Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7744F9B8278011ED83DFD9B7F1222468.roa
File: 7744F9B8278011ED83DFD9B7F1222468.roa (raw, json)
Hash identifier: 1E1kgzpRGYT/D1BLoaSOHpemrV+LmJzK6x7izS18fAs=
Subject key identifier: 0A:3B:0C:DE:B0:82:DF:90:89:A4:E1:8B:27:1E:F8:6D:F0:04:F0:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1743
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7744F9B8278011ED83DFD9B7F1222468.roa
Signing time: Mon 29 Aug 2022 09:53:43 +0000
ROA not before: Tue 30 Aug 2022 09:53:39 +0000
ROA not after: Wed 07 Sep 2022 09:53:39 +0000
asID: 1239
IP address blocks: 156.231.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5955 (0x1743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 09:53:39 2022 GMT
Not After : Sep 7 09:53:39 2022 GMT
Subject: CN=630c8ca7-83f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:57:88:a8:cf:a6:ef:45:2a:58:ed:eb:fc:
58:9d:8b:fc:df:2d:1d:da:52:31:01:f6:ef:2d:c2:
f9:65:a1:30:de:52:2e:af:74:5e:70:6f:2c:8e:75:
dc:b8:1f:17:99:8c:49:bc:6e:92:9c:3f:69:c3:5d:
1f:be:65:4b:a0:0d:48:ac:ae:2b:0d:dd:78:fc:5e:
df:89:c0:f5:55:d4:85:b7:24:4c:c4:75:ca:81:25:
0f:db:1b:e1:d1:48:1c:f8:41:d7:21:24:5a:7d:f8:
11:bb:5a:7c:8d:9c:a9:a1:dc:a9:54:8a:2c:63:e7:
3e:2e:0e:de:b2:38:4e:00:87:0d:a8:50:76:c7:94:
25:39:3d:41:9b:ee:3e:1b:b1:93:5d:5b:25:f8:e1:
fe:b3:c2:f8:7e:30:9a:e4:69:e9:4f:43:3b:44:07:
fc:c8:da:bf:da:dc:5a:ab:93:a2:bd:a0:09:5d:8b:
d9:d8:b6:6a:86:a7:3f:af:2e:ae:04:66:c7:61:09:
b9:1a:f4:64:eb:a4:e7:c8:02:de:4b:ff:a7:5d:24:
84:eb:ea:80:cf:17:7e:29:92:11:b1:2c:25:17:dc:
94:5d:3f:52:ee:73:d9:38:6e:13:9a:0d:51:e5:a8:
fe:db:54:5a:71:ad:7d:74:4a:85:2c:b4:0e:4e:f7:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3B:0C:DE:B0:82:DF:90:89:A4:E1:8B:27:1E:F8:6D:F0:04:F0:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7744F9B8278011ED83DFD9B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:84:97:8f:09:db:4d:dc:22:d0:d0:eb:1a:0c:ef:10:f3:41:
5c:6a:0c:e1:3c:1f:7c:4b:5c:48:8b:68:43:11:b2:af:8e:9e:
e6:d1:4b:6d:d9:8e:ed:0f:1c:68:30:40:ad:70:dd:5d:88:23:
43:0f:ed:d0:91:3f:5f:e2:73:30:87:35:14:2c:24:95:1d:20:
12:71:cf:16:63:ba:d6:d0:67:07:ba:a6:66:11:fd:06:8b:aa:
ba:70:4c:8b:88:cc:05:65:2b:64:8f:65:c8:33:9b:1e:f3:b8:
cb:36:6d:d4:1c:35:2e:9e:75:e5:83:eb:a8:e9:7c:0c:d4:bc:
40:2f:c1:1d:5c:d9:50:4e:b7:64:fc:31:1d:d5:03:96:8f:bc:
df:b3:a7:40:73:3a:89:18:87:76:27:5e:94:bc:2c:ec:b6:36:
1a:d9:d9:54:62:0b:89:a2:83:d9:c5:25:54:53:43:27:f4:ab:
a7:62:db:cd:9e:23:32:1e:8b:68:70:e1:7d:7b:ac:e2:ac:91:
9b:09:25:1d:f1:cb:1a:aa:d4:b6:9d:d3:9b:1a:19:9c:a3:d6:
fb:bf:62:8a:0f:1a:35:ab:7a:84:ff:eb:d2:28:d9:00:f5:cb:
fb:ed:d6:49:b7:37:c3:f6:33:e5:27:73:ac:97:31:85:6d:71:
af:20:12:79
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF0MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MzAwOTUzMzlaFw0yMjA5MDcwOTUzMzlaMBgxFjAU
BgNVBAMMDTYzMGM4Y2E3LTgzZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCOleIqM+m70UqWO3r/Fidi/zfLR3aUjEB9u8twvlloTDeUi6vdF5wbyyO
ddy4HxeZjEm8bpKcP2nDXR++ZUugDUisrisN3Xj8Xt+JwPVV1IW3JEzEdcqBJQ/b
G+HRSBz4QdchJFp9+BG7WnyNnKmh3KlUiixj5z4uDt6yOE4Ahw2oUHbHlCU5PUGb
7j4bsZNdWyX44f6zwvh+MJrkaelPQztEB/zI2r/a3Fqrk6K9oAldi9nYtmqGpz+v
Lq4EZsdhCbka9GTrpOfIAt5L/6ddJITr6oDPF34pkhGxLCUX3JRdP1Luc9k4bhOa
DVHlqP7bVFpxrX10SoUstA5O9xm1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCjsM
3rCC35CJpOGLJx74bfAE8LQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzc3NDRGOUI4Mjc4MDExRUQ4M0RGRDlCN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASc53AwDQYJKoZIhvcNAQELBQAD
ggEBADqEl48J203cItDQ6xoM7xDzQVxqDOE8H3xLXEiLaEMRsq+OnubRS23Zju0P
HGgwQK1w3V2II0MP7dCRP1/iczCHNRQsJJUdIBJxzxZjutbQZwe6pmYR/QaLqrpw
TIuIzAVlK2SPZcgzmx7zuMs2bdQcNS6edeWD66jpfAzUvEAvwR1c2VBOt2T8MR3V
A5aPvN+zp0BzOokYh3YnXpS8LOy2NhrZ2VRiC4mig9nFJVRTQyf0q6di282eIzIe
i2hw4X17rOKskZsJJR3xyxqq1Lad05saGZyj1vu/YooPGjWreoT/69Io2QD1y/vt
1km3N8P2M+Unc6yXMYVtca8gEnk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org