Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C5BFC43B9711EFAE783C86762E951A.roa
File: A1C5BFC43B9711EFAE783C86762E951A.roa (raw, json)
Hash identifier: Yir58GigQcq+44LQtDpLBprd32nFVJ3uxpc2QcYzAP0=
Subject key identifier: 0C:B0:D9:13:97:BA:79:49:66:28:6B:63:19:B0:26:52:B6:0A:4B:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9944
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C5BFC43B9711EFAE783C86762E951A.roa
Signing time: Sat 06 Jul 2024 12:59:51 +0000
ROA not before: Sat 06 Jul 2024 12:59:48 +0000
ROA not after: Wed 21 Aug 2024 12:59:48 +0000
asID: 63139
IP address blocks: 156.227.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39236 (0x9944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:59:48 2024 GMT
Not After : Aug 21 12:59:48 2024 GMT
Subject: CN=66893fc7-ed0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:3e:f7:40:cc:e2:20:25:da:93:c4:77:23:
1b:86:08:43:30:aa:9f:64:53:ee:59:c8:13:ee:ee:
ff:2b:f3:71:24:24:bf:da:5b:2a:a1:e7:c6:b1:b3:
16:02:f7:38:a1:35:3a:81:a2:af:dc:b1:c8:fc:ea:
b7:2d:3a:4f:bb:43:d5:0e:78:57:88:0e:30:38:a3:
7b:3e:f5:bd:eb:77:c5:90:32:97:47:23:65:85:1e:
aa:9f:37:ef:b4:35:cc:56:33:24:5d:61:df:b4:28:
ab:6a:ac:ae:a3:3f:0f:b4:fc:74:63:09:b6:0f:fd:
3e:1f:27:bc:d3:35:67:8c:75:4d:b2:d5:f7:d0:e2:
76:99:f3:4c:81:d7:25:26:48:a6:11:8f:da:59:fe:
10:e2:04:a6:1f:05:09:cd:b2:86:3e:e0:21:f4:51:
fc:90:a2:82:49:cc:e8:3c:1a:fb:69:53:4b:3b:53:
7c:96:4a:b2:8c:5c:36:08:dd:e0:13:df:32:1a:e7:
60:95:dd:f0:0d:64:7d:b5:29:d8:24:fd:28:36:26:
77:33:c7:c1:93:d9:67:b3:a0:a3:80:95:24:01:4f:
26:42:6c:be:38:18:8a:2a:d7:62:da:0f:16:13:4d:
c2:81:38:bf:0b:f1:75:0e:27:0d:a1:d4:0a:f0:03:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:D9:13:97:BA:79:49:66:28:6B:63:19:B0:26:52:B6:0A:4B:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C5BFC43B9711EFAE783C86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8c:f1:af:f4:96:c7:01:36:e0:b5:41:1f:8d:50:c3:5e:2f:
84:23:9e:d4:1e:c8:16:e1:63:de:94:1e:26:03:2f:2c:ee:4f:
af:f4:32:24:1e:15:b7:ca:6b:b7:57:d8:5a:ce:91:1d:40:5a:
01:6a:83:55:8b:32:84:d2:3a:12:82:41:b9:a4:14:c0:02:2a:
bd:49:56:43:74:f1:1b:ac:86:4f:79:17:2d:85:78:96:40:f7:
ff:0b:02:70:b8:54:05:32:37:07:90:e4:2f:00:4e:87:f9:a1:
63:6e:e3:d5:1d:8f:f3:83:9e:2c:15:d8:99:00:24:5e:58:f6:
32:bd:7f:b3:67:71:af:cb:5b:99:c2:7b:77:bc:04:c9:45:e4:
6d:6b:e2:f2:f6:ee:4c:c0:8e:37:87:7c:fd:41:15:34:8a:08:
7d:f1:32:d0:c2:cc:1b:10:08:e1:d9:95:92:f9:68:e7:e5:fd:
2c:81:cf:2b:03:cc:c1:6c:33:62:55:27:15:51:ba:50:77:7b:
36:dd:3f:85:5e:43:81:2b:03:4b:88:87:7a:17:f7:a5:12:bf:
75:fb:8e:53:b3:cb:c5:2e:59:b5:4a:9e:4e:da:ef:09:03:2b:
69:fd:77:e6:a3:0e:b4:9b:56:2d:8d:e0:ea:01:4d:73:dc:1a:
4d:24:68:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJlEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA2MTI1OTQ4WhcNMjQwODIxMTI1OTQ4WjAYMRYw
FAYDVQQDEw02Njg5M2ZjNy1lZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwxA+90DM4iAl2pPEdyMbhghDMKqfZFPuWcgT7u7/K/NxJCS/2lsqoefG
sbMWAvc4oTU6gaKv3LHI/Oq3LTpPu0PVDnhXiA4wOKN7PvW963fFkDKXRyNlhR6q
nzfvtDXMVjMkXWHftCiraqyuoz8PtPx0Ywm2D/0+Hye80zVnjHVNstX30OJ2mfNM
gdclJkimEY/aWf4Q4gSmHwUJzbKGPuAh9FH8kKKCSczoPBr7aVNLO1N8lkqyjFw2
CN3gE98yGudgld3wDWR9tSnYJP0oNiZ3M8fBk9lns6CjgJUkAU8mQmy+OBiKKtdi
2g8WE03CgTi/C/F1DicNodQK8APJewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAyw
2ROXunlJZihrYxmwJlK2CktHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUM1QkZDNDNCOTcxMUVGQUU3ODNDODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOPEMA0GCSqGSIb3DQEBCwUA
A4IBAQCxjPGv9JbHATbgtUEfjVDDXi+EI57UHsgW4WPelB4mAy8s7k+v9DIkHhW3
ymu3V9hazpEdQFoBaoNVizKE0joSgkG5pBTAAiq9SVZDdPEbrIZPeRcthXiWQPf/
CwJwuFQFMjcHkOQvAE6H+aFjbuPVHY/zg54sFdiZACReWPYyvX+zZ3Gvy1uZwnt3
vATJReRta+Ly9u5MwI43h3z9QRU0igh98TLQwswbEAjh2ZWS+Wjn5f0sgc8rA8zB
bDNiVScVUbpQd3s23T+FXkOBKwNLiId6F/elEr91+45Ts8vFLlm1Sp5O2u8JAytp
/Xfmow60m1YtjeDqAU1z3BpNJGie
-----END CERTIFICATE-----
Generated at Thu Aug 22 04:57:55 2024 by rpki-client on console-fra.rpki-client.org