Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B975DA9CB71311ECBC44158D5A40D577.roa
File: B975DA9CB71311ECBC44158D5A40D577.roa (raw, json)
Hash identifier: JYfp9Wdgzj1aBfdrzzvt+HgHry/+nKPfTTJIJ5NqFww=
Subject key identifier: 71:B9:49:B5:CF:28:3D:B8:B3:07:07:08:B6:1A:C4:63:F0:15:35:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B975DA9CB71311ECBC44158D5A40D577.roa
Signing time: Fri 08 Apr 2022 08:13:09 +0000
ROA not before: Fri 08 Apr 2022 08:13:05 +0000
ROA not after: Sun 07 May 2023 08:13:05 +0000
asID: 141216
IP address blocks: 156.226.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4862 (0x12fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 8 08:13:05 2022 GMT
Not After : May 7 08:13:05 2023 GMT
Subject: CN=624fee94-0336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:db:09:e9:a9:6e:b5:f8:ee:f4:2a:61:b4:ae:
95:f8:8e:a3:5c:4e:8c:fe:8e:c7:68:41:b1:01:36:
2d:78:d4:21:0f:2d:91:bb:99:e4:cd:a2:3c:4a:ff:
2d:6f:7e:30:64:02:57:13:b2:4e:14:fa:0b:27:93:
ad:d4:d7:4c:de:c8:b7:48:0e:fa:cb:4f:8d:4d:49:
b5:9f:06:c8:fa:1b:da:eb:d5:94:d3:13:fc:2a:20:
68:d0:12:3f:19:59:00:4d:ff:89:f5:61:0d:3e:e2:
2e:a0:61:49:91:06:d6:49:47:56:aa:25:3e:03:3f:
97:97:b3:43:a7:b3:19:65:0e:9f:da:17:b0:de:4c:
72:eb:61:85:7f:c9:50:e8:d2:06:ab:90:4d:c5:76:
4b:85:93:4c:e9:05:25:2d:c4:6f:2f:30:e4:94:95:
0c:3a:14:aa:38:7f:c5:fa:02:e6:ca:d1:07:43:c8:
f7:5d:97:04:86:5e:aa:76:87:02:b3:51:5e:97:3d:
7e:37:f6:e3:6d:bb:e7:31:2f:5c:c0:fa:30:85:92:
2f:04:93:31:7a:3c:4c:21:02:5a:ab:10:27:8a:99:
6c:e8:d0:1b:46:88:8e:4c:42:f2:cb:e9:c5:9b:86:
59:97:e2:3d:23:1a:07:f2:e8:5d:73:1d:4e:12:5d:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:49:B5:CF:28:3D:B8:B3:07:07:08:B6:1A:C4:63:F0:15:35:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B975DA9CB71311ECBC44158D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.5.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f9:a6:61:d2:be:b4:7d:7d:e4:56:ed:da:a8:19:34:e0:25:
90:2b:92:17:1b:4f:62:bb:28:fc:59:be:7e:2c:f2:b9:44:9a:
5e:6e:cb:4e:a7:e2:71:b6:97:19:d4:7c:57:fe:a4:57:6d:41:
fa:77:02:16:3e:f5:b4:42:3a:2e:50:75:e9:be:7c:9b:b7:51:
3e:7c:5b:4b:e6:38:67:5d:26:15:7f:d2:3a:21:cb:3c:b0:8a:
04:7b:73:00:38:9b:39:ce:40:72:db:da:13:f9:81:d1:e2:ff:
de:28:63:71:e9:61:71:5c:ba:99:6b:50:28:05:a1:c2:5b:9b:
08:2b:f3:8d:33:c9:b7:92:d0:f7:f6:65:ed:c1:d7:c2:55:ab:
c7:e9:2d:9f:ba:94:78:85:29:34:8a:df:94:03:f0:0b:2a:5f:
30:17:07:53:fb:ad:0b:f4:bd:0e:b8:cc:3a:61:66:d1:65:20:
77:18:a8:01:a5:96:f2:48:9e:83:26:ec:df:01:d1:0d:9a:ad:
a0:ab:af:a6:1e:65:f6:1d:a8:93:f0:9a:67:46:49:8b:e3:33:
ac:95:93:ae:f7:84:fa:da:89:fe:49:0f:1c:b2:41:b3:38:17:
da:26:85:32:21:a9:cb:c1:26:ae:a6:91:fa:39:a6:3d:8d:ce:
15:d2:51:63
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEv4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MDgwODEzMDVaFw0yMzA1MDcwODEzMDVaMBgxFjAU
BgNVBAMMDTYyNGZlZTk0LTAzMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDt2wnpqW61+O70KmG0rpX4jqNcToz+jsdoQbEBNi141CEPLZG7meTNojxK
/y1vfjBkAlcTsk4U+gsnk63U10zeyLdIDvrLT41NSbWfBsj6G9rr1ZTTE/wqIGjQ
Ej8ZWQBN/4n1YQ0+4i6gYUmRBtZJR1aqJT4DP5eXs0OnsxllDp/aF7DeTHLrYYV/
yVDo0garkE3FdkuFk0zpBSUtxG8vMOSUlQw6FKo4f8X6AubK0QdDyPddlwSGXqp2
hwKzUV6XPX439uNtu+cxL1zA+jCFki8EkzF6PEwhAlqrECeKmWzo0BtGiI5MQvLL
6cWbhlmX4j0jGgfy6F1zHU4SXYsnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUcblJ
tc8oPbizBwcIthrEY/AVNRkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0I5NzVEQTlDQjcxMzExRUNCQzQ0MTU4RDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4gUwDQYJKoZIhvcNAQELBQAD
ggEBAGn5pmHSvrR9feRW7dqoGTTgJZArkhcbT2K7KPxZvn4s8rlEml5uy06n4nG2
lxnUfFf+pFdtQfp3AhY+9bRCOi5Qdem+fJu3UT58W0vmOGddJhV/0johyzywigR7
cwA4mznOQHLb2hP5gdHi/94oY3HpYXFcuplrUCgFocJbmwgr840zybeS0Pf2Ze3B
18JVq8fpLZ+6lHiFKTSK35QD8AsqXzAXB1P7rQv0vQ64zDphZtFlIHcYqAGllvJI
noMm7N8B0Q2araCrr6YeZfYdqJPwmmdGSYvjM6yVk673hPraif5JDxyyQbM4F9om
hTIhqcvBJq6mkfo5pj2NzhXSUWM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org