Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E663A3E1D1011EF89DA3B2F7DDC24C2.roa
File: 4E663A3E1D1011EF89DA3B2F7DDC24C2.roa (raw, json)
Hash identifier: KNKd6D0Frs35RndCYeFDToV+nSZw9GJl66t/BIX//4s=
Subject key identifier: CB:90:30:06:71:A2:98:18:5F:EB:95:39:D8:91:F8:FC:5A:77:F1:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E663A3E1D1011EF89DA3B2F7DDC24C2.roa
Signing time: Tue 28 May 2024 16:35:34 +0000
ROA not before: Tue 28 May 2024 16:35:31 +0000
ROA not after: Sun 18 Aug 2024 16:35:31 +0000
asID: 138195
IP address blocks: 156.226.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36014 (0x8cae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:35:31 2024 GMT
Not After : Aug 18 16:35:31 2024 GMT
Subject: CN=665607d6-aaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:dd:42:21:7e:97:75:ed:3c:87:ff:b5:19:
9a:af:1f:aa:bd:59:ee:67:6c:fb:ea:c3:7f:db:b1:
9e:9a:24:be:7d:d4:70:e5:14:4f:3e:be:8a:c9:8c:
0a:e7:a8:b3:a7:1d:73:f0:6d:e0:08:cf:95:6e:bd:
db:60:1c:db:9c:cd:68:fd:06:ab:fb:5b:bd:8c:37:
1b:c5:ff:26:36:fb:17:d5:75:85:09:43:a2:52:ae:
82:3d:54:62:04:24:60:a5:fd:52:f9:19:bd:02:81:
3c:9a:f8:34:a0:d7:69:96:3c:27:d3:23:ca:f0:27:
7d:56:ad:4a:77:aa:f4:8e:e9:cf:bb:1e:d8:a2:da:
c4:8d:20:e3:a9:07:c4:cf:17:21:1e:7d:1c:fb:7f:
2a:74:61:49:81:62:d2:f4:96:7d:52:5b:77:cd:17:
65:27:84:23:5a:db:24:9c:49:44:da:fb:a3:90:b3:
d7:4a:37:d4:52:dd:8e:d6:4b:4f:10:a0:55:f7:b6:
04:67:5f:0c:a0:67:1c:93:8a:4e:6c:e1:1c:6b:22:
c4:cd:fc:08:76:23:1c:7a:fd:5e:34:2e:2a:7a:e0:
6f:4e:66:c7:64:aa:10:bf:b2:90:06:5d:8d:61:f9:
94:28:cc:e7:ee:94:71:ed:3a:c3:36:ea:fc:94:85:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:30:06:71:A2:98:18:5F:EB:95:39:D8:91:F8:FC:5A:77:F1:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E663A3E1D1011EF89DA3B2F7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.128.0/18
Signature Algorithm: sha256WithRSAEncryption
40:28:07:d8:be:1a:df:e2:1a:d5:2f:89:2b:55:e1:27:aa:f0:
95:04:f2:2c:f5:cc:a3:da:a2:da:8d:0a:17:69:43:86:08:ab:
84:7e:c4:27:7e:f3:85:28:e6:ff:83:fc:66:cb:a8:b1:05:c1:
ba:5a:1f:5f:b7:7f:55:44:e0:b9:d9:17:8b:c3:d8:27:02:f9:
79:32:ba:cf:97:91:cb:eb:29:19:83:18:d6:a3:3b:30:cb:cc:
fa:ad:06:fb:5f:fe:43:c4:b1:2f:56:81:77:4d:14:78:58:c9:
8d:86:a1:2b:8a:92:02:64:31:95:82:6e:b4:e6:7b:15:3b:a9:
3b:11:d3:3f:01:10:ee:06:63:10:9e:80:8f:20:b6:4b:ec:cc:
a4:d4:2b:c8:af:a9:bc:15:9f:30:71:89:6c:39:a0:0a:ec:9e:
d9:d0:a9:82:07:ce:a0:5e:2d:78:1b:a4:95:74:96:98:c7:e4:
c5:49:db:7d:cb:be:cf:de:00:1d:11:62:da:8a:0c:2e:55:b1:
47:a0:05:b4:54:91:c0:56:16:db:f1:58:66:53:1d:e3:80:53:
de:08:68:72:a2:9e:e5:20:21:e1:9e:d7:91:58:d3:5b:3c:4d:
09:ad:4c:fc:61:ed:79:ba:7f:4a:ac:38:6e:49:a8:95:7e:b6:
d3:10:74:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIyuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTI4MTYzNTMxWhcNMjQwODE4MTYzNTMxWjAYMRYw
FAYDVQQDEw02NjU2MDdkNi1hYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXXdQiF+l3XtPIf/tRmarx+qvVnuZ2z76sN/27GemiS+fdRw5RRPPr6K
yYwK56izpx1z8G3gCM+Vbr3bYBzbnM1o/Qar+1u9jDcbxf8mNvsX1XWFCUOiUq6C
PVRiBCRgpf1S+Rm9AoE8mvg0oNdpljwn0yPK8Cd9Vq1Kd6r0junPux7YotrEjSDj
qQfEzxchHn0c+38qdGFJgWLS9JZ9Ult3zRdlJ4QjWtsknElE2vujkLPXSjfUUt2O
1ktPEKBV97YEZ18MoGcck4pObOEcayLEzfwIdiMcev1eNC4qeuBvTmbHZKoQv7KQ
Bl2NYfmUKMzn7pRx7TrDNur8lIUwUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMuQ
MAZxopgYX+uVOdiR+Pxad/HlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RTY2M0EzRTFEMTAxMUVGODlEQTNCMkY3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnOKAMA0GCSqGSIb3DQEBCwUA
A4IBAQBAKAfYvhrf4hrVL4krVeEnqvCVBPIs9cyj2qLajQoXaUOGCKuEfsQnfvOF
KOb/g/xmy6ixBcG6Wh9ft39VROC52ReLw9gnAvl5MrrPl5HL6ykZgxjWozswy8z6
rQb7X/5DxLEvVoF3TRR4WMmNhqEripICZDGVgm605nsVO6k7EdM/ARDuBmMQnoCP
ILZL7Myk1CvIr6m8FZ8wcYlsOaAK7J7Z0KmCB86gXi14G6SVdJaYx+TFSdt9y77P
3gAdEWLaigwuVbFHoAW0VJHAVhbb8VhmUx3jgFPeCGhyop7lICHhnteRWNNbPE0J
rUz8Ye15un9KrDhuSaiVfrbTEHT6
-----END CERTIFICATE-----
Generated at Mon Aug 19 05:25:49 2024 by rpki-client on console-fra.rpki-client.org