Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0A701C3E9A11EFBD004358762E951A.roa
File: 9F0A701C3E9A11EFBD004358762E951A.roa (raw, json)
Hash identifier: t318sG0fh33tN7Sb72dwM6qLxIZ0j0XnKLC60LCxaEs=
Subject key identifier: F4:F8:E7:8D:B4:E3:F6:5E:0F:41:E5:0B:74:5E:8A:D5:2A:F9:B8:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0A701C3E9A11EFBD004358762E951A.roa
Signing time: Wed 10 Jul 2024 08:58:49 +0000
ROA not before: Wed 10 Jul 2024 08:58:45 +0000
ROA not after: Fri 02 Aug 2024 08:58:45 +0000
asID: 139646
IP address blocks: 156.242.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39553 (0x9a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:58:45 2024 GMT
Not After : Aug 2 08:58:45 2024 GMT
Subject: CN=668e4d49-4f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:e2:6b:ef:56:00:9e:38:43:8c:21:9d:4b:
a8:42:77:4a:1c:92:ad:88:24:a9:03:66:c4:b1:67:
39:03:69:2c:11:85:33:96:15:be:09:bb:65:c2:22:
57:1f:9e:5e:72:21:3b:46:97:85:d4:68:82:25:6d:
df:53:b9:6a:aa:cb:f2:0c:d0:d7:7a:74:c7:02:c6:
da:60:7d:bd:7b:d6:07:f3:49:51:f1:56:8a:f4:c4:
a7:2e:ec:69:de:93:63:68:ef:fc:d2:87:01:0a:76:
f3:eb:c8:52:bf:c0:a5:a9:e8:24:2c:ba:3b:0e:a1:
5f:a5:b4:c4:d7:86:9d:b1:d8:c6:42:f8:17:de:17:
df:e3:5f:4c:ed:3e:39:7d:13:b3:a9:59:ba:a2:27:
cc:85:57:1f:81:da:38:eb:d9:ef:9e:b9:d9:53:ec:
89:44:27:71:35:44:bc:5a:3e:98:01:de:f1:25:1a:
95:86:cb:19:63:56:d4:8f:9c:06:ee:6b:7e:36:18:
43:5d:6b:a5:af:71:d7:2f:ea:3e:72:96:5c:6e:b4:
ef:f9:33:4f:b6:3c:e4:fd:01:4f:fa:1f:6c:5e:44:
08:28:0d:81:0d:9c:40:a9:1f:da:2b:d4:6e:8d:45:
43:b3:df:ac:e9:c5:98:e2:c0:6c:9a:3d:94:65:a4:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:E7:8D:B4:E3:F6:5E:0F:41:E5:0B:74:5E:8A:D5:2A:F9:B8:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0A701C3E9A11EFBD004358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
55:38:a3:8f:10:ce:00:36:70:dc:bf:87:1c:ca:7f:a0:ee:43:
94:02:2b:07:35:62:2d:a0:74:43:fd:1d:92:f3:6c:b4:9a:29:
35:e9:74:d2:a3:4a:17:70:b7:1a:c0:05:6b:31:0c:4f:c9:14:
dd:e6:b9:92:93:39:53:ec:a2:dd:11:1c:69:a5:80:04:17:24:
b6:f3:6c:dc:ab:ba:fd:21:dd:84:84:f5:77:5d:64:63:76:83:
3c:4c:37:cb:57:49:e8:68:9c:ad:5b:01:7b:90:47:c5:fb:ea:
50:2f:c2:a6:2a:ba:8d:6e:c3:e8:8f:58:5b:b0:eb:d4:0e:06:
39:a8:a2:3d:46:be:34:37:0c:5f:c2:1f:c3:ef:f6:06:77:e3:
66:04:3e:a1:4c:ea:04:60:87:91:25:1c:83:8c:7a:0b:08:7f:
3f:83:12:a8:51:d3:a3:38:98:31:c1:b2:4c:b4:44:22:73:61:
84:a9:cd:aa:e0:9e:81:6f:52:2b:f5:1b:8c:ae:41:0e:41:a6:
6f:22:cf:8c:14:ba:80:43:5f:05:09:a7:b2:4d:ec:46:79:88:
0e:e1:63:65:52:aa:40:75:64:44:be:38:fa:cd:7e:4b:de:9f:
93:99:66:f2:31:37:49:c0:b0:9d:23:c7:2b:a6:b1:c9:36:55:
c5:c9:d1:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJqBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEwMDg1ODQ1WhcNMjQwODAyMDg1ODQ1WjAYMRYw
FAYDVQQDEw02NjhlNGQ0OS00ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSria+9WAJ44Q4whnUuoQndKHJKtiCSpA2bEsWc5A2ksEYUzlhW+Cbtl
wiJXH55eciE7RpeF1GiCJW3fU7lqqsvyDNDXenTHAsbaYH29e9YH80lR8VaK9MSn
Luxp3pNjaO/80ocBCnbz68hSv8ClqegkLLo7DqFfpbTE14adsdjGQvgX3hff419M
7T45fROzqVm6oifMhVcfgdo469nvnrnZU+yJRCdxNUS8Wj6YAd7xJRqVhssZY1bU
j5wG7mt+NhhDXWulr3HXL+o+cpZcbrTv+TNPtjzk/QFP+h9sXkQIKA2BDZxAqR/a
K9RujUVDs9+s6cWY4sBsmj2UZaTrfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPT4
54204/ZeD0HlC3ReitUq+bjmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjBBNzAxQzNFOUExMUVGQkQwMDQzNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPIKMA0GCSqGSIb3DQEBCwUA
A4IBAQBVOKOPEM4ANnDcv4ccyn+g7kOUAisHNWItoHRD/R2S82y0mik16XTSo0oX
cLcawAVrMQxPyRTd5rmSkzlT7KLdERxppYAEFyS282zcq7r9Id2EhPV3XWRjdoM8
TDfLV0noaJytWwF7kEfF++pQL8KmKrqNbsPoj1hbsOvUDgY5qKI9Rr40Nwxfwh/D
7/YGd+NmBD6hTOoEYIeRJRyDjHoLCH8/gxKoUdOjOJgxwbJMtEQic2GEqc2q4J6B
b1Ir9RuMrkEOQaZvIs+MFLqAQ18FCaeyTexGeYgO4WNlUqpAdWREvjj6zX5L3p+T
mWbyMTdJwLCdI8crprHJNlXFydG+
-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org