Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4565F8523B9711EFBE231282762E951A.roa
File: 4565F8523B9711EFBE231282762E951A.roa (raw, json)
Hash identifier: TfCFemfhgKlkWgOZmd5x19jAY0opWrnHh8RTtFdzsic=
Subject key identifier: CD:C8:15:FC:28:E0:D3:D6:A5:A7:8D:B3:04:AE:29:C9:75:38:BF:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 993E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4565F8523B9711EFBE231282762E951A.roa
Signing time: Sat 06 Jul 2024 12:57:16 +0000
ROA not before: Sat 06 Jul 2024 12:57:13 +0000
ROA not after: Wed 07 Aug 2024 12:57:13 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39230 (0x993e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:57:13 2024 GMT
Not After : Aug 7 12:57:13 2024 GMT
Subject: CN=66893f2c-6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:f6:fa:96:db:3e:e6:33:83:9e:c7:a9:cf:
6b:28:47:72:46:98:cd:f6:b6:6f:9e:9e:84:17:bb:
76:d2:87:87:91:80:0f:c2:73:af:e0:a0:2f:b1:4a:
11:a8:f3:2c:15:52:57:23:46:35:8b:3d:73:ea:8e:
07:8b:96:8d:03:b6:32:bb:80:2e:94:04:0e:b0:da:
12:aa:d1:19:af:a0:19:d8:0b:1f:94:a5:86:52:b4:
bb:67:06:a2:cc:63:f6:81:f7:07:93:6f:dd:96:7c:
40:02:06:87:11:c2:33:21:98:34:5d:e7:73:c7:ef:
63:8e:99:b4:47:90:3d:e0:bf:7b:df:3c:74:6e:a9:
fe:c4:1f:14:4e:7d:4c:b8:b8:6d:cc:76:4f:36:5d:
7d:9d:d9:c3:3d:f7:9d:df:77:94:cd:12:14:71:32:
a9:90:43:44:4e:99:a7:2f:f2:c6:b3:78:dc:82:cc:
54:ea:b9:0b:d0:63:75:17:b2:a8:c1:20:41:0e:06:
00:8a:4c:6b:e6:ed:79:ec:7a:27:7c:f6:5b:7e:d1:
6e:cc:fc:98:85:ba:a5:88:fc:05:80:1c:44:1d:66:
39:ea:52:c5:07:f0:1c:41:cb:7d:f2:ed:a9:06:09:
70:3f:94:db:e0:7c:28:b9:26:09:a0:9a:a3:01:57:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:15:FC:28:E0:D3:D6:A5:A7:8D:B3:04:AE:29:C9:75:38:BF:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4565F8523B9711EFBE231282762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:be:72:47:94:d9:37:9f:59:62:49:bd:ba:29:47:22:ac:75:
2b:14:b3:a8:a5:de:9e:a7:c5:ff:68:be:b2:5b:7a:7b:b3:c4:
1c:2a:c0:6d:a2:11:80:7a:07:ac:ff:df:47:f0:14:26:e7:b2:
4f:65:94:14:24:10:ea:2d:71:36:fb:5a:e7:14:84:5f:72:3d:
bc:9d:91:bb:0d:9a:1d:5e:12:6a:ca:cf:93:98:ef:f7:4b:0d:
71:5d:be:f8:d3:93:df:90:fc:65:2c:40:64:55:72:e4:4d:29:
88:dc:4f:99:de:94:12:f2:2c:8c:7e:b4:38:f8:07:05:ed:f3:
b6:75:b3:ac:0c:da:b6:d2:ae:4e:5f:2e:ba:0a:bb:64:03:85:
5f:f7:19:56:81:de:9f:81:88:0f:dc:1a:82:3b:58:7d:64:b5:
08:2a:66:ed:46:30:e9:1b:7b:f5:15:f2:eb:3e:16:e9:f1:1c:
48:18:f1:89:ff:63:29:6d:40:df:a5:47:91:68:8c:41:04:a0:
cc:6d:13:68:d3:62:0b:9d:de:be:0f:39:6a:0c:3d:27:e2:e9:
52:f2:eb:79:fe:e5:5a:4c:a9:26:a6:48:02:fa:4a:c5:07:a7:
8e:d7:6e:a5:6d:ae:e3:46:8f:ee:9b:b6:10:25:91:fb:54:59:
35:e2:2b:58
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJk+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA2MTI1NzEzWhcNMjQwODA3MTI1NzEzWjAYMRYw
FAYDVQQDEw02Njg5M2YyYy02MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8Cj2+pbbPuYzg57Hqc9rKEdyRpjN9rZvnp6EF7t20oeHkYAPwnOv4KAv
sUoRqPMsFVJXI0Y1iz1z6o4Hi5aNA7Yyu4AulAQOsNoSqtEZr6AZ2AsflKWGUrS7
ZwaizGP2gfcHk2/dlnxAAgaHEcIzIZg0Xedzx+9jjpm0R5A94L973zx0bqn+xB8U
Tn1MuLhtzHZPNl19ndnDPfed33eUzRIUcTKpkENETpmnL/LGs3jcgsxU6rkL0GN1
F7KowSBBDgYAikxr5u157HonfPZbftFuzPyYhbqliPwFgBxEHWY56lLFB/AcQct9
8u2pBglwP5Tb4HwouSYJoJqjAVclPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM3I
Ffwo4NPWpaeNswSuKcl1OL9IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTY1Rjg1MjNCOTcxMUVGQkUyMzEyODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO51MA0GCSqGSIb3DQEBCwUA
A4IBAQBavnJHlNk3n1liSb26KUcirHUrFLOopd6ep8X/aL6yW3p7s8QcKsBtohGA
eges/99H8BQm57JPZZQUJBDqLXE2+1rnFIRfcj28nZG7DZodXhJqys+TmO/3Sw1x
Xb7405PfkPxlLEBkVXLkTSmI3E+Z3pQS8iyMfrQ4+AcF7fO2dbOsDNq20q5OXy66
CrtkA4Vf9xlWgd6fgYgP3BqCO1h9ZLUIKmbtRjDpG3v1FfLrPhbp8RxIGPGJ/2Mp
bUDfpUeRaIxBBKDMbRNo02ILnd6+DzlqDD0n4ulS8ut5/uVaTKkmpkgC+krFB6eO
126lba7jRo/um7YQJZH7VFk14itY
-----END CERTIFICATE-----
Generated at Thu Aug 8 03:13:56 2024 by rpki-client on console-fra.rpki-client.org