Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B1D8304A6011EFA6D98A92762E951A.roa
File: A9B1D8304A6011EFA6D98A92762E951A.roa (raw, json)
Hash identifier: pZBJYQc4DhKZf3Kqhue4AoBl1NOZZF8fvMs9T77TWE4=
Subject key identifier: 46:B9:81:05:FF:2E:66:D7:7E:34:8B:BA:51:DC:17:5C:8C:44:FC:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B1D8304A6011EFA6D98A92762E951A.roa
Signing time: Thu 25 Jul 2024 08:34:10 +0000
ROA not before: Thu 25 Jul 2024 08:34:05 +0000
ROA not after: Sat 03 Aug 2024 08:34:05 +0000
asID: 22773
IP address blocks: 156.239.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40927 (0x9fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:34:05 2024 GMT
Not After : Aug 3 08:34:05 2024 GMT
Subject: CN=66a20e01-b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:98:84:95:53:b6:ed:8a:cc:d9:e8:1f:2f:
f1:cf:6b:e9:02:17:83:41:26:38:84:cc:d9:93:d2:
a9:05:ce:ac:34:2c:10:50:f5:11:5f:f2:eb:1d:05:
43:36:c5:11:b2:b6:c0:61:52:8e:d9:b9:a9:f5:29:
cf:7a:68:0c:a0:cb:c7:1c:8e:22:fa:12:e0:7e:09:
da:90:68:b2:e1:37:54:b4:f2:bc:1d:d4:4b:cd:7f:
14:be:c9:23:61:ae:42:9f:bd:7f:99:19:d3:9a:86:
85:8e:da:53:30:7a:e9:44:1a:39:4f:26:43:c6:9b:
1e:20:2e:7d:30:6a:f8:cb:56:eb:bf:8a:fa:f6:b7:
15:54:c5:5d:6a:b5:29:fc:bc:76:5c:60:a2:20:6f:
cd:66:b0:fd:fb:65:a0:d5:9c:a9:83:69:ba:59:44:
25:93:ed:71:00:de:17:50:47:9b:ca:43:34:f0:71:
fd:9b:98:fb:66:4c:22:ff:a8:53:eb:8d:eb:bd:c0:
d8:45:d8:2f:9b:99:a8:ff:92:3f:d2:66:0c:69:35:
7b:a7:79:cf:67:1a:27:ff:26:6b:cd:ec:cc:58:20:
34:7b:9f:62:94:3c:43:29:69:79:9a:6b:f6:b5:38:
eb:5b:db:2f:22:0b:42:a0:bc:cf:97:7e:eb:b6:0d:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:81:05:FF:2E:66:D7:7E:34:8B:BA:51:DC:17:5C:8C:44:FC:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B1D8304A6011EFA6D98A92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:d7:16:d8:92:f2:68:2f:8c:b2:92:12:4e:b9:39:4e:e7:17:
cb:c7:07:0f:3a:e2:07:3c:fa:85:75:9a:b4:6a:ec:ae:bf:3f:
bd:07:65:4e:29:6f:f2:16:dd:28:c8:bc:bb:54:e8:f0:af:c9:
76:52:a1:31:83:22:f2:31:9a:17:ac:c7:b9:b7:a1:98:05:a1:
b1:19:50:eb:77:9c:08:2c:cd:34:15:3f:22:10:b3:8e:21:46:
f4:20:16:38:de:2c:04:5c:c8:71:0f:7c:c1:26:81:40:2a:df:
c1:87:8e:da:7e:ac:75:ab:b8:db:50:70:47:8e:c3:8c:a4:2a:
ea:d1:d5:2d:d8:cd:47:85:82:24:70:73:6e:95:80:61:f0:2f:
4a:33:fa:f5:9c:6b:9a:66:88:e7:b4:86:e2:2e:25:28:e7:fb:
da:e1:7b:c2:63:d6:da:64:53:b7:0e:65:b3:de:84:28:69:07:
b5:54:ab:82:0c:30:91:3b:31:ba:7b:9f:ca:50:b4:88:00:bd:
57:1d:78:47:c2:1c:2f:ff:02:fc:9f:47:40:9f:97:b2:4a:4c:
bd:6a:fe:5f:45:40:dd:6b:45:d9:41:21:3a:ac:bf:3f:95:81:
b0:d9:1a:92:b8:83:81:f4:d9:9f:ac:ec:12:4e:20:fc:83:0c:
58:ff:0a:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDgzNDA1WhcNMjQwODAzMDgzNDA1WjAYMRYw
FAYDVQQDEw02NmEyMGUwMS1iMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1aeYhJVTtu2KzNnoHy/xz2vpAheDQSY4hMzZk9KpBc6sNCwQUPURX/Lr
HQVDNsURsrbAYVKO2bmp9SnPemgMoMvHHI4i+hLgfgnakGiy4TdUtPK8HdRLzX8U
vskjYa5Cn71/mRnTmoaFjtpTMHrpRBo5TyZDxpseIC59MGr4y1brv4r69rcVVMVd
arUp/Lx2XGCiIG/NZrD9+2Wg1Zypg2m6WUQlk+1xAN4XUEebykM08HH9m5j7Zkwi
/6hT643rvcDYRdgvm5mo/5I/0mYMaTV7p3nPZxon/yZrzezMWCA0e59ilDxDKWl5
mmv2tTjrW9svIgtCoLzPl37rtg2ZrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEa5
gQX/LmbXfjSLulHcF1yMRPx1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOUIxRDgzMDRBNjAxMUVGQTZEOThBOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO+AMA0GCSqGSIb3DQEBCwUA
A4IBAQCh1xbYkvJoL4yykhJOuTlO5xfLxwcPOuIHPPqFdZq0auyuvz+9B2VOKW/y
Ft0oyLy7VOjwr8l2UqExgyLyMZoXrMe5t6GYBaGxGVDrd5wILM00FT8iELOOIUb0
IBY43iwEXMhxD3zBJoFAKt/Bh47afqx1q7jbUHBHjsOMpCrq0dUt2M1HhYIkcHNu
lYBh8C9KM/r1nGuaZojntIbiLiUo5/va4XvCY9baZFO3DmWz3oQoaQe1VKuCDDCR
OzG6e5/KULSIAL1XHXhHwhwv/wL8n0dAn5eySky9av5fRUDda0XZQSE6rL8/lYGw
2RqSuIOB9NmfrOwSTiD8gwxY/wpO
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org