Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/969A1E327F0E11EF96E70A4F762E951A.roa
File: 969A1E327F0E11EF96E70A4F762E951A.roa (raw, json)
Hash identifier: YNB834i3jWbpeyjIFoQLgoLivxZanqz76ijfPNJmyGc=
Subject key identifier: 95:D0:EB:54:3E:A2:8A:5D:58:D8:3A:0F:F0:EF:2D:A6:DD:2A:E7:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/969A1E327F0E11EF96E70A4F762E951A.roa
Signing time: Mon 30 Sep 2024 09:30:11 +0000
ROA not before: Mon 30 Sep 2024 09:30:07 +0000
ROA not after: Thu 21 Nov 2024 09:30:07 +0000
asID: 63139
IP address blocks: 156.229.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48575 (0xbdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:30:07 2024 GMT
Not After : Nov 21 09:30:07 2024 GMT
Subject: CN=66fa6fa2-9a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:4b:06:f4:85:e4:e9:3c:be:0f:51:7a:ea:
a0:d4:a0:9d:d5:8c:5f:2d:1d:4a:59:b6:76:52:0d:
ae:5b:81:0f:ed:a5:92:52:82:d8:43:d3:bd:cc:c1:
8e:ae:cc:a9:07:e6:f0:8d:e2:e7:ab:02:4e:c4:d6:
ef:e4:48:9e:f3:f0:8e:db:06:6f:4b:95:ed:a0:e4:
23:e6:69:55:0f:25:c2:3c:4c:e2:8c:70:2c:1c:c4:
ed:73:b4:78:29:41:bd:4e:d7:8c:cd:50:4d:3c:b1:
9a:8d:01:00:1f:39:06:f5:87:c1:a9:b3:f9:2b:92:
49:cf:ca:db:e0:7f:c0:0d:37:ea:3d:de:94:e3:64:
5e:97:f0:bb:7f:0f:ce:1b:d0:fa:ca:d9:ac:f5:49:
a3:ec:3a:ec:3a:fe:9a:1f:ef:c3:b4:58:cb:7d:31:
51:c8:d1:ae:ee:0e:d7:7d:ff:60:33:a8:1a:56:63:
05:52:07:b9:c2:3f:b0:aa:89:bd:00:c6:70:dd:78:
da:a6:9e:90:6e:c8:99:8b:c0:04:d9:3f:e6:de:f7:
56:d1:31:82:2b:1b:25:4a:ab:0c:00:61:fc:e8:7e:
71:98:65:fd:e5:53:ee:e5:f7:1d:5e:ff:42:d3:c0:
03:c1:28:dc:ac:6d:92:c8:97:a4:5a:67:ca:c2:7f:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:EB:54:3E:A2:8A:5D:58:D8:3A:0F:F0:EF:2D:A6:DD:2A:E7:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/969A1E327F0E11EF96E70A4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4c:05:a8:5d:a9:b9:89:0d:5c:15:54:fa:9f:88:f0:90:19:
2f:38:47:d1:8a:e5:af:3b:8a:d9:1d:59:04:3a:70:ef:95:08:
63:f5:6b:bb:ad:e9:41:b9:40:65:5c:4d:85:59:70:15:af:41:
46:70:52:56:c9:8f:48:43:04:3d:3f:52:0f:96:ac:e9:25:1a:
c4:5b:e6:59:99:7b:cd:ab:5d:65:90:73:79:e1:c3:cd:01:dd:
77:ff:09:aa:16:a6:4e:81:27:e2:d7:76:f3:cf:4d:13:c8:07:
86:68:6f:0d:05:76:09:ea:dd:96:14:c1:b4:a7:e1:c0:4e:19:
79:35:83:30:48:81:95:f4:3a:6f:0e:42:8c:04:e8:41:39:93:
b9:9c:6f:38:17:d5:73:54:e5:a0:21:81:22:12:d4:e0:c0:e8:
34:ce:29:98:c7:5c:3d:30:51:c7:60:3f:4b:51:c9:0e:29:cf:
2d:42:e7:44:63:41:0d:61:5d:1a:94:00:9f:24:c1:f6:0c:88:
bc:88:23:64:d3:69:78:eb:14:a3:23:30:04:31:84:62:a3:6c:
cc:55:d6:7c:ab:6a:bf:71:0b:bf:40:ef:04:82:52:db:ac:c0:
4a:74:e9:75:10:fe:97:2d:06:84:01:ec:a4:76:53:a8:e2:5d:
41:5b:9c:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAL2/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTMwMDkzMDA3WhcNMjQxMTIxMDkzMDA3WjAYMRYw
FAYDVQQDEw02NmZhNmZhMi05YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzhJLBvSF5Ok8vg9Reuqg1KCd1YxfLR1KWbZ2Ug2uW4EP7aWSUoLYQ9O9
zMGOrsypB+bwjeLnqwJOxNbv5Eie8/CO2wZvS5XtoOQj5mlVDyXCPEzijHAsHMTt
c7R4KUG9TteMzVBNPLGajQEAHzkG9YfBqbP5K5JJz8rb4H/ADTfqPd6U42Rel/C7
fw/OG9D6ytms9Umj7DrsOv6aH+/DtFjLfTFRyNGu7g7Xff9gM6gaVmMFUge5wj+w
qom9AMZw3Xjapp6QbsiZi8AE2T/m3vdW0TGCKxslSqsMAGH86H5xmGX95VPu5fcd
Xv9C08ADwSjcrG2SyJekWmfKwn+AhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJXQ
61Q+oopdWNg6D/DvLabdKudlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NjlBMUUzMjdGMEUxMUVGOTZFNzBBNEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUuMA0GCSqGSIb3DQEBCwUA
A4IBAQCsTAWoXam5iQ1cFVT6n4jwkBkvOEfRiuWvO4rZHVkEOnDvlQhj9Wu7relB
uUBlXE2FWXAVr0FGcFJWyY9IQwQ9P1IPlqzpJRrEW+ZZmXvNq11lkHN54cPNAd13
/wmqFqZOgSfi13bzz00TyAeGaG8NBXYJ6t2WFMG0p+HAThl5NYMwSIGV9DpvDkKM
BOhBOZO5nG84F9VzVOWgIYEiEtTgwOg0zimYx1w9MFHHYD9LUckOKc8tQudEY0EN
YV0alACfJMH2DIi8iCNk02l46xSjIzAEMYRio2zMVdZ8q2q/cQu/QO8EglLbrMBK
dOl1EP6XLQaEAeykdlOo4l1BW5wm
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org