Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0A02E488711EC8A6F4939D8A014CE.roa
File: 99C0A02E488711EC8A6F4939D8A014CE.roa (raw, json)
Hash identifier: TxJx4uQQ92ww+ICQen6LqsHdexbeYXbSB3xkQ2a3nVk=
Subject key identifier: DE:0F:D8:0B:FF:24:AB:CD:84:5D:6B:67:83:3E:9E:37:7F:BF:AC:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0A02E488711EC8A6F4939D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:52:58 +0000
ROA not before: Fri 19 Nov 2021 15:52:55 +0000
ROA not after: Sat 19 Nov 2022 15:52:55 +0000
asID: 139879
IP address blocks: 156.231.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:52:55 2021 GMT
Not After : Nov 19 15:52:55 2022 GMT
Subject: CN=619676da-39b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:77:39:71:ae:54:28:90:6b:2d:a4:cd:6a:
fb:32:92:b0:97:ca:d1:dd:52:92:aa:ff:d5:2f:3c:
7b:a0:d1:61:27:31:1c:54:08:f7:dc:b2:b6:b7:8b:
7d:e3:3b:bc:dc:d5:b6:8d:4b:88:c5:29:1a:10:eb:
84:d2:cf:00:95:8f:59:96:9d:2e:4e:c6:35:ab:02:
9a:e2:eb:55:85:74:7c:90:fb:2a:c3:53:c2:e9:c9:
30:54:f9:71:9e:b1:61:a3:4a:8c:4f:11:f9:84:a1:
cd:22:0c:fd:5b:12:73:4f:83:c2:56:ef:9d:e4:67:
02:55:36:46:1e:91:15:33:0c:aa:27:c5:63:2c:da:
d6:4d:4f:1a:cf:bc:fa:06:90:bd:1b:e5:eb:bf:31:
30:12:82:c7:8b:ea:ad:9a:8f:5c:5f:d4:9b:70:c4:
fa:2a:91:3d:e6:21:6d:82:ad:46:4c:b3:72:bf:da:
65:35:62:11:f5:f1:87:36:c6:49:67:59:d3:ab:71:
d8:5d:5e:ca:ff:9a:2a:6c:5f:0f:7f:32:d1:df:e4:
61:09:93:a9:f9:7b:c7:01:a1:a6:70:88:62:d6:c1:
e9:07:8a:9a:8a:77:9a:e7:67:35:25:9a:83:45:fd:
98:14:a9:06:cc:8e:d6:03:cc:8e:42:ed:04:66:c9:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:D8:0B:FF:24:AB:CD:84:5D:6B:67:83:3E:9E:37:7F:BF:AC:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0A02E488711EC8A6F4939D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.174.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e4:e3:96:d2:62:9a:25:93:f3:4b:28:70:59:6a:b5:ca:69:
eb:12:57:f3:0a:c3:d8:db:b8:98:a4:a1:36:fc:81:ff:0d:71:
55:89:97:31:92:02:68:29:e2:87:04:6a:d2:6c:15:75:ba:a1:
a3:82:d3:78:07:f7:a0:10:85:17:2b:4c:13:f2:c4:1e:0a:3e:
bd:21:c7:90:04:41:51:72:50:19:fe:03:60:f5:a2:c8:ec:66:
47:c4:d8:c5:d7:8a:d4:ca:d5:57:ef:19:68:ae:35:b8:af:ba:
86:42:d4:75:56:36:4a:83:fc:37:2f:56:a5:00:1c:7f:17:50:
2b:7a:f2:63:89:7f:34:11:f1:1f:b3:6d:c8:b1:cb:86:9e:48:
4c:fc:1e:42:ae:63:aa:54:a3:0e:b9:69:93:9d:8c:80:73:cf:
9a:ec:22:40:24:74:95:4a:88:ae:e5:c7:df:2e:1f:a2:bf:00:
be:be:d9:55:a6:97:b3:7b:4c:50:f8:5d:af:fc:39:15:5c:93:
42:30:2a:d6:38:00:c8:09:c4:f1:67:12:90:35:5a:89:ad:82:
4d:ac:d7:d1:90:c1:3e:d4:74:1d:8d:f1:d1:31:85:60:cc:97:
91:63:af:8c:50:2a:cc:06:fd:b8:c7:d0:61:1e:82:6f:17:8f:
3c:a5:79:d7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTUyNTVaFw0yMjExMTkxNTUyNTVaMBgxFjAU
BgNVBAMMDTYxOTY3NmRhLTM5YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkUHc5ca5UKJBrLaTNavsykrCXytHdUpKq/9UvPHug0WEnMRxUCPfcsra3
i33jO7zc1baNS4jFKRoQ64TSzwCVj1mWnS5OxjWrApri61WFdHyQ+yrDU8LpyTBU
+XGesWGjSoxPEfmEoc0iDP1bEnNPg8JW753kZwJVNkYekRUzDKonxWMs2tZNTxrP
vPoGkL0b5eu/MTASgseL6q2aj1xf1JtwxPoqkT3mIW2CrUZMs3K/2mU1YhH18Yc2
xklnWdOrcdhdXsr/mipsXw9/MtHf5GEJk6n5e8cBoaZwiGLWwekHipqKd5rnZzUl
moNF/ZgUqQbMjtYDzI5C7QRmyWMLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU3g/Y
C/8kq82EXWtngz6eN3+/rEEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk5QzBBMDJFNDg4NzExRUM4QTZGNDkzOUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc564wDQYJKoZIhvcNAQELBQAD
ggEBADbk45bSYpolk/NLKHBZarXKaesSV/MKw9jbuJikoTb8gf8NcVWJlzGSAmgp
4ocEatJsFXW6oaOC03gH96AQhRcrTBPyxB4KPr0hx5AEQVFyUBn+A2D1osjsZkfE
2MXXitTK1VfvGWiuNbivuoZC1HVWNkqD/DcvVqUAHH8XUCt68mOJfzQR8R+zbcix
y4aeSEz8HkKuY6pUow65aZOdjIBzz5rsIkAkdJVKiK7lx98uH6K/AL6+2VWml7N7
TFD4Xa/8ORVck0IwKtY4AMgJxPFnEpA1Womtgk2s19GQwT7UdB2N8dExhWDMl5Fj
r4xQKswG/bjH0GEegm8Xjzyledc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org