Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DADE4CCB61111ECA94FDF935A40D577.roa
File: 6DADE4CCB61111ECA94FDF935A40D577.roa (raw, json)
Hash identifier: D26gA43Or9TNmVUpDDVCaMXOVIaHOgLdS0XZunpeYLM=
Subject key identifier: D0:EF:21:81:8C:05:BA:A1:44:92:C8:21:40:27:FA:AA:C6:92:EA:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DADE4CCB61111ECA94FDF935A40D577.roa
Signing time: Thu 07 Apr 2022 01:24:11 +0000
ROA not before: Thu 07 Apr 2022 01:24:08 +0000
ROA not after: Sun 31 Jul 2022 01:24:08 +0000
asID: 328608
IP address blocks: 156.249.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4834 (0x12e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 01:24:08 2022 GMT
Not After : Jul 31 01:24:08 2022 GMT
Subject: CN=624e3d3b-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:b6:f9:93:3d:b3:3a:8c:e0:02:b3:c4:ba:
5d:37:8f:a0:17:01:5d:dc:9e:f4:35:25:c5:a6:b0:
c1:4d:1c:a1:8c:79:2d:41:c9:26:5b:7c:7d:16:8c:
35:28:d4:6d:eb:58:02:e7:10:0f:da:71:e5:c6:17:
ee:f6:6a:5b:7f:42:db:5e:60:83:aa:3c:5a:7d:3a:
0b:1d:74:16:3e:d5:db:f6:73:e0:3f:bd:84:1d:f6:
04:2a:3f:d1:b5:36:fe:41:58:c6:88:dc:7a:62:0a:
5c:30:35:c5:ad:20:e5:0e:7c:58:d9:56:31:f3:c1:
2f:36:97:14:70:86:90:fb:06:3f:aa:69:10:82:d8:
36:43:f5:99:ed:b4:6c:51:75:bf:f9:ac:0e:3b:b4:
23:9f:0e:96:60:a2:49:da:3f:d1:3c:87:6b:b9:a7:
38:f1:55:1a:4a:cd:78:50:34:30:58:5a:36:a6:de:
ee:32:5c:f0:77:bb:71:9a:54:67:56:8c:b2:ed:7c:
00:af:6a:3d:3f:77:ac:e3:22:17:7a:b2:e8:1d:73:
b6:d9:8a:3b:57:f7:8d:69:7e:b3:7d:10:5c:2f:f1:
db:eb:70:2a:79:24:c7:14:d4:e5:cb:2b:7d:fe:f7:
9c:c2:02:4d:55:68:09:24:69:f8:ef:04:54:c2:4d:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:21:81:8C:05:BA:A1:44:92:C8:21:40:27:FA:AA:C6:92:EA:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DADE4CCB61111ECA94FDF935A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:27:1e:85:40:f6:af:96:ca:9a:2b:12:c3:66:53:b9:f8:91:
21:d4:50:61:f8:b7:15:04:c3:38:95:e1:ee:1b:31:4c:ae:67:
cb:1c:40:6e:39:c4:c4:6a:2d:ac:0e:65:9f:a9:bf:24:07:22:
85:b3:bf:02:d8:46:fb:7f:56:29:8b:b5:36:52:68:f1:47:8a:
80:89:64:2d:4e:44:52:67:05:0a:3c:9e:25:f4:44:75:be:92:
62:7d:7b:9a:88:cd:58:41:f9:a0:2e:ab:de:ee:d4:4b:93:c3:
14:7e:c5:04:54:73:da:db:ad:80:a9:a9:b1:ff:c0:fa:5f:43:
9f:79:ac:bc:8f:64:a0:eb:a6:4a:0d:75:13:a1:48:d7:24:17:
b5:ad:93:1f:81:2c:52:54:2f:99:cb:05:36:5e:86:d8:ac:44:
88:38:78:6c:76:d1:0c:61:51:c5:ae:2a:eb:b4:b4:75:ad:8e:
71:2d:e0:07:67:c2:8f:7d:0a:dd:e1:ff:e1:6f:80:ec:88:9d:
05:f6:38:6e:7f:3b:ac:7c:58:56:46:47:e3:71:61:68:41:ea:
8d:72:ed:b2:31:89:bc:5c:a5:fe:c1:1d:f5:7d:fb:e6:cc:5a:
75:96:1d:77:fd:dd:d0:03:06:71:19:7f:65:0d:93:21:99:db:
63:f7:f3:4f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MDcwMTI0MDhaFw0yMjA3MzEwMTI0MDhaMBgxFjAU
BgNVBAMMDTYyNGUzZDNiLWJhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzmbb5kz2zOozgArPEul03j6AXAV3cnvQ1JcWmsMFNHKGMeS1BySZbfH0W
jDUo1G3rWALnEA/aceXGF+72alt/QtteYIOqPFp9OgsddBY+1dv2c+A/vYQd9gQq
P9G1Nv5BWMaI3HpiClwwNcWtIOUOfFjZVjHzwS82lxRwhpD7Bj+qaRCC2DZD9Znt
tGxRdb/5rA47tCOfDpZgoknaP9E8h2u5pzjxVRpKzXhQNDBYWjam3u4yXPB3u3Ga
VGdWjLLtfACvaj0/d6zjIhd6sugdc7bZijtX941pfrN9EFwv8dvrcCp5JMcU1OXL
K33+95zCAk1VaAkkafjvBFTCTfyLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU0O8h
gYwFuqFEksghQCf6qsaS6h0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzZEQURFNENDQjYxMTExRUNBOTRGREY5MzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+RkwDQYJKoZIhvcNAQELBQAD
ggEBAH4nHoVA9q+WyporEsNmU7n4kSHUUGH4txUEwziV4e4bMUyuZ8scQG45xMRq
LawOZZ+pvyQHIoWzvwLYRvt/VimLtTZSaPFHioCJZC1ORFJnBQo8niX0RHW+kmJ9
e5qIzVhB+aAuq97u1EuTwxR+xQRUc9rbrYCpqbH/wPpfQ595rLyPZKDrpkoNdROh
SNckF7Wtkx+BLFJUL5nLBTZehtisRIg4eGx20QxhUcWuKuu0tHWtjnEt4Adnwo99
Ct3h/+FvgOyInQX2OG5/O6x8WFZGR+NxYWhB6o1y7bIxibxcpf7BHfV9++bMWnWW
HXf93dADBnEZf2UNkyGZ22P3808=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org