Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA2C76DA57D811EC96AC38CF5A40D577.roa
File: AA2C76DA57D811EC96AC38CF5A40D577.roa (raw, json)
Hash identifier: 0z3eknkjr/96qzIUm14QnmQJx51T0qOqn84Nh4SvGuA=
Subject key identifier: 22:74:D1:5F:7A:BF:E1:01:2A:69:95:A9:3A:D3:86:AF:0F:3F:39:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 10A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA2C76DA57D811EC96AC38CF5A40D577.roa
Signing time: Wed 08 Dec 2021 03:41:02 +0000
ROA not before: Wed 08 Dec 2021 03:40:58 +0000
ROA not after: Wed 10 Aug 2022 03:40:58 +0000
asID: 138039
IP address blocks: 156.241.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 03:40:58 2021 GMT
Not After : Aug 10 03:40:58 2022 GMT
Subject: CN=61b0294e-dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:c0:d0:eb:43:05:01:3b:2b:e1:5c:e1:11:
3b:a1:6c:e3:7d:5d:60:39:ce:57:ae:56:37:e6:16:
17:dc:fb:31:51:00:83:ac:a8:ff:37:32:43:32:84:
bb:27:22:bb:b5:f8:41:66:d0:aa:1d:71:07:e4:95:
21:80:67:39:0e:76:ed:be:9f:1a:28:91:f0:61:37:
dc:b2:77:7a:d2:f1:da:19:25:c2:37:e2:76:40:e7:
44:50:fe:de:05:62:75:6c:d6:31:d5:c8:a5:9a:f3:
8b:d9:69:b8:fe:a4:b8:88:70:a1:63:38:3e:9d:1d:
94:b8:81:7c:fc:c0:b9:12:27:31:1d:86:bb:ff:da:
86:30:44:88:e4:08:51:a7:d2:5f:9a:c0:04:c7:4b:
6d:3d:fe:1f:7c:7c:b1:f5:30:fb:2c:97:d3:17:5f:
36:97:ff:24:fd:53:fb:82:72:af:6d:17:25:fb:d6:
2d:c8:36:68:09:f3:56:69:1a:4c:9e:03:8f:7c:5a:
8f:54:e1:09:d5:e0:21:af:95:d7:49:7e:37:91:10:
a9:1d:84:96:c2:0b:4a:d2:1e:f0:4c:3e:11:b0:2b:
9a:b0:54:ef:d2:9b:80:20:5d:1e:7d:3a:d1:9d:cd:
a3:24:69:02:8c:be:1a:e9:77:98:11:97:49:51:38:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:D1:5F:7A:BF:E1:01:2A:69:95:A9:3A:D3:86:AF:0F:3F:39:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA2C76DA57D811EC96AC38CF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6c:fe:37:a6:a9:1d:f9:ab:ba:01:ab:f9:cb:cf:f5:6f:14:
5a:7d:0a:eb:d1:e5:7a:03:43:68:57:de:4f:d1:4d:24:82:ad:
db:34:e7:6e:0b:c0:6f:8a:bf:da:8d:c1:4b:5a:4f:e9:21:8c:
6c:35:80:ee:58:e9:f1:1a:f6:68:d3:49:56:cb:a5:ec:58:c9:
f1:83:c0:7b:98:d9:d3:39:f3:ca:5b:3e:88:46:89:d2:06:42:
4c:51:f6:78:c1:2c:6b:6e:c7:2b:30:38:9c:bb:82:83:61:ad:
db:2e:38:f8:2b:76:5f:94:81:1c:6c:65:44:c6:a5:c6:8e:ba:
b7:b4:e6:ec:4a:1a:c6:3e:e2:8a:69:42:d5:64:6d:75:5f:8c:
03:fe:25:4d:87:1f:a9:91:5b:47:87:c1:8d:ac:b6:c3:9b:d5:
fb:6e:f3:b0:3b:7c:48:0a:9c:5c:c8:69:f0:e8:f4:60:62:03:
55:fc:e4:8b:79:84:d7:f7:9f:7e:7e:5a:d1:1e:61:28:ae:a7:
f5:57:3c:2e:e0:b1:eb:d2:51:7c:e1:63:b1:04:ab:23:16:17:
99:d9:b6:d0:e7:67:d9:e5:db:44:ab:bd:69:8b:d4:00:ea:82:
90:3c:22:05:95:b2:c1:07:33:46:b9:9c:ff:bd:75:6c:a5:9a:
79:49:d7:03
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEyMDgwMzQwNThaFw0yMjA4MTAwMzQwNThaMBgxFjAU
BgNVBAMMDTYxYjAyOTRlLWRhYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7nMDQ60MFATsr4VzhETuhbON9XWA5zleuVjfmFhfc+zFRAIOsqP83MkMy
hLsnIru1+EFm0KodcQfklSGAZzkOdu2+nxookfBhN9yyd3rS8doZJcI34nZA50RQ
/t4FYnVs1jHVyKWa84vZabj+pLiIcKFjOD6dHZS4gXz8wLkSJzEdhrv/2oYwRIjk
CFGn0l+awATHS209/h98fLH1MPssl9MXXzaX/yT9U/uCcq9tFyX71i3INmgJ81Zp
GkyeA498Wo9U4QnV4CGvlddJfjeREKkdhJbCC0rSHvBMPhGwK5qwVO/Sm4AgXR59
OtGdzaMkaQKMvhrpd5gRl0lROEh/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUInTR
X3q/4QEqaZWpOtOGrw8/ORgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0FBMkM3NkRBNTdEODExRUM5NkFDMzhDRjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8f4wDQYJKoZIhvcNAQELBQAD
ggEBACps/jemqR35q7oBq/nLz/VvFFp9CuvR5XoDQ2hX3k/RTSSCrds0524LwG+K
v9qNwUtaT+khjGw1gO5Y6fEa9mjTSVbLpexYyfGDwHuY2dM588pbPohGidIGQkxR
9njBLGtuxyswOJy7goNhrdsuOPgrdl+UgRxsZUTGpcaOure05uxKGsY+4oppQtVk
bXVfjAP+JU2HH6mRW0eHwY2stsOb1ftu87A7fEgKnFzIafDo9GBiA1X85It5hNf3
n35+WtEeYSiup/VXPC7gsevSUXzhY7EEqyMWF5nZttDnZ9nl20SrvWmL1ADqgpA8
IgWVssEHM0a5nP+9dWylmnlJ1wM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org