Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B87FDFA435811EF8DCFC8BB762E951A.roa
File: 6B87FDFA435811EF8DCFC8BB762E951A.roa (raw, json)
Hash identifier: MKGfbhK530CapY0DRFOWdTOJRz0p+SgHdqWFX25C5N8=
Subject key identifier: 41:63:9D:02:E7:73:78:8D:A7:C5:4A:87:9F:0A:8A:04:00:AC:41:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B87FDFA435811EF8DCFC8BB762E951A.roa
Signing time: Tue 16 Jul 2024 09:47:31 +0000
ROA not before: Tue 16 Jul 2024 09:47:28 +0000
ROA not after: Tue 13 Aug 2024 09:47:28 +0000
asID: 55320
IP address blocks: 156.244.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40117 (0x9cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:47:28 2024 GMT
Not After : Aug 13 09:47:28 2024 GMT
Subject: CN=669641b3-b5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:f4:4b:9a:cf:61:d1:4d:05:4c:df:4e:61:
f2:85:03:80:15:95:f5:3d:15:80:65:a5:c0:40:d3:
e5:f4:2b:cb:a6:67:db:37:85:7d:2e:13:1b:6a:ec:
15:4f:3f:dd:81:c5:8d:c4:41:50:90:1d:f6:a2:3f:
ce:54:55:62:50:26:2b:24:a5:73:19:b9:8a:82:ad:
9b:b7:4e:f5:30:1a:48:9d:0e:12:49:f5:8a:ec:da:
67:22:64:e1:cf:ed:cf:a6:c1:ac:10:74:62:ec:f2:
e6:c2:85:28:c2:b9:41:5e:11:01:dc:8e:5c:d2:b2:
e0:49:43:b1:d9:84:04:c9:75:9b:94:58:c3:6b:3e:
df:24:d8:d2:35:37:9c:36:3c:b1:ea:de:f5:bc:66:
74:08:bf:b1:bc:d2:6a:d3:b2:d7:f5:57:4a:51:82:
92:ec:d1:46:6f:ca:af:78:02:d1:6e:79:cb:ff:71:
be:75:c1:b8:ee:ea:c8:20:f7:fe:d2:a4:45:d7:18:
8e:48:dd:5d:27:39:64:91:ae:b9:26:a2:81:87:65:
cd:ee:64:12:18:e2:c7:3c:bd:9c:19:fe:9c:59:c9:
90:af:a0:0b:73:d7:d2:62:69:e6:2f:e9:64:14:e4:
9f:c9:2a:27:1c:68:a1:3e:75:7c:ed:c7:ee:45:a0:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:9D:02:E7:73:78:8D:A7:C5:4A:87:9F:0A:8A:04:00:AC:41:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B87FDFA435811EF8DCFC8BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
46:06:c3:a2:76:0e:79:b5:fc:63:b1:3e:0f:69:46:71:f5:0c:
6d:1f:18:af:fb:a0:41:98:ae:ac:c1:2a:a6:65:65:b9:a5:b4:
94:8a:f2:c0:87:4e:6e:e4:29:91:7b:46:31:1f:62:3b:ed:cf:
82:92:81:cc:02:fd:25:8f:e4:1b:c2:29:a0:f7:09:08:45:db:
c7:21:e5:cd:e0:12:5d:09:ac:d2:a5:19:68:8f:6f:2a:10:fa:
b8:9e:a0:42:b7:5e:f9:e5:cb:b0:a5:a7:35:3f:c0:e5:b7:31:
4a:51:61:b7:7a:f7:44:06:22:9e:b9:3c:5f:61:92:fc:7b:d9:
42:92:ec:18:d7:38:4c:e6:10:56:39:bc:57:3f:8f:51:77:80:
e7:cc:7d:c8:20:ce:bc:c3:be:80:1d:e5:3f:0d:49:f1:e6:e7:
8a:ee:f0:21:2d:aa:ff:d1:6f:53:4a:85:5b:5d:c6:1b:a9:a7:
5e:b1:e7:13:88:72:27:ee:36:d3:49:da:09:da:5a:81:af:c1:
6e:a8:61:e7:58:89:a2:b6:06:ed:e7:21:79:5b:7c:12:75:f2:
a8:0c:1d:48:10:ef:82:17:64:a1:4a:3c:92:a2:64:80:70:d2:
a3:81:c6:e2:64:b3:87:05:d0:fc:4b:6f:f4:07:23:46:e6:d5:
d1:91:c5:7f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJy1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE2MDk0NzI4WhcNMjQwODEzMDk0NzI4WjAYMRYw
FAYDVQQDEw02Njk2NDFiMy1iNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8r0S5rPYdFNBUzfTmHyhQOAFZX1PRWAZaXAQNPl9CvLpmfbN4V9LhMb
auwVTz/dgcWNxEFQkB32oj/OVFViUCYrJKVzGbmKgq2bt071MBpInQ4SSfWK7Npn
ImThz+3PpsGsEHRi7PLmwoUowrlBXhEB3I5c0rLgSUOx2YQEyXWblFjDaz7fJNjS
NTecNjyx6t71vGZ0CL+xvNJq07LX9VdKUYKS7NFGb8qveALRbnnL/3G+dcG47urI
IPf+0qRF1xiOSN1dJzlkka65JqKBh2XN7mQSGOLHPL2cGf6cWcmQr6ALc9fSYmnm
L+lkFOSfySonHGihPnV87cfuRaCUKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEFj
nQLnc3iNp8VKh58KigQArEELMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Qjg3RkRGQTQzNTgxMUVGOERDRkM4QkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQYMA0GCSqGSIb3DQEBCwUA
A4IBAQBGBsOidg55tfxjsT4PaUZx9QxtHxiv+6BBmK6swSqmZWW5pbSUivLAh05u
5CmRe0YxH2I77c+CkoHMAv0lj+Qbwimg9wkIRdvHIeXN4BJdCazSpRloj28qEPq4
nqBCt1755cuwpac1P8DltzFKUWG3evdEBiKeuTxfYZL8e9lCkuwY1zhM5hBWObxX
P49Rd4DnzH3IIM68w76AHeU/DUnx5ueK7vAhLar/0W9TSoVbXcYbqadesecTiHIn
7jbTSdoJ2lqBr8FuqGHnWImitgbt5yF5W3wSdfKoDB1IEO+CF2ShSjySomSAcNKj
gcbiZLOHBdD8S2/0ByNG5tXRkcV/
-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org