Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5402DE7F0C11EF9D69D241762E951A.roa
File: 8F5402DE7F0C11EF9D69D241762E951A.roa (raw, json)
Hash identifier: Jojme0HwDPc+mV9FRV0rgeq3MpT8QrZqtwZSfpcMjF8=
Subject key identifier: FF:9D:70:B0:C4:A2:5A:3E:FF:B9:49:76:5B:B0:9A:49:BD:95:30:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5402DE7F0C11EF9D69D241762E951A.roa
Signing time: Mon 30 Sep 2024 09:15:39 +0000
ROA not before: Mon 30 Sep 2024 09:15:36 +0000
ROA not after: Thu 21 Nov 2024 09:15:36 +0000
asID: 63139
IP address blocks: 156.227.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48549 (0xbda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:15:36 2024 GMT
Not After : Nov 21 09:15:36 2024 GMT
Subject: CN=66fa6c3b-74c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:92:fb:b7:10:ea:26:9e:8e:88:84:fc:29:
9a:df:8f:50:20:0a:88:90:7e:0a:66:97:b9:f5:e1:
61:ea:55:80:dc:fa:ec:3d:50:fc:cb:c5:58:70:0a:
41:af:84:86:d7:db:75:d6:84:01:dc:e9:ce:d6:33:
80:dd:f3:ab:58:5f:92:d7:e9:2c:eb:1c:b5:64:87:
7b:86:6a:14:4b:1b:f0:d3:b9:43:b0:97:b6:81:b2:
6d:13:3b:06:94:41:b1:e3:00:de:69:3d:35:94:22:
5f:3d:06:6c:d3:e9:82:79:ee:a9:71:44:47:fe:be:
96:98:7b:ea:ee:35:6d:9b:29:cb:49:fe:2e:63:ef:
c3:f7:c8:7b:86:13:3e:62:c5:8a:cb:67:03:00:a3:
20:27:e5:51:24:44:c6:ca:44:0a:5f:ff:ad:2b:12:
c2:d3:94:c5:9d:1c:01:11:7c:86:10:14:52:18:21:
41:da:30:f7:0b:d0:78:5c:70:93:ec:b5:0f:17:ad:
be:2d:ae:75:f9:98:c3:a0:35:b5:60:40:23:3f:09:
29:61:be:1d:93:99:50:a7:15:d4:69:5d:f4:26:12:
bf:a4:45:bb:ae:30:22:d9:5a:bb:0a:b4:a6:4b:46:
2e:34:3d:81:3d:88:9a:e3:f8:9b:c7:69:2c:ee:cb:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:70:B0:C4:A2:5A:3E:FF:B9:49:76:5B:B0:9A:49:BD:95:30:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5402DE7F0C11EF9D69D241762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/21
Signature Algorithm: sha256WithRSAEncryption
42:4c:62:a1:fa:28:bd:62:38:8b:4a:9d:ac:14:a9:0e:05:54:
97:a5:8c:76:59:14:25:0b:08:13:3d:55:96:34:00:31:6b:63:
c5:5e:82:b4:fe:5a:ad:92:b5:d5:25:1f:e4:7d:37:f6:e9:68:
36:94:37:26:be:bb:de:65:65:db:bd:cb:3f:96:1b:c1:43:f8:
9a:d6:f0:34:19:d4:2c:83:fc:0e:13:de:38:bd:d5:45:e3:f2:
61:93:75:35:01:3b:e1:9d:e2:b9:1c:00:6d:48:d4:e7:1a:f0:
99:7c:c7:af:72:a9:91:fc:95:78:b2:93:84:1f:62:3b:a8:15:
31:9c:7a:e9:39:b3:63:2a:dc:07:33:38:54:89:f2:d3:c6:b2:
2f:33:f2:0a:d7:f4:ae:8c:03:79:05:cb:1c:9b:16:ba:2f:a8:
b9:91:6e:81:db:a4:b7:25:37:c2:92:21:13:e3:84:f3:a4:ac:
23:9e:14:3b:44:fa:a2:45:7d:db:29:4e:d9:e0:00:6c:5a:75:
5c:b7:e9:52:f9:91:dd:83:24:0a:c5:5a:68:44:90:b3:48:9b:
e5:98:17:27:04:3f:00:26:0c:b5:3c:2f:5e:0d:23:1d:2d:f5:
b1:44:ca:08:48:0b:03:ff:a8:78:fb:a3:b9:ff:38:5a:32:b4:
93:e3:13:b9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAL2lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTMwMDkxNTM2WhcNMjQxMTIxMDkxNTM2WjAYMRYw
FAYDVQQDEw02NmZhNmMzYi03NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlf2S+7cQ6iaejoiE/Cma349QIAqIkH4KZpe59eFh6lWA3PrsPVD8y8VY
cApBr4SG19t11oQB3OnO1jOA3fOrWF+S1+ks6xy1ZId7hmoUSxvw07lDsJe2gbJt
EzsGlEGx4wDeaT01lCJfPQZs0+mCee6pcURH/r6WmHvq7jVtmynLSf4uY+/D98h7
hhM+YsWKy2cDAKMgJ+VRJETGykQKX/+tKxLC05TFnRwBEXyGEBRSGCFB2jD3C9B4
XHCT7LUPF62+La51+ZjDoDW1YEAjPwkpYb4dk5lQpxXUaV30JhK/pEW7rjAi2Vq7
CrSmS0YuND2BPYia4/ibx2ks7stO2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP+d
cLDEolo+/7lJdluwmkm9lTC4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RjU0MDJERTdGMEMxMUVGOUQ2OUQyNDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOPAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCTGKh+ii9YjiLSp2sFKkOBVSXpYx2WRQlCwgTPVWWNAAxa2PFXoK0/lqt
krXVJR/kfTf26Wg2lDcmvrveZWXbvcs/lhvBQ/ia1vA0GdQsg/wOE944vdVF4/Jh
k3U1ATvhneK5HABtSNTnGvCZfMevcqmR/JV4spOEH2I7qBUxnHrpObNjKtwHMzhU
ifLTxrIvM/IK1/SujAN5Bcscmxa6L6i5kW6B26S3JTfCkiET44TzpKwjnhQ7RPqi
RX3bKU7Z4ABsWnVct+lS+ZHdgyQKxVpoRJCzSJvlmBcnBD8AJgy1PC9eDSMdLfWx
RMoISAsD/6h4+6O5/zhaMrST4xO5
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org