Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA50B026245111EDB3D0699AF1222468.roa
File: BA50B026245111EDB3D0699AF1222468.roa (raw, json)
Hash identifier: OTGO/2UMU1cjp2ujlTm5LPh2kPQPCqjn28T01ZXsKDE=
Subject key identifier: 99:6E:91:61:87:1C:C3:76:43:D8:55:3F:4E:16:4E:20:E8:53:E0:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA50B026245111EDB3D0699AF1222468.roa
Signing time: Thu 25 Aug 2022 08:41:36 +0000
ROA not before: Thu 25 Aug 2022 08:41:32 +0000
ROA not after: Fri 30 Dec 2022 08:41:32 +0000
asID: 35916
IP address blocks: 156.227.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5876 (0x16f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 25 08:41:32 2022 GMT
Not After : Dec 30 08:41:32 2022 GMT
Subject: CN=630735bf-34cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:9b:cc:8c:a2:aa:d0:34:a9:71:d5:95:24:
7a:9e:ba:54:7a:54:70:67:02:b1:95:04:97:cd:ed:
c1:83:2c:54:70:8f:c6:f5:a8:8f:cf:8d:09:6a:ea:
0b:90:c2:1c:35:9b:4e:4e:83:14:5a:be:c8:e3:a0:
f6:03:b4:70:5f:4b:3c:0b:b1:53:cb:6d:a1:52:5e:
1a:fa:f5:61:4e:b1:8e:68:3f:49:35:a7:4f:46:44:
56:dd:e1:09:18:d7:ec:29:44:2f:3e:57:47:03:fc:
38:fc:e0:03:f0:56:3a:c8:9a:fd:20:62:f2:dd:fa:
76:dc:5e:cc:51:36:83:ae:30:8c:6a:d1:bd:cd:9b:
b3:de:46:b4:b1:51:a1:7f:cb:5e:a5:e4:7e:6d:0b:
36:3f:e3:25:eb:a2:ab:37:4b:60:2d:3c:1c:f2:a6:
34:a3:44:1e:92:36:9a:98:e5:94:94:27:20:bf:9c:
62:bd:02:ee:f5:7d:f5:a1:64:ac:cc:c1:58:4c:bc:
eb:f0:c3:a3:b9:d4:2f:84:74:dc:a8:11:fe:c8:1b:
d3:bc:12:f3:e1:c6:93:ba:2d:21:47:8c:fd:3c:ce:
12:ae:dd:fc:5a:48:f7:e2:64:f2:44:ba:e6:39:55:
8c:c9:11:41:43:b4:b0:b0:fa:6e:ce:93:25:9c:11:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:91:61:87:1C:C3:76:43:D8:55:3F:4E:16:4E:20:E8:53:E0:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA50B026245111EDB3D0699AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/21
Signature Algorithm: sha256WithRSAEncryption
61:56:3a:f5:47:8f:68:56:86:9d:91:01:d3:20:1c:d0:7b:5c:
7c:8b:2f:c9:5d:2d:5c:9f:25:c8:b1:28:ee:8b:54:a1:fb:da:
79:94:66:9c:80:52:89:f6:22:f0:c0:e6:e1:dd:c3:05:3d:02:
f0:b4:11:09:f5:f1:d1:dc:f7:0c:0b:58:cb:1a:74:6f:e5:59:
4a:e0:28:bf:dc:8b:cd:0c:97:b7:7c:af:e0:b0:b1:c3:1d:aa:
82:41:05:76:80:2b:95:ca:30:04:fc:64:de:69:07:8c:04:4d:
b2:d4:00:9a:4a:5f:68:fc:8d:22:4f:7e:d8:ed:a1:90:8f:5d:
e7:ec:72:f6:11:f1:9d:2b:e2:13:44:b9:d9:f5:f0:f0:3d:7a:
ad:b0:a7:47:1a:25:dc:74:6e:30:96:37:1a:4d:e2:52:9c:8d:
e3:b7:b2:04:b7:b5:42:49:c0:fa:a3:d2:b7:da:64:8e:6b:76:
5f:30:e7:61:29:61:90:49:b0:23:2e:b1:a2:dc:e3:61:26:d0:
f6:45:8b:f3:8d:23:20:b0:58:a5:e1:11:54:39:04:b2:33:14:
8e:20:97:ed:b2:e0:09:14:54:31:12:e6:fe:4a:d3:74:28:48:
6b:d1:39:ec:9a:f8:8e:bf:b5:8d:f5:47:fa:ac:94:54:2c:ed:
fe:80:74:f6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFvQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MjUwODQxMzJaFw0yMjEyMzAwODQxMzJaMBgxFjAU
BgNVBAMMDTYzMDczNWJmLTM0Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHApvMjKKq0DSpcdWVJHqeulR6VHBnArGVBJfN7cGDLFRwj8b1qI/PjQlq
6guQwhw1m05OgxRavsjjoPYDtHBfSzwLsVPLbaFSXhr69WFOsY5oP0k1p09GRFbd
4QkY1+wpRC8+V0cD/Dj84APwVjrImv0gYvLd+nbcXsxRNoOuMIxq0b3Nm7PeRrSx
UaF/y16l5H5tCzY/4yXroqs3S2AtPBzypjSjRB6SNpqY5ZSUJyC/nGK9Au71ffWh
ZKzMwVhMvOvww6O51C+EdNyoEf7IG9O8EvPhxpO6LSFHjP08zhKu3fxaSPfiZPJE
uuY5VYzJEUFDtLCw+m7OkyWcEeFPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmW6R
YYccw3ZD2FU/ThZOIOhT4IQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JBNTBCMDI2MjQ1MTExRURCM0QwNjk5QUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOc48AwDQYJKoZIhvcNAQELBQAD
ggEBAGFWOvVHj2hWhp2RAdMgHNB7XHyLL8ldLVyfJcixKO6LVKH72nmUZpyAUon2
IvDA5uHdwwU9AvC0EQn18dHc9wwLWMsadG/lWUrgKL/ci80Ml7d8r+CwscMdqoJB
BXaAK5XKMAT8ZN5pB4wETbLUAJpKX2j8jSJPftjtoZCPXefscvYR8Z0r4hNEudn1
8PA9eq2wp0caJdx0bjCWNxpN4lKcjeO3sgS3tUJJwPqj0rfaZI5rdl8w52EpYZBJ
sCMusaLc42Em0PZFi/ONIyCwWKXhEVQ5BLIzFI4gl+2y4AkUVDES5v5K03QoSGvR
Oeya+I6/tY31R/qslFQs7f6AdPY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org