Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF0CF4A2DCA11ED814A05DFF1222468.roa
File: 4AF0CF4A2DCA11ED814A05DFF1222468.roa (raw, json)
Hash identifier: sx9WtzT7HnZPR95p8ZbakFSGbNrlfwGKaP1Xtu7xUpE=
Subject key identifier: 62:AE:D1:68:C9:BF:5E:06:2E:79:66:FA:4B:AA:98:D1:B5:CE:A4:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 177A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF0CF4A2DCA11ED814A05DFF1222468.roa
Signing time: Tue 06 Sep 2022 09:57:18 +0000
ROA not before: Tue 06 Sep 2022 09:57:15 +0000
ROA not after: Mon 12 Sep 2022 09:57:15 +0000
asID: 1239
IP address blocks: 156.231.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6010 (0x177a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 6 09:57:15 2022 GMT
Not After : Sep 12 09:57:15 2022 GMT
Subject: CN=6317197e-4acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:c8:de:3d:93:10:eb:74:77:70:8a:8f:60:
52:be:f4:da:b3:ba:60:ce:85:ce:2a:19:05:a1:09:
03:b0:dd:f8:58:2b:8a:2d:df:2f:6f:39:a3:4e:64:
7e:54:3f:8a:56:8d:02:cb:d9:5d:87:9f:36:50:ff:
c5:a0:20:8c:94:3a:92:5c:b7:e3:86:2e:b9:ff:9b:
cb:b8:c1:a2:24:47:39:fb:63:61:84:0e:f0:42:8b:
01:fc:66:26:d3:a9:50:c4:04:76:d7:0f:52:c2:31:
e4:57:53:b2:1a:cc:b9:ba:08:f2:b9:6e:8c:6e:48:
97:cc:84:2d:d0:52:e6:2c:d1:eb:d4:b6:5d:70:8a:
ae:56:4e:fc:74:44:87:69:3f:6c:ed:b8:3b:4b:9e:
8c:2b:1c:4c:69:1d:e8:4f:2e:9f:fb:3b:4c:f4:e3:
f8:a6:75:f3:1f:4a:1b:81:c5:19:0a:43:97:97:c7:
01:02:ba:c1:76:dd:d0:ed:97:34:74:b3:3c:14:43:
f7:e4:70:f5:19:ac:26:c7:53:43:7c:75:e6:88:8d:
f1:63:6c:e9:41:cc:3c:43:6f:be:cd:32:77:b5:32:
21:dd:71:dc:87:f9:6f:5d:90:d0:63:c3:d3:3a:0e:
8d:fc:c0:ff:b7:98:1c:69:11:09:ee:b3:f9:d1:b0:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:D1:68:C9:BF:5E:06:2E:79:66:FA:4B:AA:98:D1:B5:CE:A4:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF0CF4A2DCA11ED814A05DFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/20
Signature Algorithm: sha256WithRSAEncryption
33:ec:bc:7e:1a:18:74:f8:ee:21:32:94:57:6f:41:a0:89:40:
83:25:ac:64:74:2e:99:ae:89:66:9e:84:32:55:c7:5e:f4:a3:
bd:c2:75:fe:e2:0c:0b:7f:27:f0:15:be:9f:64:d7:0e:d5:2e:
54:b6:ff:8c:5e:43:71:1f:7b:fc:88:54:7c:02:3d:d4:2c:5d:
fd:29:ba:c9:43:b0:4d:89:df:ca:2a:02:1d:6c:74:2a:01:93:
54:c9:c4:eb:53:dd:81:5f:8e:d8:f6:04:7c:08:66:a2:e4:e2:
31:e5:97:24:f7:f4:03:66:46:df:b7:86:f4:8d:bf:d9:0f:0b:
00:1c:0e:20:21:be:65:2e:9e:ae:d4:9e:ef:9e:d8:52:b5:5f:
40:ac:ac:01:9b:8c:4c:6a:3e:c4:42:9f:15:fa:92:fa:b3:0b:
42:24:85:02:2c:34:2d:13:44:c4:86:64:9e:28:ed:f2:c4:8a:
8c:b1:b7:99:a8:40:92:db:57:67:f1:4c:53:b5:41:61:9d:5d:
4d:85:32:80:8c:9d:ab:0f:36:1c:e3:32:a0:4e:32:b9:cc:de:
69:43:2f:e9:4a:2c:8d:a7:2d:81:80:82:74:71:e8:d8:af:c2:
f6:a2:e7:e2:5c:da:4d:b8:42:3f:7f:25:3e:4b:9e:e3:f8:5e:
c9:09:71:70
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF3owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MDYwOTU3MTVaFw0yMjA5MTIwOTU3MTVaMBgxFjAU
BgNVBAMMDTYzMTcxOTdlLTRhY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCMsjePZMQ63R3cIqPYFK+9NqzumDOhc4qGQWhCQOw3fhYK4ot3y9vOaNO
ZH5UP4pWjQLL2V2HnzZQ/8WgIIyUOpJct+OGLrn/m8u4waIkRzn7Y2GEDvBCiwH8
ZibTqVDEBHbXD1LCMeRXU7IazLm6CPK5boxuSJfMhC3QUuYs0evUtl1wiq5WTvx0
RIdpP2ztuDtLnowrHExpHehPLp/7O0z04/imdfMfShuBxRkKQ5eXxwECusF23dDt
lzR0szwUQ/fkcPUZrCbHU0N8deaIjfFjbOlBzDxDb77NMne1MiHdcdyH+W9dkNBj
w9M6Do38wP+3mBxpEQnus/nRsGqlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUYq7R
aMm/XgYueWb6S6qY0bXOpOswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzRBRjBDRjRBMkRDQTExRUQ4MTRBMDVERkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASc53AwDQYJKoZIhvcNAQELBQAD
ggEBADPsvH4aGHT47iEylFdvQaCJQIMlrGR0LpmuiWaehDJVx170o73Cdf7iDAt/
J/AVvp9k1w7VLlS2/4xeQ3Efe/yIVHwCPdQsXf0puslDsE2J38oqAh1sdCoBk1TJ
xOtT3YFfjtj2BHwIZqLk4jHllyT39ANmRt+3hvSNv9kPCwAcDiAhvmUunq7Unu+e
2FK1X0CsrAGbjExqPsRCnxX6kvqzC0IkhQIsNC0TRMSGZJ4o7fLEioyxt5moQJLb
V2fxTFO1QWGdXU2FMoCMnasPNhzjMqBOMrnM3mlDL+lKLI2nLYGAgnRx6Nivwvai
5+Jc2k24Qj9/JT5LnuP4XskJcXA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org