Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B7CB4C4440F11EFA0164A9C762E951A.roa
File: 6B7CB4C4440F11EFA0164A9C762E951A.roa (raw, json)
Hash identifier: kGG+s04M+Z52lQgcPxED2ks3BsGpEwUQQvtvz/g5Trg=
Subject key identifier: 47:AA:F1:8D:40:2C:A2:59:63:BD:9B:1F:82:D3:2C:D7:4D:34:E5:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B7CB4C4440F11EFA0164A9C762E951A.roa
Signing time: Wed 17 Jul 2024 07:37:29 +0000
ROA not before: Wed 17 Jul 2024 07:37:26 +0000
ROA not after: Sat 27 Jul 2024 07:37:26 +0000
asID: 22773
IP address blocks: 156.246.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40172 (0x9cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:37:26 2024 GMT
Not After : Jul 27 07:37:26 2024 GMT
Subject: CN=669774b9-75c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:f2:5f:94:64:79:8c:22:20:f3:07:0d:22:
97:5c:a3:25:6a:c3:11:6e:91:52:3e:63:75:c6:9f:
d5:45:2a:76:be:76:2f:42:0c:83:37:a3:08:13:fb:
14:10:f9:c6:e9:de:d7:69:44:ee:1b:30:6a:18:1a:
5e:46:4f:2a:ea:93:77:85:25:36:af:a7:a3:62:bd:
b9:24:58:19:4e:e5:3f:1a:ce:07:86:e8:28:c6:5d:
d5:04:d8:28:e2:50:1f:8e:63:89:99:04:2b:d1:84:
2f:0f:fb:93:ff:53:35:59:9c:35:43:70:96:3b:5a:
7a:0d:a2:2d:b6:93:44:e2:c5:86:d6:f1:a4:c3:b3:
a1:47:a7:d2:98:39:ef:76:7d:79:3c:b6:42:d8:fa:
92:5b:1e:cf:ff:eb:ce:9c:cd:95:e3:aa:27:2e:b2:
54:2e:84:a9:1c:05:ab:b0:89:c6:04:f5:11:e6:78:
a2:d5:84:aa:bd:94:3b:87:91:44:c2:3b:db:f3:6b:
26:11:dc:d1:7c:50:1b:30:4a:d0:ea:08:b1:2b:ac:
fe:48:8d:2c:49:38:b5:4e:7d:f8:ce:dd:5a:ca:61:
64:1b:01:f7:b0:5f:5c:0b:ea:6b:ad:86:9f:e7:a6:
4d:6f:2f:da:67:03:24:53:d0:56:34:1a:65:86:ac:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:F1:8D:40:2C:A2:59:63:BD:9B:1F:82:D3:2C:D7:4D:34:E5:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B7CB4C4440F11EFA0164A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.96.0/19
Signature Algorithm: sha256WithRSAEncryption
54:e2:25:43:c5:07:21:ac:6f:30:46:4a:c5:4a:c8:01:df:75:
ba:d4:d0:08:11:fb:44:d9:95:1d:c4:5a:39:21:12:ac:eb:a1:
85:9e:ed:24:60:d0:f3:30:dd:a9:a6:58:40:4d:85:dd:fd:c4:
d0:f6:35:5b:1c:48:4a:65:72:34:31:9a:5b:ee:67:18:75:f0:
0e:ce:4a:25:e6:f0:65:a5:19:48:a1:28:7c:9b:79:66:2d:aa:
fa:d6:4c:31:75:14:13:14:89:c1:cb:43:38:01:04:8c:b2:55:
bc:d4:64:5e:1c:04:10:4d:41:1b:fa:55:5b:f1:27:bd:9f:1a:
3d:d5:1a:ae:d0:5c:38:6e:4c:73:82:00:a2:b2:ea:60:37:6e:
ea:39:14:39:f2:59:3b:79:0f:de:08:f8:e5:dd:34:85:14:7b:
7b:57:55:1d:f5:e0:0b:b4:8d:93:80:ec:ee:ef:5f:c0:23:f0:
82:bf:d3:e6:e0:74:19:64:4c:ac:a3:ad:75:97:4d:8d:28:9a:
60:8a:e9:58:4c:8e:f2:a5:70:5a:40:fe:7b:e2:e1:b5:50:5d:
16:9e:82:5f:2c:14:d6:c5:cf:81:9b:25:ad:d0:4e:e6:91:ce:
63:1e:56:b7:c7:2a:6e:ba:b9:78:96:7f:ff:0f:b9:12:1d:a3:
bb:98:a5:e2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJzsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE3MDczNzI2WhcNMjQwNzI3MDczNzI2WjAYMRYw
FAYDVQQDEw02Njk3NzRiOS03NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3h3yX5RkeYwiIPMHDSKXXKMlasMRbpFSPmN1xp/VRSp2vnYvQgyDN6MI
E/sUEPnG6d7XaUTuGzBqGBpeRk8q6pN3hSU2r6ejYr25JFgZTuU/Gs4Hhugoxl3V
BNgo4lAfjmOJmQQr0YQvD/uT/1M1WZw1Q3CWO1p6DaIttpNE4sWG1vGkw7OhR6fS
mDnvdn15PLZC2PqSWx7P/+vOnM2V46onLrJULoSpHAWrsInGBPUR5nii1YSqvZQ7
h5FEwjvb82smEdzRfFAbMErQ6gixK6z+SI0sSTi1Tn34zt1aymFkGwH3sF9cC+pr
rYaf56ZNby/aZwMkU9BWNBplhqwiDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEeq
8Y1ALKJZY72bH4LTLNdNNOXcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjdDQjRDNDQ0MEYxMUVGQTAxNjRBOUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPZgMA0GCSqGSIb3DQEBCwUA
A4IBAQBU4iVDxQchrG8wRkrFSsgB33W61NAIEftE2ZUdxFo5IRKs66GFnu0kYNDz
MN2pplhATYXd/cTQ9jVbHEhKZXI0MZpb7mcYdfAOzkol5vBlpRlIoSh8m3lmLar6
1kwxdRQTFInBy0M4AQSMslW81GReHAQQTUEb+lVb8Se9nxo91Rqu0Fw4bkxzggCi
supgN27qORQ58lk7eQ/eCPjl3TSFFHt7V1Ud9eALtI2TgOzu71/AI/CCv9Pm4HQZ
ZEyso611l02NKJpgiulYTI7ypXBaQP574uG1UF0WnoJfLBTWxc+BmyWt0E7mkc5j
Hla3xypuurl4ln//D7kSHaO7mKXi
-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org