Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87106F5C47F011EFA8A4FD7E762E951A.roa
File: 87106F5C47F011EFA8A4FD7E762E951A.roa (raw, json)
Hash identifier: OVBw+60oGuihrZwVONgf0fFcU+8Arv2/mAOSsiHrcEc=
Subject key identifier: 18:B5:2A:62:C8:13:19:9A:3E:23:9A:64:A9:62:63:A2:9C:3D:BD:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87106F5C47F011EFA8A4FD7E762E951A.roa
Signing time: Mon 22 Jul 2024 06:06:26 +0000
ROA not before: Mon 22 Jul 2024 06:06:22 +0000
ROA not after: Mon 29 Jul 2024 06:06:22 +0000
asID: 44559
IP address blocks: 156.225.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40535 (0x9e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:06:22 2024 GMT
Not After : Jul 29 06:06:22 2024 GMT
Subject: CN=669df6e1-45e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:29:51:06:93:9c:8f:8f:d0:8a:86:0a:bb:
e0:43:cd:3c:60:07:5e:27:af:50:7d:56:aa:43:66:
67:03:44:09:02:c2:74:41:28:c8:ab:e0:5d:36:9c:
49:05:7c:01:7b:d3:4f:0f:6d:17:3c:96:0c:aa:ce:
37:5d:df:02:cc:17:2d:df:18:e1:0f:84:cb:5a:16:
de:1d:2b:84:2d:dc:e4:42:fd:25:27:b2:1f:86:eb:
2f:26:34:2a:44:64:c5:e8:ff:7a:0a:83:7e:56:de:
e0:4b:2e:54:d5:af:6b:74:6a:5b:e1:c9:cb:8d:df:
26:61:8e:43:4e:d2:01:e5:58:c4:96:2c:de:1d:67:
08:64:74:49:4b:a2:33:9a:cc:31:e9:80:34:d3:61:
fe:68:3a:6f:a8:0d:76:3e:3a:7d:97:59:e8:2d:f3:
ca:27:75:b5:34:dc:5e:5f:7b:52:39:6d:2e:a3:c8:
6b:79:c7:d1:e5:05:05:00:fe:ff:8e:8c:d6:ac:3f:
18:59:1d:65:4d:3e:b2:79:47:94:23:74:51:50:15:
ab:d9:b7:2d:95:68:9d:9e:35:d4:ed:8b:f8:b7:a5:
1b:bf:03:1b:21:45:e2:09:7f:28:e1:62:5e:2a:5d:
0e:80:35:58:0e:d6:ae:77:09:8b:03:8f:af:ba:ab:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B5:2A:62:C8:13:19:9A:3E:23:9A:64:A9:62:63:A2:9C:3D:BD:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87106F5C47F011EFA8A4FD7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2b:41:a0:9c:f2:17:2e:d5:57:7f:1c:60:7a:10:c3:93:40:
bb:78:50:66:cd:55:3e:ba:68:84:25:ff:04:b4:dd:60:fa:a6:
2d:e8:0e:73:38:22:9a:dd:03:97:79:b6:8d:65:5d:ce:34:8f:
f3:c2:ed:83:41:5c:d0:30:2c:a5:ba:03:9f:ad:56:a3:99:18:
40:e1:b5:bb:ba:04:04:87:94:a0:af:77:37:e8:48:f3:19:02:
e3:2a:14:80:85:90:b0:35:ce:72:0d:c6:17:c1:40:68:91:a0:
05:1b:97:1f:4e:12:ad:e7:64:8b:e8:55:49:79:a9:c1:92:b5:
6b:99:db:4c:7b:74:1e:f1:57:1a:f1:1d:45:23:55:8a:a8:9e:
dd:66:15:62:43:7c:02:a1:7e:e5:db:92:91:f8:41:04:98:0d:
5d:91:c8:c7:3e:72:87:93:8c:56:3f:9f:f6:c6:3c:06:1b:2e:
43:c8:42:8f:fb:a6:1a:1a:38:05:8d:3c:62:94:98:9e:99:de:
f8:54:0e:a3:10:91:2d:f9:43:ee:f7:a7:19:43:77:4a:30:1c:
8d:a7:fa:36:e3:14:d7:01:e1:3b:39:38:98:58:f2:0c:e8:c0:
f2:8c:ee:37:9a:d9:e2:1a:22:1e:64:59:57:87:ab:5b:d1:6c:
62:26:7e:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ5XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDYwNjIyWhcNMjQwNzI5MDYwNjIyWjAYMRYw
FAYDVQQDEw02NjlkZjZlMS00NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7V8pUQaTnI+P0IqGCrvgQ808YAdeJ69QfVaqQ2ZnA0QJAsJ0QSjIq+Bd
NpxJBXwBe9NPD20XPJYMqs43Xd8CzBct3xjhD4TLWhbeHSuELdzkQv0lJ7Ifhusv
JjQqRGTF6P96CoN+Vt7gSy5U1a9rdGpb4cnLjd8mYY5DTtIB5VjElizeHWcIZHRJ
S6Izmswx6YA002H+aDpvqA12Pjp9l1noLfPKJ3W1NNxeX3tSOW0uo8hrecfR5QUF
AP7/jozWrD8YWR1lTT6yeUeUI3RRUBWr2bctlWidnjXU7Yv4t6UbvwMbIUXiCX8o
4WJeKl0OgDVYDtaudwmLA4+vuquhrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBi1
KmLIExmaPiOaZKliY6KcPb3pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NzEwNkY1QzQ3RjAxMUVGQThBNEZEN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFLMA0GCSqGSIb3DQEBCwUA
A4IBAQBAK0GgnPIXLtVXfxxgehDDk0C7eFBmzVU+umiEJf8EtN1g+qYt6A5zOCKa
3QOXebaNZV3ONI/zwu2DQVzQMCylugOfrVajmRhA4bW7ugQEh5Sgr3c36EjzGQLj
KhSAhZCwNc5yDcYXwUBokaAFG5cfThKt52SL6FVJeanBkrVrmdtMe3Qe8Vca8R1F
I1WKqJ7dZhViQ3wCoX7l25KR+EEEmA1dkcjHPnKHk4xWP5/2xjwGGy5DyEKP+6Ya
GjgFjTxilJiemd74VA6jEJEt+UPu96cZQ3dKMByNp/o24xTXAeE7OTiYWPIM6MDy
jO43mtniGiIeZFlXh6tb0WxiJn7N
-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org