Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499A149E4A6A11EF866CB153762E951A.roa
File: 499A149E4A6A11EF866CB153762E951A.roa (raw, json)
Hash identifier: E1/LGSi88DROPQ6DI8jIkITEjsqPnl4Dq4UQLSPrl5Q=
Subject key identifier: 38:2F:17:9F:DA:7A:3C:03:3F:4D:BD:23:BF:FC:2B:C1:5F:63:DF:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A01D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499A149E4A6A11EF866CB153762E951A.roa
Signing time: Thu 25 Jul 2024 09:43:03 +0000
ROA not before: Thu 25 Jul 2024 09:43:00 +0000
ROA not after: Sat 03 Aug 2024 09:43:00 +0000
asID: 7018
IP address blocks: 156.248.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40989 (0xa01d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:43:00 2024 GMT
Not After : Aug 3 09:43:00 2024 GMT
Subject: CN=66a21e27-64bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:ff:18:53:3e:ce:31:80:a3:fa:55:b4:b4:
cc:08:fe:40:eb:28:fc:4b:bc:53:f6:39:9a:42:93:
2b:68:8c:cb:22:53:6c:d6:d1:9b:4d:7d:1e:e6:56:
48:3b:02:59:e4:96:dd:a3:da:d2:38:25:bb:8b:e2:
2b:1e:73:19:de:1c:c6:7e:eb:59:39:cb:0f:06:8e:
14:07:da:17:39:4c:1a:55:c9:4e:45:1c:d0:7f:ce:
7b:bd:11:44:a9:81:c8:a1:4d:cf:2c:d0:4a:de:d6:
1e:83:8c:d1:4f:7f:04:50:1b:2b:14:59:6f:d9:2c:
e2:ab:42:c3:7c:7e:6e:f6:28:67:1f:45:4b:38:b0:
25:70:14:c8:f2:d2:a1:5f:ee:53:79:a0:e2:89:bd:
f6:49:36:41:6e:30:10:ac:52:3e:0d:22:4c:1c:30:
8a:e3:48:01:41:dc:3f:c6:96:06:06:37:f4:5f:5d:
48:3d:06:df:64:c8:21:00:7d:7b:e9:c6:ea:d8:27:
1c:0d:33:3f:2a:39:8d:d9:2e:ec:62:06:32:f7:f9:
d6:d4:71:34:b5:f9:b1:51:8d:ed:b2:91:24:b5:c4:
f4:0f:f7:23:88:b7:c3:4f:d2:82:d2:3c:f7:07:92:
cd:7f:ec:c5:28:68:75:5d:d3:33:11:bc:26:c8:a2:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2F:17:9F:DA:7A:3C:03:3F:4D:BD:23:BF:FC:2B:C1:5F:63:DF:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499A149E4A6A11EF866CB153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f3:b9:09:fb:18:f0:9b:a7:62:85:54:1f:89:61:18:d9:d3:
e1:20:41:dd:bd:2e:a0:fa:0d:50:f9:82:a8:56:a9:92:72:65:
75:45:75:1b:8f:7f:46:5d:18:ce:2c:48:e2:11:71:df:1b:6e:
22:64:0a:7e:fb:04:17:c4:58:64:15:b9:d8:10:11:00:54:55:
54:9a:23:da:7e:84:ac:36:7d:28:c5:1e:98:da:12:ea:52:e1:
20:a5:8a:a1:50:25:53:54:ef:90:b7:f5:b4:32:13:e1:f0:79:
e2:d3:98:87:c4:0b:a6:bc:22:d7:a5:d2:00:a4:e9:9e:9a:40:
16:7b:85:05:b1:05:18:db:c6:f4:cc:1d:e1:3d:8b:e5:e7:ae:
17:27:5a:be:e7:eb:c4:42:0e:a3:41:79:45:07:c9:16:83:9a:
78:5d:62:fc:ac:a9:96:61:45:6f:5b:ed:30:00:ff:1a:35:3d:
4f:79:c8:ff:48:af:cd:25:af:5c:7c:e1:12:74:95:9e:36:3c:
22:29:2b:43:4f:55:da:32:fe:f7:bb:38:3e:58:96:09:c8:5b:
74:45:3a:69:86:ea:a5:a2:c6:73:49:a7:10:30:78:72:45:78:
56:05:4d:d9:bc:ea:43:4c:63:91:b4:48:74:ed:13:be:24:88:
5a:1f:e3:95
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKAdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDk0MzAwWhcNMjQwODAzMDk0MzAwWjAYMRYw
FAYDVQQDEw02NmEyMWUyNy02NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyo7/GFM+zjGAo/pVtLTMCP5A6yj8S7xT9jmaQpMraIzLIlNs1tGbTX0e
5lZIOwJZ5Jbdo9rSOCW7i+IrHnMZ3hzGfutZOcsPBo4UB9oXOUwaVclORRzQf857
vRFEqYHIoU3PLNBK3tYeg4zRT38EUBsrFFlv2Sziq0LDfH5u9ihnH0VLOLAlcBTI
8tKhX+5TeaDiib32STZBbjAQrFI+DSJMHDCK40gBQdw/xpYGBjf0X11IPQbfZMgh
AH176cbq2CccDTM/KjmN2S7sYgYy9/nW1HE0tfmxUY3tspEktcT0D/cjiLfDT9KC
0jz3B5LNf+zFKGh1XdMzEbwmyKKhmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDgv
F5/aejwDP029I7/8K8FfY98eMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTlBMTQ5RTRBNkExMUVGODY2Q0IxNTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPhcMA0GCSqGSIb3DQEBCwUA
A4IBAQAh87kJ+xjwm6dihVQfiWEY2dPhIEHdvS6g+g1Q+YKoVqmScmV1RXUbj39G
XRjOLEjiEXHfG24iZAp++wQXxFhkFbnYEBEAVFVUmiPafoSsNn0oxR6Y2hLqUuEg
pYqhUCVTVO+Qt/W0MhPh8Hni05iHxAumvCLXpdIApOmemkAWe4UFsQUY28b0zB3h
PYvl564XJ1q+5+vEQg6jQXlFB8kWg5p4XWL8rKmWYUVvW+0wAP8aNT1Pecj/SK/N
Ja9cfOESdJWeNjwiKStDT1XaMv73uzg+WJYJyFt0RTpphuqlosZzSacQMHhyRXhW
BU3ZvOpDTGORtEh07RO+JIhaH+OV
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org