB:9C:82:FA:9E:E3:62:DE:F3:49:31:A6:C4:68:BC:EE:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42C6401448C811EF8BC4F1B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b3:51:17:8d:3d:91:aa:fe:fe:ed:27:e9:03:7e:c8:cb:bd:
28:5e:ee:26:78:87:c4:45:02:38:8b:ff:3b:4e:f8:3a:3e:33:
c8:16:f4:68:12:4b:78:9e:fc:49:5c:2b:5b:97:78:6c:d4:52:
07:dc:50:68:3f:da:4d:ee:4e:48:0b:e8:6d:31:ca:37:aa:92:
b4:81:89:29:57:85:5c:a1:34:21:23:13:70:ae:c0:2b:fa:c0:
22:00:6c:7a:ea:c4:f8:9c:26:fb:3b:60:95:bb:7a:c6:33:21:
cc:02:09:09:7f:0f:99:95:c3:b7:3b:36:48:57:21:31:99:ae:
f7:98:54:38:45:b8:59:c9:5b:bd:d6:6a:60:bb:34:40:5f:41:
67:02:97:64:92:c4:d5:a9:8d:3f:a8:b3:86:48:ae:70:48:08:
ee:9f:5f:8d:92:af:e1:35:13:af:c6:0a:27:d0:de:17:21:2c:
04:e2:6f:57:d0:8e:16:84:06:cc:50:a0:f2:51:c3:52:04:e3:
38:9d:5f:28:99:56:87:b2:17:d5:53:7c:39:aa:8c:0c:c9:b8:
2d:d9:1a:a3:e1:70:13:2f:16:a8:69:88:b6:38:72:b4:26:20:
1e:19:37:f9:c2:6a:f2:4c:15:f6:8c:f3:ce:16:d7:c3:ee:e2:
28:a7:4e:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ52MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDc1MDM5WhcNMjQwODIzMDc1MDM5WjAYMRYw
FAYDVQQDEw02NjlmNjBkMi1lNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA386kcu28yeNjFZUJBdMQ8OZAdRaNwX0zF2LI4YLZGOA2LI4fyScWJByH
UfE99OwX2J2j9C7nS8QR2/x9jl3IFwHtKas1icquPxNuuvv7G3khVXY989dnEhAs
kH7JC5zU2ia8k0hTnU+mNR7PBkdOUCQdv2iV8S6xHDIwzOxY4YuBpP0Ijo/5/O4C
dncVzRIV7OmYuaxNKnbDiE7f0iDCk3mBkgEX5lea7zBGWVnVlgXFu54UuDTPSuwx
FEyeVPu/T5JEcIuXfV2oflY8WuyZ8a7PkDvLVYNsStvPEbY/67XfAJ42CKJOBWZa
EY4sAz6N1dG2uv/TAl0YhZDaxsy5qQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMcF
Squcgvqe42Le80kxpsRovO6dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MkM2NDAxNDQ4QzgxMUVGOEJDNEYxQjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPa4MA0GCSqGSIb3DQEBCwUA
A4IBAQB7s1EXjT2Rqv7+7SfpA37Iy70oXu4meIfERQI4i/87Tvg6PjPIFvRoEkt4
nvxJXCtbl3hs1FIH3FBoP9pN7k5IC+htMco3qpK0gYkpV4VcoTQhIxNwrsAr+sAi
AGx66sT4nCb7O2CVu3rGMyHMAgkJfw+ZlcO3OzZIVyExma73mFQ4RbhZyVu91mpg
uzRAX0FnApdkksTVqY0/qLOGSK5wSAjun1+Nkq/hNROvxgon0N4XISwE4m9X0I4W
hAbMUKDyUcNSBOM4nV8omVaHshfVU3w5qowMybgt2Rqj4XATLxaoaYi2OHK0JiAe
GTf5wmryTBX2jPPOFtfD7uIop05A
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org