Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A242AF16427211EF979ECB5B762E951A.roa
File: A242AF16427211EF979ECB5B762E951A.roa (raw, json)
Hash identifier: RsJbjiblvx/Jh3lYyLk5Bf1kYTx4majMQjd4GNc2RjY=
Subject key identifier: D5:02:8F:81:27:95:BA:92:6F:D3:BF:2B:6B:D5:55:59:5F:0F:2B:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A242AF16427211EF979ECB5B762E951A.roa
Signing time: Mon 15 Jul 2024 06:22:39 +0000
ROA not before: Mon 15 Jul 2024 06:22:36 +0000
ROA not after: Tue 30 Jul 2024 06:22:36 +0000
asID: 328608
IP address blocks: 45.202.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40048 (0x9c70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 06:22:36 2024 GMT
Not After : Jul 30 06:22:36 2024 GMT
Subject: CN=6694c02f-c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:61:b5:9e:3a:bb:0a:00:c7:f7:09:34:63:
a8:46:2c:6c:99:2f:7e:80:d4:55:7a:32:81:ee:a5:
dc:eb:da:1b:cd:d8:96:d3:0a:5a:21:2b:4a:31:c9:
83:3e:65:3c:d2:ce:06:d6:a0:7c:98:39:2a:5d:93:
55:11:4c:9c:4c:49:ee:d6:a7:16:86:5d:01:46:00:
0b:83:18:c2:88:66:14:1e:8e:d1:c1:97:82:d1:74:
45:75:bb:83:d2:19:42:2a:05:0b:b2:1c:5f:5f:7e:
24:39:24:33:e1:cf:01:f0:2a:a2:33:44:fc:eb:2a:
7e:c7:9f:0a:7a:8d:7e:48:1a:e7:d6:2d:6c:39:61:
dd:71:8f:a8:00:52:82:4f:2c:f1:62:2d:55:01:66:
9a:f1:45:30:d7:40:60:bd:e3:2e:7e:6b:bb:6a:ab:
00:96:39:31:1c:39:6c:40:12:79:56:f3:e4:f7:b1:
f4:e1:9c:fd:84:f6:0a:94:59:ae:1b:6d:34:b4:3f:
1f:1e:dd:89:08:20:0a:ba:15:3f:ca:d2:1c:f1:bc:
7a:a9:ea:06:cf:20:a1:cf:5b:83:09:c5:79:57:5d:
9f:d0:2b:b5:2e:1a:e8:5e:73:d9:a8:4d:50:f1:22:
88:27:b6:37:66:3c:1e:a2:f2:91:55:a4:8a:aa:bb:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:8F:81:27:95:BA:92:6F:D3:BF:2B:6B:D5:55:59:5F:0F:2B:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A242AF16427211EF979ECB5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:60:81:bb:89:d3:5d:9f:d7:6b:31:cb:cd:82:a1:a1:a9:3e:
44:8b:af:16:b3:cb:fe:11:60:aa:b3:fa:22:43:ad:98:4f:3c:
8b:33:d0:bd:a3:33:94:bf:b8:fa:5f:02:64:c0:23:47:22:fe:
2e:b6:36:96:74:1c:69:71:94:f0:61:cd:50:45:45:5b:42:22:
ad:68:27:72:29:7c:9a:a7:10:02:37:ea:0b:a0:37:ba:e2:03:
25:b7:01:73:3c:91:a4:47:63:d4:fc:57:99:17:fb:75:b4:ef:
d8:67:c5:d9:52:3d:f7:47:1b:ec:e9:ff:0d:26:22:84:d1:09:
de:1c:fa:3d:e6:61:54:14:1d:b3:c4:6d:f7:5d:e5:d7:e9:7c:
f6:cb:7c:63:7c:cd:b2:04:0a:a0:bf:85:56:a3:28:bf:31:e5:
63:8e:b4:1d:09:00:ab:2c:4f:a9:a2:b9:9b:d9:2c:09:81:b4:
fe:dd:f0:0b:0c:d7:bc:4f:25:c4:c3:cf:0a:b7:cf:54:a1:04:
46:08:15:a7:56:6e:da:d4:c7:d0:ea:3f:b3:e1:20:00:43:bb:
c7:11:0a:bd:43:98:6c:dd:a2:2a:3d:43:97:cf:47:20:d1:f4:
03:23:cb:5b:20:dd:10:45:48:8b:88:91:75:62:c5:cc:03:d6:
43:5f:66:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJxwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE1MDYyMjM2WhcNMjQwNzMwMDYyMjM2WjAYMRYw
FAYDVQQDEw02Njk0YzAyZi1jMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZNhtZ46uwoAx/cJNGOoRixsmS9+gNRVejKB7qXc69obzdiW0wpaIStK
McmDPmU80s4G1qB8mDkqXZNVEUycTEnu1qcWhl0BRgALgxjCiGYUHo7RwZeC0XRF
dbuD0hlCKgULshxfX34kOSQz4c8B8CqiM0T86yp+x58Keo1+SBrn1i1sOWHdcY+o
AFKCTyzxYi1VAWaa8UUw10BgveMufmu7aqsAljkxHDlsQBJ5VvPk97H04Zz9hPYK
lFmuG200tD8fHt2JCCAKuhU/ytIc8bx6qeoGzyChz1uDCcV5V12f0Cu1LhroXnPZ
qE1Q8SKIJ7Y3ZjweovKRVaSKqrv0JwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNUC
j4EnlbqSb9O/K2vVVVlfDyuQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjQyQUYxNjQyNzIxMUVGOTc5RUNCNUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcoQMA0GCSqGSIb3DQEBCwUA
A4IBAQA7YIG7idNdn9drMcvNgqGhqT5Ei68Ws8v+EWCqs/oiQ62YTzyLM9C9ozOU
v7j6XwJkwCNHIv4utjaWdBxpcZTwYc1QRUVbQiKtaCdyKXyapxACN+oLoDe64gMl
twFzPJGkR2PU/FeZF/t1tO/YZ8XZUj33Rxvs6f8NJiKE0QneHPo95mFUFB2zxG33
XeXX6Xz2y3xjfM2yBAqgv4VWoyi/MeVjjrQdCQCrLE+pormb2SwJgbT+3fALDNe8
TyXEw88Kt89UoQRGCBWnVm7a1MfQ6j+z4SAAQ7vHEQq9Q5hs3aIqPUOXz0cg0fQD
I8tbIN0QRUiLiJF1YsXMA9ZDX2bq
-----END CERTIFICATE-----
Generated at Tue Jul 30 09:47:35 2024 by rpki-client on console-fra.rpki-client.org