Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD7090AB08511EBA5C4D580F8AEA228.roa
File: 9CD7090AB08511EBA5C4D580F8AEA228.roa (raw, json)
Hash identifier: aT7TBy+B/pSkOriJgv2vbercfkoCJdh8i5K8bPmVWuA=
Subject key identifier: 4C:13:DE:91:2C:5A:36:1C:A6:0C:F5:8A:26:17:9D:8F:70:13:6F:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD7090AB08511EBA5C4D580F8AEA228.roa
Signing time: Sun 09 May 2021 05:15:48 +0000
ROA not before: Sun 09 May 2021 05:15:42 +0000
ROA not after: Tue 05 Jul 2022 05:15:42 +0000
asID: 398968
IP address blocks: 156.233.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 05:15:42 2021 GMT
Not After : Jul 5 05:15:42 2022 GMT
Subject: CN=60977004-b490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:7a:a6:06:14:2e:69:d3:2e:5c:a0:6a:33:
20:a0:46:6c:24:99:4b:e3:aa:a3:0e:a1:37:a2:7c:
b9:22:3c:7f:29:1d:cd:7f:b6:a0:01:03:32:64:12:
0c:fd:8a:26:ec:84:f2:08:98:d9:59:0a:cd:46:6a:
27:28:2e:94:47:a2:64:28:27:e9:61:ad:10:cd:f9:
e3:0d:28:4d:9c:b8:1e:03:07:87:9c:11:94:0d:0a:
9e:3a:9d:73:30:a7:32:21:16:80:d1:be:72:d0:12:
51:94:da:6f:41:87:46:a0:08:f9:99:a2:48:6d:df:
89:02:55:d9:b1:62:95:f5:b2:39:6d:fb:95:c0:c2:
e5:1c:a8:97:dc:82:8d:7a:42:2d:fd:e0:38:65:e0:
6d:ad:8f:8b:99:b3:22:26:14:f7:a9:88:ea:cb:a4:
2d:c5:9e:04:38:87:29:ce:4c:de:a1:a3:a8:8c:fe:
1b:9b:c2:3e:4c:c9:f5:24:45:ac:f2:22:ea:16:0b:
8c:7a:0f:ce:ea:bb:0d:bb:e9:1b:6d:cd:c1:5b:4c:
48:d8:ad:96:ea:df:39:71:97:cc:5b:58:d7:94:6c:
a4:d5:a5:c6:3d:ce:a3:69:91:37:eb:93:12:1d:29:
8f:3e:a5:fc:6a:89:dc:7e:30:c6:f0:d9:d1:c3:6b:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:DE:91:2C:5A:36:1C:A6:0C:F5:8A:26:17:9D:8F:70:13:6F:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD7090AB08511EBA5C4D580F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.192.0/19
Signature Algorithm: sha256WithRSAEncryption
10:e0:fb:2c:ee:a4:d7:72:65:06:6b:dc:a3:11:a7:77:4d:ce:
3b:64:27:0a:4c:4d:7c:5f:4e:c2:54:b2:0a:1b:c7:9f:11:be:
11:8c:06:06:21:81:6a:72:7e:c1:fc:3d:57:aa:45:51:84:67:
e7:86:59:4d:00:3d:18:95:27:de:a6:c5:38:10:bd:ba:a3:f3:
4c:aa:ce:bd:75:64:ba:0b:a4:f8:99:72:dd:22:43:0b:a6:c1:
a8:2c:e5:cf:08:a6:b7:d2:47:70:e0:5a:e2:6e:be:fc:d2:e2:
f6:4c:d3:3f:ac:b9:a6:58:58:25:f7:57:ed:a6:69:7d:3f:38:
ed:f7:98:64:97:83:30:77:61:01:a3:d4:11:da:1a:fe:3b:22:
bd:94:33:1e:1e:f7:37:23:72:41:1a:32:2d:4d:57:89:47:e3:
43:5e:4c:1d:e3:5c:5a:2d:e7:bc:5d:e5:dd:8d:72:3e:0a:cd:
87:5c:05:e1:0f:11:b8:84:40:28:04:e9:d2:d1:46:a3:b3:30:
1e:d9:0a:60:b4:67:7c:51:b4:38:ad:a2:62:ff:f9:b7:90:05:
e2:d5:4c:91:60:28:a2:c4:b4:1e:b0:aa:69:1f:dd:ab:16:da:
a9:e9:c8:0e:24:c3:03:4f:72:a8:1b:1c:9b:5f:5d:6c:7a:c1:
ac:21:cb:6b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA1MDkwNTE1NDJaFw0yMjA3MDUwNTE1NDJaMBgxFjAU
BgNVBAMTDTYwOTc3MDA0LWI0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ4HqmBhQuadMuXKBqMyCgRmwkmUvjqqMOoTeifLkiPH8pHc1/tqABAzJk
Egz9iibshPIImNlZCs1GaicoLpRHomQoJ+lhrRDN+eMNKE2cuB4DB4ecEZQNCp46
nXMwpzIhFoDRvnLQElGU2m9Bh0agCPmZokht34kCVdmxYpX1sjlt+5XAwuUcqJfc
go16Qi394Dhl4G2tj4uZsyImFPepiOrLpC3FngQ4hynOTN6ho6iM/hubwj5MyfUk
RazyIuoWC4x6D87quw276RttzcFbTEjYrZbq3zlxl8xbWNeUbKTVpcY9zqNpkTfr
kxIdKY8+pfxqidx+MMbw2dHDa1bnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTBPe
kSxaNhymDPWKJhedj3ATb1UwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlDRDcwOTBBQjA4NTExRUJBNUM0RDU4MEY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWc6cAwDQYJKoZIhvcNAQELBQAD
ggEBABDg+yzupNdyZQZr3KMRp3dNzjtkJwpMTXxfTsJUsgobx58RvhGMBgYhgWpy
fsH8PVeqRVGEZ+eGWU0APRiVJ96mxTgQvbqj80yqzr11ZLoLpPiZct0iQwumwags
5c8IprfSR3DgWuJuvvzS4vZM0z+suaZYWCX3V+2maX0/OO33mGSXgzB3YQGj1BHa
Gv47Ir2UMx4e9zcjckEaMi1NV4lH40NeTB3jXFot57xd5d2Ncj4KzYdcBeEPEbiE
QCgE6dLRRqOzMB7ZCmC0Z3xRtDitomL/+beQBeLVTJFgKKLEtB6wqmkf3asW2qnp
yA4kwwNPcqgbHJtfXWx6wawhy2s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org