Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F177003E4D11EDAED1C6CDF1222468.roa
File: 71F177003E4D11EDAED1C6CDF1222468.roa (raw, json)
Hash identifier: uMgW/E2BgWvYelfr0SbH6uzYnd9uC2epJLvEqzUi4/8=
Subject key identifier: DF:19:54:E1:59:0E:99:FF:7F:6C:73:52:38:9C:E9:59:B1:33:02:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 189B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F177003E4D11EDAED1C6CDF1222468.roa
Signing time: Tue 27 Sep 2022 10:16:26 +0000
ROA not before: Tue 27 Sep 2022 10:16:22 +0000
ROA not after: Mon 27 Feb 2023 10:16:22 +0000
asID: 1239
IP address blocks: 156.243.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6299 (0x189b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 10:16:22 2022 GMT
Not After : Feb 27 10:16:22 2023 GMT
Subject: CN=6332cd7a-0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:f1:05:6b:72:71:d9:90:4a:99:9a:0c:db:
8f:58:a7:39:6b:16:5e:1c:0c:17:e0:4c:9f:16:a5:
a3:72:23:34:68:07:06:1d:36:33:33:64:a8:41:bb:
5c:e2:00:c4:aa:90:85:dc:09:72:97:28:23:0d:71:
18:4f:f5:b6:3f:64:59:4c:63:da:f8:8e:aa:31:2d:
c8:29:f5:c1:75:cc:7c:07:64:e1:bb:17:01:b0:97:
56:6f:4b:b0:18:24:fc:f1:8b:47:c3:9a:e9:09:fe:
72:89:38:cb:f3:26:eb:f2:11:56:eb:a6:2f:cf:0e:
da:e8:9c:61:97:20:39:96:34:ad:69:c6:2c:3c:06:
d3:a1:a6:88:ee:32:b0:e1:b0:66:45:d3:3e:6f:40:
20:39:bf:ea:fd:5f:64:eb:21:d5:7d:51:7e:11:8a:
6c:79:15:93:48:30:2b:e9:cb:a0:58:0c:6b:ed:fe:
ad:ce:f5:10:0a:40:02:11:1d:18:10:56:ca:56:29:
51:87:ae:71:cf:45:b0:05:bc:c5:00:1b:37:0c:44:
e3:b4:28:1b:22:69:6d:09:ee:5b:9f:de:b3:dc:80:
60:ff:72:54:99:6c:74:43:1e:b5:a4:38:01:04:ee:
2a:50:fc:24:8e:41:1b:fd:0a:8b:ed:76:9c:9a:94:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:54:E1:59:0E:99:FF:7F:6C:73:52:38:9C:E9:59:B1:33:02:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F177003E4D11EDAED1C6CDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:ee:d9:89:10:b0:a0:e0:49:77:b7:d2:f1:bc:30:25:22:cd:
ae:0a:6f:41:5d:f6:4a:2c:74:b1:f7:3d:23:77:28:6b:e6:ca:
c2:1e:a4:5e:c7:df:ba:85:83:96:8a:c8:7a:f8:ce:bc:df:53:
8e:29:ef:99:56:9c:35:f2:b6:4c:c0:01:f6:b6:13:bf:6f:85:
02:80:01:57:d5:f9:38:12:94:2e:d3:af:7e:76:e8:fe:55:78:
9e:24:5d:a4:42:27:46:30:1d:dd:71:a6:8c:00:9c:7c:b6:fa:
ab:50:38:19:61:d2:cc:a6:5c:28:36:8f:ee:c6:e4:e6:81:9d:
60:15:9c:a2:24:f9:6e:88:c1:6b:71:7b:22:d4:37:3d:9b:d2:
b5:22:c1:63:c1:ae:10:cf:3c:6f:bf:ea:85:b8:85:81:02:51:
81:94:22:db:7e:22:aa:5c:2a:94:c6:1b:20:05:53:3a:d1:fa:
cf:19:f9:3b:4b:f0:2a:47:c5:29:c8:43:90:0f:e8:de:aa:cb:
57:e7:a5:da:73:25:b0:1f:31:40:e3:a8:30:9e:b0:93:d1:bc:
5e:29:24:f8:15:0e:f0:ed:9c:c3:e4:b0:89:6a:20:77:73:a2:
b4:d8:43:5f:a3:33:c4:4c:86:39:4f:3d:93:69:14:e7:3d:a4:
de:c8:1b:90
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MjcxMDE2MjJaFw0yMzAyMjcxMDE2MjJaMBgxFjAU
BgNVBAMMDTYzMzJjZDdhLTBiMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI4/EFa3Jx2ZBKmZoM249YpzlrFl4cDBfgTJ8WpaNyIzRoBwYdNjMzZKhB
u1ziAMSqkIXcCXKXKCMNcRhP9bY/ZFlMY9r4jqoxLcgp9cF1zHwHZOG7FwGwl1Zv
S7AYJPzxi0fDmukJ/nKJOMvzJuvyEVbrpi/PDtronGGXIDmWNK1pxiw8BtOhpoju
MrDhsGZF0z5vQCA5v+r9X2TrIdV9UX4Rimx5FZNIMCvpy6BYDGvt/q3O9RAKQAIR
HRgQVspWKVGHrnHPRbAFvMUAGzcMROO0KBsiaW0J7luf3rPcgGD/clSZbHRDHrWk
OAEE7ipQ/CSOQRv9CovtdpyalFJrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU3xlU
4VkOmf9/bHNSOJzpWbEzAtAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzcxRjE3NzAwM0U0RDExRURBRUQxQzZDREYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAac88AwDQYJKoZIhvcNAQELBQAD
ggEBAIzu2YkQsKDgSXe30vG8MCUiza4Kb0Fd9kosdLH3PSN3KGvmysIepF7H37qF
g5aKyHr4zrzfU44p75lWnDXytkzAAfa2E79vhQKAAVfV+TgSlC7Tr3526P5VeJ4k
XaRCJ0YwHd1xpowAnHy2+qtQOBlh0symXCg2j+7G5OaBnWAVnKIk+W6IwWtxeyLU
Nz2b0rUiwWPBrhDPPG+/6oW4hYECUYGUItt+IqpcKpTGGyAFUzrR+s8Z+TtL8CpH
xSnIQ5AP6N6qy1fnpdpzJbAfMUDjqDCesJPRvF4pJPgVDvDtnMPksIlqIHdzorTY
Q1+jM8RMhjlPPZNpFOc9pN7IG5A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org