Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B8C5E6E13D111ED8EEE3CA6F1222468.roa
File: 9B8C5E6E13D111ED8EEE3CA6F1222468.roa (raw, json)
Hash identifier: 7te0j7/rVUUyCcZckmMoBOv2cK/yl4zwhFd05LN4OtI=
Subject key identifier: 3A:C7:C2:01:3A:41:07:20:E1:06:CB:00:D2:08:CB:D0:5A:07:80:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1626
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B8C5E6E13D111ED8EEE3CA6F1222468.roa
Signing time: Thu 04 Aug 2022 08:44:10 +0000
ROA not before: Thu 04 Aug 2022 08:44:06 +0000
ROA not after: Sun 16 Oct 2022 08:44:06 +0000
asID: 133861
IP address blocks: 156.245.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5670 (0x1626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:44:06 2022 GMT
Not After : Oct 16 08:44:06 2022 GMT
Subject: CN=62eb86da-c341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:4c:66:4c:7b:15:43:91:a1:71:2b:c1:b1:
dc:6b:ba:41:72:d4:17:9d:85:03:c0:c2:7a:ca:f4:
be:e7:9c:16:fa:aa:71:ee:1b:2e:98:1a:2b:c6:2b:
8d:7c:86:50:9d:ed:63:70:c3:15:14:62:f8:25:8f:
44:0f:e1:76:d2:18:be:8f:9e:cf:1a:60:40:8e:6e:
13:f8:ae:f9:1a:ac:4b:68:8e:ae:6f:a0:c3:99:f9:
95:58:b1:98:a2:43:8b:9a:1f:f5:32:83:e8:c8:a4:
6a:8b:b6:8e:59:ad:e1:96:a5:c0:b7:c1:e5:5f:74:
a2:23:08:f5:d6:2b:d8:3a:9e:41:79:ae:0a:7c:43:
e4:a6:96:6f:65:e0:40:39:cf:f4:81:db:fc:4b:2c:
5a:de:e4:1e:6b:ff:41:85:d2:f5:d7:3a:a5:34:bb:
e1:57:97:36:10:2a:8c:6c:59:fb:d2:bc:0f:75:c4:
fe:8b:74:62:11:04:98:3b:c6:55:0c:3f:74:60:9f:
e3:1c:87:63:40:d8:f7:ff:60:ae:a2:8e:c3:dc:25:
aa:bd:8f:f3:5b:82:b7:c2:12:22:42:d0:04:d2:5c:
5b:c1:5e:e4:bf:8d:d7:2d:08:18:b6:fe:3c:a9:de:
eb:9b:63:c7:bc:18:29:48:b4:d7:ab:a8:9e:aa:d8:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:C2:01:3A:41:07:20:E1:06:CB:00:D2:08:CB:D0:5A:07:80:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B8C5E6E13D111ED8EEE3CA6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
85:45:4b:0e:71:b0:1e:57:17:63:07:fa:59:61:87:66:f0:13:
77:b2:15:d2:20:69:4c:1b:ab:03:f2:ce:db:a5:f3:a1:0c:fa:
f7:a8:32:a1:2b:9f:56:6d:19:64:67:50:07:91:16:24:df:11:
1b:a0:81:1d:82:6d:53:89:5f:52:e9:6b:91:e7:09:5e:d9:0a:
c3:fa:7e:61:1e:be:e1:b7:9b:53:2c:24:47:d8:c6:da:f3:da:
54:ad:fb:0f:b7:92:3a:db:70:86:8c:9f:f6:bf:19:27:84:0b:
09:f2:dc:9a:f2:11:ac:1e:02:3f:04:25:ba:13:85:e9:c5:f5:
16:71:a9:27:9a:3b:9c:71:7e:4e:dc:e6:4a:b2:e6:49:f9:09:
2f:4b:91:5d:ce:24:ee:9b:85:9e:64:b0:36:2e:cc:85:ca:69:
10:ba:92:7c:5b:9b:8a:5d:9f:1c:50:13:aa:8b:98:c2:c8:af:
e1:2c:86:27:a3:95:f4:41:81:39:e3:20:9c:8a:14:95:ba:b1:
0d:bc:d4:7a:7e:bf:f1:ca:a0:2a:20:4b:1e:3d:1f:ae:02:b5:
e8:af:1c:4f:d7:ba:73:1b:28:bc:f5:a3:5b:2f:75:cc:b7:5a:
5a:91:fa:04:d8:30:26:0b:89:af:b5:67:8a:81:4f:cb:19:b3:
93:56:b8:db
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFiYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwODQ0MDZaFw0yMjEwMTYwODQ0MDZaMBgxFjAU
BgNVBAMMDTYyZWI4NmRhLWMzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqqkxmTHsVQ5GhcSvBsdxrukFy1BedhQPAwnrK9L7nnBb6qnHuGy6YGivG
K418hlCd7WNwwxUUYvglj0QP4XbSGL6Pns8aYECObhP4rvkarEtojq5voMOZ+ZVY
sZiiQ4uaH/Uyg+jIpGqLto5ZreGWpcC3weVfdKIjCPXWK9g6nkF5rgp8Q+Smlm9l
4EA5z/SB2/xLLFre5B5r/0GF0vXXOqU0u+FXlzYQKoxsWfvSvA91xP6LdGIRBJg7
xlUMP3Rgn+Mch2NA2Pf/YK6ijsPcJaq9j/NbgrfCEiJC0ATSXFvBXuS/jdctCBi2
/jyp3uubY8e8GClItNerqJ6q2C+xAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOsfC
ATpBByDhBssA0gjL0FoHgJMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlCOEM1RTZFMTNEMTExRUQ4RUVFM0NBNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9RwwDQYJKoZIhvcNAQELBQAD
ggEBAIVFSw5xsB5XF2MH+llhh2bwE3eyFdIgaUwbqwPyztul86EM+veoMqErn1Zt
GWRnUAeRFiTfERuggR2CbVOJX1Lpa5HnCV7ZCsP6fmEevuG3m1MsJEfYxtrz2lSt
+w+3kjrbcIaMn/a/GSeECwny3JryEaweAj8EJboThenF9RZxqSeaO5xxfk7c5kqy
5kn5CS9LkV3OJO6bhZ5ksDYuzIXKaRC6knxbm4pdnxxQE6qLmMLIr+EshiejlfRB
gTnjIJyKFJW6sQ281Hp+v/HKoCogSx49H64CteivHE/XunMbKLz1o1svdcy3WlqR
+gTYMCYLia+1Z4qBT8sZs5NWuNs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org