Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
File: A01B9B7A250B11ED8C0D59E8F1222468.roa (raw, json)
Hash identifier: jd1F36HQph6Lr+D1vRVpqxcPlUAbzX1ul5Azq3KpBn4=
Subject key identifier: 72:EB:BF:69:28:EB:E3:75:57:43:80:89:BB:2D:19:D1:58:21:95:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
Signing time: Fri 26 Aug 2022 06:52:18 +0000
ROA not before: Fri 26 Aug 2022 06:52:15 +0000
ROA not after: Sun 15 Jan 2023 06:52:15 +0000
asID: 139057
IP address blocks: 156.225.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5887 (0x16ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 06:52:15 2022 GMT
Not After : Jan 15 06:52:15 2023 GMT
Subject: CN=63086da2-c5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:75:6a:3f:d0:d9:c5:25:ac:e4:20:b5:63:
f5:ed:54:06:b7:8a:4a:1a:08:44:d7:ef:c3:63:69:
3f:88:fe:fd:2f:a9:24:fd:59:66:6c:9e:bb:e2:eb:
4b:e8:eb:54:c8:7c:0b:89:d8:91:3c:cc:2f:64:ae:
66:97:f1:5a:a9:92:98:83:d1:c1:c4:f6:0f:12:2e:
e2:f8:07:cd:cd:31:fc:f7:e6:a2:3d:19:96:e9:73:
b1:2c:2b:30:2d:6f:99:f3:11:9d:b4:ac:1c:23:92:
f0:ed:bb:06:40:6c:cf:3e:60:6b:6e:4f:41:c3:21:
27:1f:09:73:30:5e:c4:5b:61:71:01:43:05:20:d9:
c3:b7:48:6e:95:6b:24:aa:52:d6:80:60:ab:2d:d8:
09:64:64:d5:8d:8c:94:c4:3e:8a:af:08:5b:f9:d1:
12:b7:8d:4c:dc:ee:71:97:0e:74:fa:ed:c5:7d:63:
e1:c3:c6:ea:38:5e:6e:b6:d8:57:26:2d:7d:ce:95:
07:07:c1:f1:fc:c0:c5:4a:9d:eb:7f:da:e4:f4:a1:
d6:06:f6:f3:fc:59:85:b6:cc:fb:8b:ee:b7:0c:7a:
7a:d4:62:df:88:09:48:9a:00:95:81:74:17:34:fb:
1d:e0:82:a0:27:38:95:a7:14:d5:e7:9e:44:7e:fb:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:BF:69:28:EB:E3:75:57:43:80:89:BB:2D:19:D1:58:21:95:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A01B9B7A250B11ED8C0D59E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.102.0/24
Signature Algorithm: sha256WithRSAEncryption
90:30:97:95:cb:e7:56:aa:f4:dd:3e:5d:c0:28:a3:6c:90:1e:
de:26:e4:bd:df:61:ff:3d:2a:9b:a5:59:d7:8f:e4:d8:a4:26:
83:8f:22:b8:0f:d4:1d:ad:54:71:48:38:6a:d1:48:89:12:a6:
8c:7b:57:d2:dd:b4:41:17:cf:57:8b:a7:9f:e2:1a:52:9d:60:
bb:f5:06:01:34:4b:e1:19:5b:b9:d5:37:07:97:86:72:31:de:
cf:6f:00:d3:73:0b:09:d7:5c:80:11:ce:db:2e:23:5c:60:b6:
98:cf:25:db:f2:19:b9:35:14:d8:ec:78:f7:b1:9f:fd:96:30:
f7:40:f1:6f:4e:70:01:18:1b:20:e0:af:ae:16:a6:5a:07:a2:
b6:c2:43:b9:48:46:5b:1a:6a:47:09:6b:73:25:91:6d:41:90:
7a:cc:0f:ef:f0:e1:6e:2f:f6:59:02:7f:eb:f7:03:c5:ba:69:
cf:99:35:d3:d3:64:92:c4:ac:fb:66:62:c5:4d:64:9f:2d:1b:
97:92:ed:74:14:bf:80:27:d0:2c:57:49:14:a9:8f:b2:1f:52:
7b:ce:4c:13:70:44:4b:cf:f1:81:39:3c:24:f0:e9:0a:41:20:
f7:26:b9:90:39:c7:1e:46:dc:09:43:ef:18:e9:69:6e:e6:7c:
ee:1a:72:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFv8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MjYwNjUyMTVaFw0yMzAxMTUwNjUyMTVaMBgxFjAU
BgNVBAMMDTYzMDg2ZGEyLWM1ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVEnVqP9DZxSWs5CC1Y/XtVAa3ikoaCETX78NjaT+I/v0vqST9WWZsnrvi
60vo61TIfAuJ2JE8zC9krmaX8VqpkpiD0cHE9g8SLuL4B83NMfz35qI9GZbpc7Es
KzAtb5nzEZ20rBwjkvDtuwZAbM8+YGtuT0HDIScfCXMwXsRbYXEBQwUg2cO3SG6V
aySqUtaAYKst2AlkZNWNjJTEPoqvCFv50RK3jUzc7nGXDnT67cV9Y+HDxuo4Xm62
2FcmLX3OlQcHwfH8wMVKnet/2uT0odYG9vP8WYW2zPuL7rcMenrUYt+ICUiaAJWB
dBc0+x3ggqAnOJWnFNXnnkR++96jAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUcuu/
aSjr43VXQ4CJuy0Z0VghlRAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0EwMUI5QjdBMjUwQjExRUQ4QzBENTlFOEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4WYwDQYJKoZIhvcNAQELBQAD
ggEBAJAwl5XL51aq9N0+XcAoo2yQHt4m5L3fYf89KpulWdeP5NikJoOPIrgP1B2t
VHFIOGrRSIkSpox7V9LdtEEXz1eLp5/iGlKdYLv1BgE0S+EZW7nVNweXhnIx3s9v
ANNzCwnXXIARztsuI1xgtpjPJdvyGbk1FNjsePexn/2WMPdA8W9OcAEYGyDgr64W
ploHorbCQ7lIRlsaakcJa3MlkW1BkHrMD+/w4W4v9lkCf+v3A8W6ac+ZNdPTZJLE
rPtmYsVNZJ8tG5eS7XQUv4An0CxXSRSpj7IfUnvOTBNwREvP8YE5PCTw6QpBIPcm
uZA5xx5G3AlD7xjpaW7mfO4ackw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org