Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/733F0A607F0E11EF9D1BCC4E762E951A.roa
File: 733F0A607F0E11EF9D1BCC4E762E951A.roa (raw, json)
Hash identifier: J0ZElualGgXRnsvDb9hwwL4AbSK6zpAoEC0rXb2I6Qk=
Subject key identifier: 3B:E0:7B:A4:7B:A2:38:9B:95:70:69:3C:30:4B:9B:54:BC:3C:92:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/733F0A607F0E11EF9D1BCC4E762E951A.roa
Signing time: Mon 30 Sep 2024 09:29:11 +0000
ROA not before: Mon 30 Sep 2024 09:29:08 +0000
ROA not after: Thu 21 Nov 2024 09:29:08 +0000
asID: 63139
IP address blocks: 156.229.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48573 (0xbdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:29:08 2024 GMT
Not After : Nov 21 09:29:08 2024 GMT
Subject: CN=66fa6f67-610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:c4:eb:ba:0b:0e:ea:73:19:74:8a:86:26:
cf:b0:cd:28:c0:2b:2e:5c:ba:e3:e4:d5:1b:6d:d7:
2d:be:49:44:0a:93:85:59:c8:97:be:19:f9:fb:4e:
78:c2:76:e2:59:90:0b:43:da:3a:4f:bf:18:b6:6b:
e4:46:f7:68:4b:f0:6f:66:35:56:02:39:68:35:1f:
75:a3:97:35:df:4d:74:55:ab:6d:45:c4:22:84:8c:
e1:38:66:fb:83:a5:a7:ff:7c:de:65:ca:be:19:41:
a5:e6:77:68:b3:27:eb:62:cc:bf:b7:9c:cb:23:21:
27:84:c7:5c:9e:82:61:24:6e:d1:81:7d:3b:e2:10:
5c:e8:e2:ee:b8:1b:ce:d4:f7:7b:9c:2a:14:3c:f7:
3f:06:d7:34:7a:da:82:6e:40:8a:35:6c:9c:37:83:
f7:cc:59:18:2b:8f:7d:40:78:96:36:78:88:65:a5:
7d:d7:79:c9:79:1b:08:78:6d:50:59:84:a7:fb:08:
02:8b:46:85:8e:54:c6:d9:42:04:f0:67:30:44:7d:
3b:4b:29:d6:69:61:9a:c9:7d:7f:03:40:95:c0:2b:
c3:9b:18:6f:6b:37:2e:13:49:81:98:f4:c0:36:4a:
e7:25:ac:40:0c:0d:b8:79:9a:60:28:a4:85:89:c8:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:7B:A4:7B:A2:38:9B:95:70:69:3C:30:4B:9B:54:BC:3C:92:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/733F0A607F0E11EF9D1BCC4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b1:67:75:df:95:4c:4f:39:3f:02:d9:6e:9a:43:3a:97:c8:
65:77:a2:73:ee:30:4b:13:9a:b1:b9:39:a7:1b:a6:31:5a:b6:
ba:1c:95:77:65:38:b0:22:af:84:fd:27:ad:f2:fa:04:3e:b5:
95:d1:90:52:91:2a:b4:59:da:99:4e:8b:72:ce:72:e1:d6:b9:
e7:e3:b4:8e:0e:aa:49:18:be:7e:13:45:9d:80:a5:5a:13:b7:
39:8d:9c:0a:11:90:0a:8d:9d:e7:84:58:14:b1:ab:e8:58:92:
d6:e4:62:c3:bf:9c:9f:f3:50:b1:8b:fb:c6:79:a1:5e:00:92:
a1:a9:2c:f6:7d:8f:00:cb:04:33:a3:b1:3e:61:4a:79:09:97:
97:36:7c:ad:1e:76:47:0c:eb:6b:51:12:66:e1:74:fd:05:32:
fc:b1:04:38:13:c9:7f:35:b1:23:1e:77:1f:2b:a5:67:2e:01:
11:cd:ef:90:b9:bd:57:54:9f:f0:67:45:77:0d:6e:76:3d:5c:
c9:75:54:d8:62:01:67:87:aa:e7:e5:44:48:8e:43:c4:4b:87:
6b:90:af:ad:52:46:da:0f:e5:51:98:6f:03:21:de:6d:74:ae:
18:cb:b8:cf:54:91:a7:a0:29:16:8e:ca:c9:e9:eb:7d:ce:a8:
bb:d3:03:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAL29MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTMwMDkyOTA4WhcNMjQxMTIxMDkyOTA4WjAYMRYw
FAYDVQQDEw02NmZhNmY2Ny02MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5+DE67oLDupzGXSKhibPsM0owCsuXLrj5NUbbdctvklECpOFWciXvhn5
+054wnbiWZALQ9o6T78YtmvkRvdoS/BvZjVWAjloNR91o5c13010VattRcQihIzh
OGb7g6Wn/3zeZcq+GUGl5ndosyfrYsy/t5zLIyEnhMdcnoJhJG7RgX074hBc6OLu
uBvO1Pd7nCoUPPc/Btc0etqCbkCKNWycN4P3zFkYK499QHiWNniIZaV913nJeRsI
eG1QWYSn+wgCi0aFjlTG2UIE8GcwRH07SynWaWGayX1/A0CVwCvDmxhvazcuE0mB
mPTANkrnJaxADA24eZpgKKSFicgQ+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDvg
e6R7ojiblXBpPDBLm1S8PJINMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MzNGMEE2MDdGMEUxMUVGOUQxQkNDNEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUxMA0GCSqGSIb3DQEBCwUA
A4IBAQAxsWd135VMTzk/AtlumkM6l8hld6Jz7jBLE5qxuTmnG6YxWra6HJV3ZTiw
Iq+E/Set8voEPrWV0ZBSkSq0WdqZTotyznLh1rnn47SODqpJGL5+E0WdgKVaE7c5
jZwKEZAKjZ3nhFgUsavoWJLW5GLDv5yf81Cxi/vGeaFeAJKhqSz2fY8AywQzo7E+
YUp5CZeXNnytHnZHDOtrURJm4XT9BTL8sQQ4E8l/NbEjHncfK6VnLgERze+Qub1X
VJ/wZ0V3DW52PVzJdVTYYgFnh6rn5URIjkPES4drkK+tUkbaD+VRmG8DId5tdK4Y
y7jPVJGnoCkWjsrJ6et9zqi70wN4
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org