Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C4DAFB23E9A11EFB3A27F54762E951A.roa
File: 7C4DAFB23E9A11EFB3A27F54762E951A.roa (raw, json)
Hash identifier: zo3wxvGxAfxzTG40nr8Hi2SembgednOIcT904w6ei5Y=
Subject key identifier: 81:D8:C0:3B:73:60:EE:A6:7C:D1:58:5E:76:75:78:53:88:04:0D:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C4DAFB23E9A11EFB3A27F54762E951A.roa
Signing time: Wed 10 Jul 2024 08:57:50 +0000
ROA not before: Wed 10 Jul 2024 08:57:47 +0000
ROA not after: Fri 02 Aug 2024 08:57:47 +0000
asID: 139646
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39549 (0x9a7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:57:47 2024 GMT
Not After : Aug 2 08:57:47 2024 GMT
Subject: CN=668e4d0e-c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:de:2b:be:5f:63:da:77:f2:6e:ab:d5:83:
e6:f4:39:75:c7:a2:be:20:1d:26:f5:1c:00:47:52:
23:2f:06:ab:9b:84:d5:77:12:66:f8:69:e5:c7:70:
a8:7f:37:30:6f:d9:39:da:cc:11:ae:8d:76:df:b4:
8c:a0:ea:00:91:c7:ee:d8:87:39:01:7e:f0:f6:88:
9d:82:ec:6d:01:4f:dc:fa:dd:d6:76:0c:25:d1:b1:
ad:f1:4e:5b:19:20:c4:1f:b3:7c:8a:98:61:47:c9:
a3:7a:9b:fd:eb:8d:87:d4:0b:4f:29:87:9b:91:71:
cb:7f:b4:4e:95:11:f9:2a:b5:14:a2:d7:9f:e6:58:
ba:ef:57:08:e6:53:82:3e:83:6e:e9:54:4f:17:b5:
d9:09:52:0a:df:25:34:de:bf:d9:25:f1:7b:78:dd:
e2:e3:6a:66:22:8c:2a:5a:6a:e4:6c:a5:05:79:d9:
33:77:cd:52:8a:68:0c:1a:3f:e1:b5:5a:65:4d:92:
89:10:cd:8b:3d:fb:00:5d:38:26:9f:f6:5c:2f:dc:
8d:52:cb:2d:52:3c:e8:9f:90:75:75:28:59:b1:c6:
dd:21:2e:05:de:64:70:a6:1d:61:04:3d:8b:e4:f3:
d3:a1:0b:bb:08:5e:70:ed:1e:fe:98:02:10:76:8b:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:C0:3B:73:60:EE:A6:7C:D1:58:5E:76:75:78:53:88:04:0D:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C4DAFB23E9A11EFB3A27F54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
65:a6:45:de:61:11:06:5c:d7:58:45:00:67:d5:d9:49:e0:fb:
40:65:0d:ad:5a:d9:54:b2:9f:c7:de:66:26:22:0a:f7:7a:d8:
d9:cd:a0:84:5b:24:cd:46:ef:19:bf:b2:d4:9e:3d:fe:85:87:
42:d5:dc:2d:af:ea:30:da:8b:59:b4:25:1f:70:16:c2:4d:a3:
65:a4:c4:07:3b:83:a6:e9:a3:01:e1:10:5f:a1:ad:bc:6d:72:
4b:9e:06:63:f8:93:91:80:4a:cf:97:ab:50:65:53:bd:ec:56:
46:9d:84:44:93:58:1f:ea:fa:03:ad:33:90:b8:c6:b6:cf:ee:
b1:3c:f6:7e:5e:b9:21:00:84:50:a1:d8:49:80:3a:42:de:f8:
79:93:6a:8b:27:cc:32:8f:2f:71:f0:e6:5a:49:8a:bb:66:d9:
23:e8:1a:a9:db:1e:bc:17:e1:4a:5c:b5:0c:61:ee:54:91:61:
7a:1b:14:18:f2:d6:f0:75:cb:2b:eb:6c:a2:52:a7:83:3c:6a:
1e:55:78:6d:1c:d7:c5:b9:75:95:2d:9d:9e:d2:72:4a:95:86:
97:d6:f2:dc:da:e0:01:10:08:6c:5b:75:34:53:b6:2d:51:58:
1e:53:b2:76:49:5e:56:f5:bf:48:38:9c:31:bb:67:ce:2a:40:
22:aa:94:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJp9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEwMDg1NzQ3WhcNMjQwODAyMDg1NzQ3WjAYMRYw
FAYDVQQDEw02NjhlNGQwZS1jMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsG7eK75fY9p38m6r1YPm9Dl1x6K+IB0m9RwAR1IjLwarm4TVdxJm+Gnl
x3Cofzcwb9k52swRro1237SMoOoAkcfu2Ic5AX7w9oidguxtAU/c+t3Wdgwl0bGt
8U5bGSDEH7N8iphhR8mjepv9642H1AtPKYebkXHLf7ROlRH5KrUUotef5li671cI
5lOCPoNu6VRPF7XZCVIK3yU03r/ZJfF7eN3i42pmIowqWmrkbKUFedkzd81SimgM
Gj/htVplTZKJEM2LPfsAXTgmn/ZcL9yNUsstUjzon5B1dShZscbdIS4F3mRwph1h
BD2L5PPToQu7CF5w7R7+mAIQdosI7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIHY
wDtzYO6mfNFYXnZ1eFOIBA1TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QzREQUZCMjNFOUExMUVGQjNBMjdGNTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPYQMA0GCSqGSIb3DQEBCwUA
A4IBAQBlpkXeYREGXNdYRQBn1dlJ4PtAZQ2tWtlUsp/H3mYmIgr3etjZzaCEWyTN
Ru8Zv7LUnj3+hYdC1dwtr+ow2otZtCUfcBbCTaNlpMQHO4Om6aMB4RBfoa28bXJL
ngZj+JORgErPl6tQZVO97FZGnYREk1gf6voDrTOQuMa2z+6xPPZ+XrkhAIRQodhJ
gDpC3vh5k2qLJ8wyjy9x8OZaSYq7Ztkj6Bqp2x68F+FKXLUMYe5UkWF6GxQY8tbw
dcsr62yiUqeDPGoeVXhtHNfFuXWVLZ2e0nJKlYaX1vLc2uABEAhsW3U0U7YtUVge
U7J2SV5W9b9IOJwxu2fOKkAiqpSB
-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org