Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/595899D0499511EFA159EFA9762E951A.roa
File: 595899D0499511EFA159EFA9762E951A.roa (raw, json)
Hash identifier: 8jTNnlrBKqn2+tFV8t0tekdGCP8lAc/QuleNHb1+2vM=
Subject key identifier: 1E:DD:8E:FA:26:AB:7A:BC:C1:6C:73:15:67:47:C8:24:BE:8B:35:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/595899D0499511EFA159EFA9762E951A.roa
Signing time: Wed 24 Jul 2024 08:18:47 +0000
ROA not before: Wed 24 Jul 2024 08:18:44 +0000
ROA not after: Fri 23 Aug 2024 08:18:44 +0000
asID: 202656
IP address blocks: 156.246.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40709 (0x9f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:18:44 2024 GMT
Not After : Aug 23 08:18:44 2024 GMT
Subject: CN=66a0b8e7-4def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:86:8a:18:8c:90:9f:45:60:0c:7a:b5:ec:
dd:51:e7:79:e5:8e:a8:c4:bd:82:38:8b:6d:09:b8:
83:5f:35:8d:8b:0c:28:46:83:5d:e6:2f:ef:3f:44:
49:f5:dd:99:24:97:07:30:e8:1a:b3:5c:ca:8c:91:
65:25:b1:10:51:84:c1:e3:6c:56:00:16:d2:1b:f4:
f1:2c:e0:2f:a2:fd:f4:46:21:28:cc:19:ff:61:c3:
18:8c:f0:c5:c1:ec:0c:f9:35:ae:08:6c:e7:5c:52:
a8:ff:44:35:c3:e3:f7:4c:bb:0e:2a:3b:1c:19:4a:
cb:6f:57:2c:2e:b2:3c:02:ba:fe:37:88:25:dc:e4:
0e:91:f6:27:e7:d8:fc:ed:e1:69:cb:33:81:85:58:
ab:a6:10:ef:02:7e:09:84:ec:99:ee:45:1a:cb:54:
d8:4e:bf:c2:b3:39:65:d3:78:e2:e4:5f:d7:db:20:
04:08:a0:2f:70:3e:c1:f5:d1:2c:42:4e:7c:95:cc:
1b:fe:fa:68:1b:22:fb:33:f4:89:ab:02:d7:0c:03:
28:f4:4e:1b:a4:b7:59:e9:80:f1:42:fe:c1:af:c8:
b9:b9:ec:f9:ae:d6:94:2b:2c:23:94:e2:2a:e8:74:
6b:4e:e1:dd:9c:7d:70:3a:da:04:c5:a8:b9:54:d8:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:8E:FA:26:AB:7A:BC:C1:6C:73:15:67:47:C8:24:BE:8B:35:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/595899D0499511EFA159EFA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:96:e7:9e:0c:55:fb:45:70:ed:e4:4d:fc:75:8a:a7:f1:d3:
cf:72:60:5d:1d:38:84:e9:98:cc:7e:9b:ae:fb:da:b3:e0:63:
5b:bc:8c:ce:fe:a2:64:62:be:d9:a3:8d:98:20:34:a9:6b:89:
a9:c0:dd:16:9e:a9:f4:8a:18:a3:ad:07:48:05:c2:4f:de:4b:
89:11:e1:db:03:d6:4f:04:b1:2d:9f:5a:19:fe:0e:2b:6d:01:
97:03:74:1d:b0:b7:57:cb:9f:f2:98:fb:7e:0d:9b:99:ed:66:
83:6c:1f:1b:54:3e:13:1d:c0:01:0b:f4:fc:11:af:3d:88:88:
f5:57:a9:76:95:da:ea:91:b4:f5:97:fc:ea:38:ff:5a:70:8a:
d5:a7:74:69:fe:53:e2:df:ad:2e:31:73:41:0e:b3:6e:9d:6a:
19:e9:b6:7a:c3:a6:66:a8:57:bc:ba:2b:66:81:df:d2:23:38:
23:c7:dd:db:bc:7f:54:09:9d:bf:26:af:5b:99:23:23:54:4f:
7c:78:12:e0:74:55:df:dd:32:3d:18:23:5d:d9:54:3d:f8:75:
12:1e:20:da:36:9d:20:2b:19:33:54:f8:d9:71:6a:30:8b:b7:
ea:60:54:4b:45:a9:f6:5f:bd:0b:1e:fe:d9:fa:4b:65:f6:6b:
8f:51:b9:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ8FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDgxODQ0WhcNMjQwODIzMDgxODQ0WjAYMRYw
FAYDVQQDEw02NmEwYjhlNy00ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr7mGihiMkJ9FYAx6tezdUed55Y6oxL2COIttCbiDXzWNiwwoRoNd5i/v
P0RJ9d2ZJJcHMOgas1zKjJFlJbEQUYTB42xWABbSG/TxLOAvov30RiEozBn/YcMY
jPDFwewM+TWuCGznXFKo/0Q1w+P3TLsOKjscGUrLb1csLrI8Arr+N4gl3OQOkfYn
59j87eFpyzOBhVirphDvAn4JhOyZ7kUay1TYTr/Cszll03ji5F/X2yAECKAvcD7B
9dEsQk58lcwb/vpoGyL7M/SJqwLXDAMo9E4bpLdZ6YDxQv7Br8i5uez5rtaUKywj
lOIq6HRrTuHdnH1wOtoExai5VNhvDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB7d
jvomq3q8wWxzFWdHyCS+izVmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OTU4OTlEMDQ5OTUxMUVGQTE1OUVGQTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPapMA0GCSqGSIb3DQEBCwUA
A4IBAQC0lueeDFX7RXDt5E38dYqn8dPPcmBdHTiE6ZjMfpuu+9qz4GNbvIzO/qJk
Yr7Zo42YIDSpa4mpwN0Wnqn0ihijrQdIBcJP3kuJEeHbA9ZPBLEtn1oZ/g4rbQGX
A3QdsLdXy5/ymPt+DZuZ7WaDbB8bVD4THcABC/T8Ea89iIj1V6l2ldrqkbT1l/zq
OP9acIrVp3Rp/lPi360uMXNBDrNunWoZ6bZ6w6ZmqFe8uitmgd/SIzgjx93bvH9U
CZ2/Jq9bmSMjVE98eBLgdFXf3TI9GCNd2VQ9+HUSHiDaNp0gKxkzVPjZcWowi7fq
YFRLRan2X70LHv7Z+ktl9muPUbm8
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org