Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509AF366A44111EC9B8233C65A40D577.roa
File: 509AF366A44111EC9B8233C65A40D577.roa (raw, json)
Hash identifier: oVDkamyZFXzoQgNVuLyf+Y0LwIzskysSgqPnNrszBq4=
Subject key identifier: 9B:10:46:31:14:1E:9B:A3:B7:E8:99:63:F4:C5:EF:09:F7:3A:FB:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509AF366A44111EC9B8233C65A40D577.roa
Signing time: Tue 15 Mar 2022 09:21:37 +0000
ROA not before: Tue 15 Mar 2022 09:21:34 +0000
ROA not after: Sat 31 Dec 2022 09:21:34 +0000
asID: 135097
IP address blocks: 156.255.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4739 (0x1283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:21:34 2022 GMT
Not After : Dec 31 09:21:34 2022 GMT
Subject: CN=62305aa1-f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:7e:e7:b5:81:fe:10:26:74:d0:3e:3b:10:
fb:24:b0:10:d0:88:ea:3a:4a:14:f4:48:79:e2:20:
b2:77:71:d5:99:fd:f3:0a:74:16:22:70:cd:5f:20:
96:f1:98:96:c8:f3:07:7b:aa:51:61:d0:f4:9c:55:
44:67:87:d7:8f:06:b3:4a:f1:10:15:1e:2c:35:3c:
16:ff:ea:ff:dc:ff:9b:12:b7:06:c8:42:51:17:34:
da:cd:67:6f:55:9c:f4:28:79:ff:51:b4:38:97:d0:
99:6d:69:65:b6:68:d1:a2:ad:13:99:74:72:fa:1d:
ec:1e:ff:55:8c:e6:84:3e:92:30:94:62:42:49:3c:
10:4f:b1:4a:97:b4:2a:95:0e:4b:94:ef:2b:2a:36:
07:2d:04:0f:b9:3f:f2:4a:da:1f:49:be:59:83:9e:
29:a8:98:34:81:87:df:89:2d:8e:8d:4c:e2:22:42:
b1:91:3b:49:b8:31:74:1b:d5:57:50:fb:da:03:bc:
ee:b6:16:31:5a:56:05:b0:97:b3:7a:78:59:b0:d4:
10:9b:68:ec:54:81:f6:29:5a:91:bd:bb:30:67:bf:
cc:02:57:f6:a6:23:e4:a1:5e:58:c9:50:1c:dd:76:
2e:54:79:db:50:a2:11:53:23:cd:a2:16:62:d9:4f:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:46:31:14:1E:9B:A3:B7:E8:99:63:F4:C5:EF:09:F7:3A:FB:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509AF366A44111EC9B8233C65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a3:0a:3d:4e:59:2e:fc:c9:66:8b:6c:b5:2c:3b:e3:86:3f:
a6:f1:9b:b7:ee:2d:34:b7:7a:0b:88:77:d3:1d:1d:56:d8:93:
85:16:6a:f8:da:52:fc:15:0a:c3:22:41:41:55:b8:72:e8:a1:
49:30:3b:9b:02:a8:cd:41:aa:ad:8b:e8:b5:6d:06:7d:53:6e:
b8:ce:70:73:7f:93:5b:07:f1:a8:b8:fa:6b:19:b6:b5:05:a5:
a8:ce:2c:d5:d1:11:bd:74:de:e6:b6:2b:06:1d:36:e7:c0:e8:
e2:c5:80:97:1a:9e:3c:25:0e:75:3d:e5:c4:0d:e4:8c:13:37:
20:28:53:9f:f7:2e:14:05:0e:ea:a7:c3:d0:f1:4a:a3:cb:02:
0f:8c:89:38:5c:86:81:8e:17:2b:4b:fb:6b:f5:b3:58:e0:db:
8e:25:09:46:1c:8c:a0:89:38:6b:af:52:b1:71:a3:d1:09:cb:
9e:7c:92:98:5c:80:b6:fc:d7:a1:f2:9c:25:9c:fe:95:72:be:
ed:07:b3:e8:ff:23:40:e2:06:15:04:3d:2e:7f:ca:71:0b:31:
9d:9f:25:27:65:b2:81:10:17:24:c7:0e:ed:55:4f:24:bb:0a:
29:45:e4:b9:19:04:0d:b7:f5:06:96:6a:66:cd:04:23:5b:47:
00:d3:69:0d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMTUwOTIxMzRaFw0yMjEyMzEwOTIxMzRaMBgxFjAU
BgNVBAMMDTYyMzA1YWExLWYzMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMz37ntYH+ECZ00D47EPsksBDQiOo6ShT0SHniILJ3cdWZ/fMKdBYicM1f
IJbxmJbI8wd7qlFh0PScVURnh9ePBrNK8RAVHiw1PBb/6v/c/5sStwbIQlEXNNrN
Z29VnPQoef9RtDiX0JltaWW2aNGirROZdHL6Hewe/1WM5oQ+kjCUYkJJPBBPsUqX
tCqVDkuU7ysqNgctBA+5P/JK2h9JvlmDnimomDSBh9+JLY6NTOIiQrGRO0m4MXQb
1VdQ+9oDvO62FjFaVgWwl7N6eFmw1BCbaOxUgfYpWpG9uzBnv8wCV/amI+ShXljJ
UBzddi5UedtQohFTI82iFmLZT8IzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmxBG
MRQem6O36Jlj9MXvCfc6+4AwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzUwOUFGMzY2QTQ0MTExRUM5QjgyMzNDNjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/wswDQYJKoZIhvcNAQELBQAD
ggEBAGKjCj1OWS78yWaLbLUsO+OGP6bxm7fuLTS3eguId9MdHVbYk4UWavjaUvwV
CsMiQUFVuHLooUkwO5sCqM1Bqq2L6LVtBn1TbrjOcHN/k1sH8ai4+msZtrUFpajO
LNXREb103ua2KwYdNufA6OLFgJcanjwlDnU95cQN5IwTNyAoU5/3LhQFDuqnw9Dx
SqPLAg+MiThchoGOFytL+2v1s1jg244lCUYcjKCJOGuvUrFxo9EJy558kphcgLb8
16HynCWc/pVyvu0Hs+j/I0DiBhUEPS5/ynELMZ2fJSdlsoEQFyTHDu1VTyS7CilF
5LkZBA239QaWambNBCNbRwDTaQ0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org