Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C04786E3A4A11EE9D361A174AD9E6FC.roa
File: 8C04786E3A4A11EE9D361A174AD9E6FC.roa (raw, json)
Hash identifier: cEl4yMj+2byd022ljDRdYNmY62jSRSqFCl9c6ls1K1Y=
Subject key identifier: 55:31:45:EA:E7:46:3A:30:C9:06:7F:25:47:77:0B:97:14:2D:1A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3542
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C04786E3A4A11EE9D361A174AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:30:35 +0000
ROA not before: Mon 14 Aug 2023 02:30:31 +0000
ROA not after: Sat 13 Jan 2024 02:30:31 +0000
asID: 139057
IP address blocks: 156.225.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:30:31 2023 GMT
Not After : Jan 13 02:30:31 2024 GMT
Subject: CN=64d991cb-f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:a9:c3:b8:2f:37:f4:64:4d:d2:76:10:8a:
f3:de:91:2b:51:ab:32:3a:b2:bb:16:60:7a:10:68:
0f:b9:54:9d:42:94:e1:6d:48:cb:d8:15:f9:25:2c:
92:f7:a6:84:49:d7:5b:1b:23:56:48:9f:cb:ce:d0:
c4:69:94:e0:8c:0b:23:85:90:cf:9f:c2:db:0c:a8:
62:34:e6:a4:6d:c8:e7:e4:4d:46:a3:8e:c6:49:0d:
93:3a:bb:5f:05:fe:4b:7d:2d:5d:f4:8f:0c:34:4e:
62:b0:cc:6b:5a:ac:e0:57:72:4e:e2:6f:29:66:9f:
3c:b2:4a:ef:d2:ed:37:ec:a0:cb:8e:3c:25:1c:04:
f4:eb:36:9c:f6:8e:23:55:46:20:be:70:bd:da:ec:
a1:9c:24:4f:3c:d5:81:b1:6c:5d:bb:76:72:23:f7:
d7:c1:97:52:e5:44:f1:2d:80:1b:c4:0d:d6:19:c6:
7a:2c:eb:d2:8a:76:47:ca:32:f2:4d:72:3a:ab:ae:
fe:98:7c:5c:f8:29:4c:23:0d:d1:6f:e5:37:8a:d7:
ba:9f:7d:31:1f:1f:82:e3:82:a5:cc:f0:0b:40:a8:
cb:64:b1:1d:37:24:ad:5a:b8:e3:e9:37:4e:8d:89:
03:91:47:5f:f0:31:27:8c:c5:f5:b0:7d:4b:0a:95:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:45:EA:E7:46:3A:30:C9:06:7F:25:47:77:0B:97:14:2D:1A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C04786E3A4A11EE9D361A174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:29:4d:d9:35:21:bf:07:64:fa:8c:2d:e5:58:bc:25:9e:e0:
1d:3f:4e:33:95:11:dc:b2:04:a6:36:be:ff:12:ff:f8:c3:6a:
25:24:df:a1:17:29:77:78:ed:4f:8b:39:dc:e1:b7:e0:01:7b:
41:d9:57:1d:56:ae:fa:30:b8:77:c4:f0:0b:a2:6b:f7:df:be:
85:0c:df:a1:30:a5:fa:a6:52:c6:b8:23:12:46:32:78:21:c0:
e9:d7:78:28:99:7e:7c:75:8b:98:a3:6a:1d:6a:bd:7d:ee:fc:
af:48:8e:3f:1b:e7:46:da:b6:01:88:e0:e8:d9:b7:e3:d0:40:
ff:70:12:b6:9c:52:5e:48:a7:53:f1:9c:69:0c:30:3f:73:93:
de:f5:96:e9:60:a9:7e:4a:18:79:e1:a3:ca:c5:1f:91:6d:95:
8a:9e:00:cb:c5:51:ba:93:9b:31:af:de:64:6c:88:ef:6a:70:
43:7c:c9:0c:75:47:29:a7:88:dd:88:48:da:6d:ac:e2:3f:cb:
24:e2:a0:e9:27:bd:af:2c:3c:2c:5a:f2:fd:5c:c7:88:df:4b:
d0:2e:31:4d:e3:e5:b0:27:60:ae:93:b9:bb:a1:54:71:1f:05:
32:c4:cd:87:30:1c:e3:1d:83:48:0e:f8:d9:cb:9e:90:18:97:
a8:e0:77:b5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTQwMjMwMzFaFw0yNDAxMTMwMjMwMzFaMBgxFjAU
BgNVBAMTDTY0ZDk5MWNiLWY2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrwqnDuC839GRN0nYQivPekStRqzI6srsWYHoQaA+5VJ1ClOFtSMvYFfkl
LJL3poRJ11sbI1ZIn8vO0MRplOCMCyOFkM+fwtsMqGI05qRtyOfkTUajjsZJDZM6
u18F/kt9LV30jww0TmKwzGtarOBXck7ibylmnzyySu/S7TfsoMuOPCUcBPTrNpz2
jiNVRiC+cL3a7KGcJE881YGxbF27dnIj99fBl1LlRPEtgBvEDdYZxnos69KKdkfK
MvJNcjqrrv6YfFz4KUwjDdFv5TeK17qffTEfH4LjgqXM8AtAqMtksR03JK1auOPp
N06NiQORR1/wMSeMxfWwfUsKlf/TAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVTFF
6udGOjDJBn8lR3cLlxQtGmYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhDMDQ3ODZFM0E0QTExRUU5RDM2MUExNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4WAwDQYJKoZIhvcNAQELBQAD
ggEBAFopTdk1Ib8HZPqMLeVYvCWe4B0/TjOVEdyyBKY2vv8S//jDaiUk36EXKXd4
7U+LOdzht+ABe0HZVx1WrvowuHfE8Auia/ffvoUM36EwpfqmUsa4IxJGMnghwOnX
eCiZfnx1i5ijah1qvX3u/K9Ijj8b50batgGI4OjZt+PQQP9wEracUl5Ip1PxnGkM
MD9zk971lulgqX5KGHnho8rFH5FtlYqeAMvFUbqTmzGv3mRsiO9qcEN8yQx1Rymn
iN2ISNptrOI/yyTioOknva8sPCxa8v1cx4jfS9AuMU3j5bAnYK6TubuhVHEfBTLE
zYcwHOMdg0gO+NnLnpAYl6jgd7U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:42 2024 by rpki-client on console-ams.rpki-client.org