Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FE322295E511EC974F66995A40D577.roa
File: A7FE322295E511EC974F66995A40D577.roa (raw, json)
Hash identifier: 5Bh2zkVFSsw8ObQP/I5xyCNJM+F3pl8lZbiAgbKUhMU=
Subject key identifier: DB:BC:71:DD:EE:0D:9D:BA:EC:26:CB:56:B8:3A:0D:15:1A:53:71:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1209
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FE322295E511EC974F66995A40D577.roa
Signing time: Fri 25 Feb 2022 02:50:14 +0000
ROA not before: Fri 25 Feb 2022 02:50:10 +0000
ROA not after: Fri 31 Mar 2023 02:50:10 +0000
asID: 1239
IP address blocks: 156.243.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 02:50:10 2022 GMT
Not After : Mar 31 02:50:10 2023 GMT
Subject: CN=621843e6-2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:a8:30:ad:9b:50:fe:ee:d1:fb:af:52:2b:
ca:70:f5:aa:6f:94:1c:2c:a9:2a:23:f4:73:a4:a2:
c1:79:f8:4a:73:8e:3a:23:38:a8:3a:83:bf:0a:59:
fb:ab:cb:22:13:ec:65:33:76:c2:f6:90:c2:b7:9e:
51:1b:30:8e:18:af:b9:9d:37:ec:5c:57:d0:5a:3c:
80:35:48:c9:5a:a3:b8:1f:f8:bf:81:fe:57:58:dd:
8f:44:9f:33:0a:45:bb:2e:f6:d9:ff:cd:b7:e9:e0:
e3:7c:64:aa:d0:7b:ca:93:48:76:34:95:87:01:40:
36:f5:73:c8:76:a7:59:7f:af:51:3d:4d:a9:bf:37:
7d:35:fd:a5:49:45:f5:13:19:47:b2:91:51:2a:0a:
78:e3:c6:a8:3f:0f:b1:96:53:6e:a8:86:09:81:a7:
a0:72:46:85:ef:72:80:8b:5d:b3:c0:7d:b5:96:c0:
da:65:b5:c2:47:34:67:72:af:e2:7c:58:a6:51:f8:
83:5a:21:49:b4:a0:64:5f:72:bc:e0:45:0d:b6:37:
13:ca:ab:14:c8:30:e2:aa:ae:b5:72:36:e4:95:b7:
87:18:aa:08:e6:47:b0:80:27:9e:5a:18:6f:50:09:
45:53:fd:06:8e:a4:0b:a0:f6:cf:44:4b:5e:70:d6:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:71:DD:EE:0D:9D:BA:EC:26:CB:56:B8:3A:0D:15:1A:53:71:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FE322295E511EC974F66995A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:15:7c:ae:c2:4a:3d:d7:8c:61:d6:bc:fd:9f:2a:b5:c3:89:
d0:37:ff:97:e1:b4:85:ce:f8:21:b5:c4:3b:4c:8b:ad:ba:ed:
cc:16:20:ae:d2:4f:ff:d5:5f:b0:cc:30:5f:97:38:1d:6b:8b:
89:b9:b0:7b:0b:10:1b:15:af:94:66:42:ed:0e:87:45:5b:8c:
33:81:bb:8b:1d:88:d9:ab:14:d3:18:e2:af:a7:63:da:44:19:
8f:d6:24:d2:68:bf:7a:8a:da:aa:75:07:fa:7d:11:b2:e4:30:
ca:30:d9:35:2f:52:82:2d:dd:e5:96:40:18:a1:42:7c:8a:b4:
43:28:68:7b:24:83:02:f3:12:95:b5:42:54:1e:0f:87:8a:0f:
53:c7:69:93:3b:e7:1a:9c:f9:d1:62:af:d7:1e:c2:9c:45:c6:
6c:25:f8:8b:7e:d1:5a:03:0f:10:af:0e:0e:98:07:b4:f8:45:
b8:79:16:8b:48:c1:26:10:0c:01:2a:4a:3b:5c:d9:39:cd:dc:
ac:79:10:b4:48:c8:a1:ea:57:a6:35:a6:dd:41:f6:0e:ba:0f:
c3:c6:6c:1d:f7:92:50:da:13:a5:a4:4b:b5:40:0b:67:c6:c2:
95:93:30:3d:cd:67:c7:4b:f5:ae:6e:5c:a8:c4:c4:43:ff:cd:
6a:65:16:dd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEgkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAyMjUwMjUwMTBaFw0yMzAzMzEwMjUwMTBaMBgxFjAU
BgNVBAMMDTYyMTg0M2U2LTJlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEYqgwrZtQ/u7R+69SK8pw9apvlBwsqSoj9HOkosF5+EpzjjojOKg6g78K
WfuryyIT7GUzdsL2kMK3nlEbMI4Yr7mdN+xcV9BaPIA1SMlao7gf+L+B/ldY3Y9E
nzMKRbsu9tn/zbfp4ON8ZKrQe8qTSHY0lYcBQDb1c8h2p1l/r1E9Tam/N301/aVJ
RfUTGUeykVEqCnjjxqg/D7GWU26ohgmBp6ByRoXvcoCLXbPAfbWWwNpltcJHNGdy
r+J8WKZR+INaIUm0oGRfcrzgRQ22NxPKqxTIMOKqrrVyNuSVt4cYqgjmR7CAJ55a
GG9QCUVT/QaOpAug9s9ES15w1s1JAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU27xx
3e4NnbrsJstWuDoNFRpTcVswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0E3RkUzMjIyOTVFNTExRUM5NzRGNjY5OTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASc8+AwDQYJKoZIhvcNAQELBQAD
ggEBAJ8VfK7CSj3XjGHWvP2fKrXDidA3/5fhtIXO+CG1xDtMi6267cwWIK7ST//V
X7DMMF+XOB1ri4m5sHsLEBsVr5RmQu0Oh0VbjDOBu4sdiNmrFNMY4q+nY9pEGY/W
JNJov3qK2qp1B/p9EbLkMMow2TUvUoIt3eWWQBihQnyKtEMoaHskgwLzEpW1QlQe
D4eKD1PHaZM75xqc+dFir9cewpxFxmwl+It+0VoDDxCvDg6YB7T4Rbh5FotIwSYQ
DAEqSjtc2TnN3Kx5ELRIyKHqV6Y1pt1B9g66D8PGbB33klDaE6WkS7VAC2fGwpWT
MD3NZ8dL9a5uXKjExEP/zWplFt0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org