Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FF69B648D011EF942C4670762E951A.roa
File: 94FF69B648D011EF942C4670762E951A.roa (raw, json)
Hash identifier: Trib894u1k1w6JQDRWp3CvTB2jam8n9M8oHFz1hKX+g=
Subject key identifier: DC:26:FA:A4:CB:62:C3:F6:6F:47:68:86:93:3C:B7:C9:68:E2:94:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FF69B648D011EF942C4670762E951A.roa
Signing time: Tue 23 Jul 2024 08:50:16 +0000
ROA not before: Fri 26 Jul 2024 08:50:13 +0000
ROA not after: Fri 02 Aug 2024 08:50:13 +0000
asID: 44559
IP address blocks: 156.236.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40618 (0x9eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:50:13 2024 GMT
Not After : Aug 2 08:50:13 2024 GMT
Subject: CN=669f6ec8-e2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:a2:28:08:aa:e8:13:89:f8:82:59:f6:f0:
e2:e3:29:c2:60:d4:e8:65:ee:82:33:d4:b8:2b:59:
13:01:93:bd:97:a3:6f:b6:e4:e1:69:6e:1a:88:21:
03:ec:e2:c2:07:43:85:1c:d4:a6:5c:c4:22:cb:4c:
9a:96:8c:92:61:e5:d5:f4:4b:09:5b:12:63:e1:b0:
9b:d9:97:b0:50:94:b5:b9:6c:d1:af:43:6c:75:ff:
e4:ae:56:37:51:66:9f:25:bd:8e:ea:37:e2:e0:b7:
65:6e:fd:9d:ac:e1:ec:23:9a:1d:70:1b:da:20:4b:
02:e3:55:76:1f:87:33:34:c4:ce:f5:ab:0b:1c:62:
14:87:03:a6:64:2d:44:74:af:bb:fb:b8:7e:49:64:
75:d4:0c:5e:9e:ef:69:90:d4:62:6b:d7:b8:30:f8:
8c:ac:b3:77:fe:77:fd:74:95:6c:30:25:91:5d:7c:
ee:b0:0e:14:5f:bf:9e:7e:0a:80:81:61:f4:a7:f5:
2d:9e:40:1b:99:29:1f:94:48:a9:15:37:51:2d:03:
8c:70:59:9f:79:42:3d:3b:61:f7:08:99:1f:21:dc:
02:2e:59:35:27:08:a1:54:ad:91:08:1b:9d:eb:42:
ac:5d:ff:e8:e4:bd:0e:b3:13:2e:e5:85:95:2c:70:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:FA:A4:CB:62:C3:F6:6F:47:68:86:93:3C:B7:C9:68:E2:94:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94FF69B648D011EF942C4670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.10.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b3:9a:8d:60:7b:8d:e6:b2:bb:73:07:26:3a:1d:52:ec:1b:
2a:35:08:b4:11:fd:76:b2:8c:d5:79:79:d5:07:13:8f:34:8d:
e7:c3:c0:36:eb:66:3d:6d:2e:72:d4:31:18:46:7d:3f:41:ac:
08:93:7f:a9:82:25:56:3f:c4:04:af:8e:3f:f7:97:c4:fc:1e:
d1:d5:93:02:27:6d:16:21:47:8c:c9:fb:d3:fe:1c:55:c1:07:
84:99:e0:b8:79:02:f4:0b:41:17:51:ae:aa:e0:17:ed:60:b5:
e7:03:67:c0:37:d7:f5:29:fe:f9:f8:1b:a2:32:c1:07:f7:b8:
6d:2b:9f:5d:2c:0a:02:7c:67:e3:39:6d:a8:04:39:8e:96:c0:
8b:51:6c:d6:d4:7e:33:24:e3:55:c5:de:cc:ba:3f:80:5d:00:
e2:8c:8a:a3:1d:6c:87:4a:b4:9b:7d:0b:38:81:eb:76:37:a8:
ec:ff:08:10:e2:7e:59:e7:90:93:e1:9c:d7:1a:73:49:69:da:
6e:a8:e7:68:1d:0d:b4:a6:6e:c9:cb:e9:58:2e:a0:ea:f8:f2:
ae:51:3b:fe:f9:af:c2:a5:86:f5:27:c1:de:95:4b:08:b6:e1:
b6:74:89:6b:8d:c9:6a:e7:f8:4d:50:b6:18:e2:ec:54:cf:4d:
85:29:dd:30
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ6qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDg1MDEzWhcNMjQwODAyMDg1MDEzWjAYMRYw
FAYDVQQDEw02NjlmNmVjOC1lMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyEWiKAiq6BOJ+IJZ9vDi4ynCYNToZe6CM9S4K1kTAZO9l6NvtuThaW4a
iCED7OLCB0OFHNSmXMQiy0yaloySYeXV9EsJWxJj4bCb2ZewUJS1uWzRr0Nsdf/k
rlY3UWafJb2O6jfi4Ldlbv2drOHsI5odcBvaIEsC41V2H4czNMTO9asLHGIUhwOm
ZC1EdK+7+7h+SWR11Axenu9pkNRia9e4MPiMrLN3/nf9dJVsMCWRXXzusA4UX7+e
fgqAgWH0p/UtnkAbmSkflEipFTdRLQOMcFmfeUI9O2H3CJkfIdwCLlk1JwihVK2R
CBud60KsXf/o5L0OsxMu5YWVLHBzqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNwm
+qTLYsP2b0dohpM8t8lo4pTcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NEZGNjlCNjQ4RDAxMUVGOTQyQzQ2NzA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwKMA0GCSqGSIb3DQEBCwUA
A4IBAQBzs5qNYHuN5rK7cwcmOh1S7BsqNQi0Ef12sozVeXnVBxOPNI3nw8A262Y9
bS5y1DEYRn0/QawIk3+pgiVWP8QEr44/95fE/B7R1ZMCJ20WIUeMyfvT/hxVwQeE
meC4eQL0C0EXUa6q4BftYLXnA2fAN9f1Kf75+BuiMsEH97htK59dLAoCfGfjOW2o
BDmOlsCLUWzW1H4zJONVxd7Muj+AXQDijIqjHWyHSrSbfQs4get2N6js/wgQ4n5Z
55CT4ZzXGnNJadpuqOdoHQ20pm7Jy+lYLqDq+PKuUTv++a/CpYb1J8HelUsItuG2
dIlrjclq5/hNULYY4uxUz02FKd0w
-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org