Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1FEE603A4711EE8D9E468B4AD9E6FC.roa
File: 6B1FEE603A4711EE8D9E468B4AD9E6FC.roa (raw, json)
Hash identifier: B31ukR57GsSAvJbffag8tgiu8L5OuZZA4av2sB6QHJc=
Subject key identifier: EC:80:17:AE:4B:A7:02:DE:DD:FB:06:15:68:7C:DB:70:99:FC:B2:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3510
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1FEE603A4711EE8D9E468B4AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:08:11 +0000
ROA not before: Mon 14 Aug 2023 02:08:08 +0000
ROA not after: Sat 13 Jan 2024 02:08:08 +0000
asID: 139057
IP address blocks: 156.225.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13584 (0x3510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:08:08 2023 GMT
Not After : Jan 13 02:08:08 2024 GMT
Subject: CN=64d98c8b-825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:cb:5e:79:b0:5d:04:9c:67:4b:9e:c4:4c:
bc:3b:7b:b9:af:ce:a7:db:41:74:b4:a4:1f:dd:22:
b9:12:4c:fa:20:6a:a4:ee:c8:6f:99:9a:86:2b:1b:
44:66:2e:45:0c:d7:13:95:44:20:80:e9:cb:a6:9e:
99:a3:0c:fa:d9:77:15:58:c6:0c:3a:19:54:f6:7a:
59:63:2f:ca:0d:ee:68:64:81:e3:07:3b:ad:89:3b:
36:2a:76:c7:68:0b:64:c8:96:46:34:84:54:d1:09:
52:02:a7:f3:e7:2c:47:bb:05:18:ff:f6:28:3f:64:
a3:23:2b:bd:39:f5:a9:23:63:41:63:20:3e:fd:8a:
1b:6c:91:d9:ca:65:14:97:88:d5:aa:8e:bd:6d:5a:
2d:c9:c0:74:f8:e5:63:8b:98:50:d7:02:f8:72:9b:
d6:43:65:67:97:04:a6:95:54:9c:22:87:b2:6e:2a:
3f:5c:e2:4c:e7:de:3c:df:99:03:70:2a:b9:77:39:
48:b6:77:22:55:fb:01:3a:d7:71:f0:d7:cf:89:59:
88:4a:e1:c5:df:3d:34:34:fe:47:80:c0:98:22:68:
3c:24:10:71:4a:1c:52:87:4b:3d:d3:79:74:d8:ca:
de:f5:17:22:9e:60:18:da:21:57:f9:ec:9e:52:54:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:17:AE:4B:A7:02:DE:DD:FB:06:15:68:7C:DB:70:99:FC:B2:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1FEE603A4711EE8D9E468B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.102.0/24
Signature Algorithm: sha256WithRSAEncryption
59:67:52:1f:db:91:f7:93:96:91:15:63:78:24:14:4b:66:05:
34:5e:18:22:5d:30:58:e4:f8:d4:8e:e7:6f:fc:65:18:70:ba:
f4:ad:28:bf:d4:98:07:4b:9e:33:ca:ea:f5:6b:77:c5:1d:a7:
8f:42:bb:24:04:2a:4c:93:a3:0f:f1:4b:56:79:10:3c:de:fd:
72:f5:5b:d1:e3:9d:69:2a:c8:59:45:de:12:7e:3a:fa:f6:33:
74:a2:57:9f:1a:f4:2b:04:38:d6:aa:55:52:18:8c:b5:47:3f:
32:0e:9d:8b:ec:99:5f:8b:ff:bd:29:74:59:1f:91:db:e2:6d:
b3:fd:82:db:ad:75:a8:19:77:e3:88:64:d1:fe:27:81:e4:a0:
64:ff:a3:8a:c3:d9:4c:db:7d:a9:f2:bc:68:0f:e2:ef:6b:2a:
93:15:83:8f:04:ae:72:2e:6f:b2:1d:bd:9e:46:b4:d8:1f:d8:
48:65:86:18:86:ff:d4:9c:a9:f5:d5:37:e8:fa:51:5a:81:0a:
ad:c3:30:9d:54:bd:e3:fe:62:ab:0a:98:68:b1:1c:5d:2f:be:
6f:6e:55:dd:78:df:e4:ae:b7:a7:2b:00:33:c4:1c:c3:88:c6:
f9:38:e7:35:20:fd:4a:e2:f9:40:d5:9f:03:e6:da:40:36:32:
40:a5:14:d4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTQwMjA4MDhaFw0yNDAxMTMwMjA4MDhaMBgxFjAU
BgNVBAMTDTY0ZDk4YzhiLTgyNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw58teebBdBJxnS57ETLw7e7mvzqfbQXS0pB/dIrkSTPogaqTuyG+ZmoYr
G0RmLkUM1xOVRCCA6cumnpmjDPrZdxVYxgw6GVT2elljL8oN7mhkgeMHO62JOzYq
dsdoC2TIlkY0hFTRCVICp/PnLEe7BRj/9ig/ZKMjK7059akjY0FjID79ihtskdnK
ZRSXiNWqjr1tWi3JwHT45WOLmFDXAvhym9ZDZWeXBKaVVJwih7JuKj9c4kzn3jzf
mQNwKrl3OUi2dyJV+wE613Hw18+JWYhK4cXfPTQ0/keAwJgiaDwkEHFKHFKHSz3T
eXTYyt71FyKeYBjaIVf57J5SVCPrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7IAX
rkunAt7d+wYVaHzbcJn8slIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzZCMUZFRTYwM0E0NzExRUU4RDlFNDY4QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4WYwDQYJKoZIhvcNAQELBQAD
ggEBAFlnUh/bkfeTlpEVY3gkFEtmBTReGCJdMFjk+NSO52/8ZRhwuvStKL/UmAdL
njPK6vVrd8Udp49CuyQEKkyTow/xS1Z5EDze/XL1W9HjnWkqyFlF3hJ+Ovr2M3Si
V58a9CsEONaqVVIYjLVHPzIOnYvsmV+L/70pdFkfkdvibbP9gtutdagZd+OIZNH+
J4HkoGT/o4rD2UzbfanyvGgP4u9rKpMVg48ErnIub7IdvZ5GtNgf2EhlhhiG/9Sc
qfXVN+j6UVqBCq3DMJ1UveP+YqsKmGixHF0vvm9uVd143+Sut6crADPEHMOIxvk4
5zUg/Uri+UDVnwPm2kA2MkClFNQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:06 2024 by rpki-client on console-fra.rpki-client.org