Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB95E724F91911EDB47C62204AD9E6FC.roa
File: BB95E724F91911EDB47C62204AD9E6FC.roa (raw, json)
Hash identifier: CdAtEBKL70H4c2c1gCAFWhB396ptnUabzHcWH6ADhf8=
Subject key identifier: 08:65:1F:2A:B6:44:21:B7:6B:52:2A:5B:69:90:FB:70:56:2A:EC:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2709
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB95E724F91911EDB47C62204AD9E6FC.roa
Signing time: Tue 23 May 2023 03:27:23 +0000
ROA not before: Tue 23 May 2023 03:27:20 +0000
ROA not after: Sun 05 May 2024 03:27:20 +0000
asID: 398968
IP address blocks: 156.233.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9993 (0x2709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:27:20 2023 GMT
Not After : May 5 03:27:20 2024 GMT
Subject: CN=646c329b-80c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:16:f2:d1:f4:4a:0d:0a:4c:a2:77:a8:ba:
75:f5:29:a0:0b:9e:01:21:87:1e:c6:32:d0:7f:64:
04:1a:e5:7d:dd:a6:fb:6c:a5:86:3a:71:c5:b9:6a:
a6:ac:5b:bd:7a:30:b3:f7:d7:1b:5b:a3:12:9a:5a:
20:5e:5f:46:56:af:c8:d2:99:5e:a9:2d:b0:36:85:
99:19:aa:78:bc:4b:c1:ac:a0:60:67:f5:e4:2c:66:
9a:47:bb:0e:69:d2:05:e8:c0:e3:28:34:0f:0a:00:
89:f9:e7:cb:69:87:c2:aa:56:e5:eb:60:ba:37:06:
f4:22:a0:d2:6f:9a:09:14:e6:3c:f4:26:51:54:a4:
9f:5e:52:b9:80:ff:e9:f2:37:08:e3:78:ae:90:50:
ab:3c:2f:f7:df:0e:12:db:82:13:d8:6f:a0:91:5b:
28:ba:ed:21:0e:da:2a:64:46:cd:f3:e3:6e:d9:be:
79:3c:ef:5a:4c:a2:ee:cf:7f:32:16:59:22:2d:dd:
9c:11:fc:7c:ae:2d:ff:ac:4c:29:7f:76:1e:25:57:
22:4b:94:2e:7c:18:9a:28:39:fd:ff:1d:44:1e:c1:
c4:d3:b8:89:20:76:16:f6:2f:7c:9e:5e:f6:6d:cb:
02:ef:cc:52:43:78:27:87:68:18:19:4c:18:1a:cd:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:1F:2A:B6:44:21:B7:6B:52:2A:5B:69:90:FB:70:56:2A:EC:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB95E724F91911EDB47C62204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
32:08:e9:26:e4:74:24:1d:4f:5c:95:81:4a:f6:43:c7:e0:fd:
8e:a7:fd:9c:24:8e:cb:1e:33:b6:33:77:c9:c2:16:fa:32:05:
c9:d6:86:fe:16:20:d0:4a:4d:a0:4a:f5:3e:3e:b0:76:55:88:
ad:58:6b:27:e8:d2:50:bc:c1:8c:57:99:e6:0a:a0:7d:9c:19:
02:cc:4a:92:6a:f6:1d:a1:fd:22:a5:cf:16:44:4d:2e:9f:fa:
50:36:32:97:dd:c3:d0:fe:d4:d7:a9:11:73:cd:ee:55:bf:90:
b1:45:38:5b:5f:d6:a8:8d:92:cd:1b:46:e9:5c:63:f6:02:45:
da:6d:89:c5:71:d4:82:d0:8a:7f:fa:59:75:d6:8c:a1:b9:02:
25:91:b6:13:31:bd:87:3c:28:15:44:62:d5:1a:1f:94:a0:7b:
0d:a9:d2:3b:ef:8f:b8:8f:cd:7a:fc:95:aa:bc:2a:cd:35:d2:
81:cb:8c:12:54:be:51:61:9d:df:19:82:eb:14:5f:8c:f1:ab:
58:93:c9:9a:f5:e3:0f:d3:99:26:d7:ec:0c:84:22:c6:28:22:
8c:b4:ee:e9:c2:e7:c2:5c:e7:57:57:33:90:68:e6:0a:97:0a:
40:dc:4d:6e:3a:6e:27:00:08:f7:22:dd:7e:70:ce:b9:b5:34:
f6:82:aa:0d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJwkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMzI3MjBaFw0yNDA1MDUwMzI3MjBaMBgxFjAU
BgNVBAMTDTY0NmMzMjliLTgwYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj7Rby0fRKDQpMoneounX1KaALngEhhx7GMtB/ZAQa5X3dpvtspYY6ccW5
aqasW716MLP31xtboxKaWiBeX0ZWr8jSmV6pLbA2hZkZqni8S8GsoGBn9eQsZppH
uw5p0gXowOMoNA8KAIn558tph8KqVuXrYLo3BvQioNJvmgkU5jz0JlFUpJ9eUrmA
/+nyNwjjeK6QUKs8L/ffDhLbghPYb6CRWyi67SEO2ipkRs3z427Zvnk871pMou7P
fzIWWSIt3ZwR/HyuLf+sTCl/dh4lVyJLlC58GJooOf3/HUQewcTTuIkgdhb2L3ye
XvZtywLvzFJDeCeHaBgZTBgazefvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCGUf
KrZEIbdrUipbaZD7cFYq7OcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JCOTVFNzI0RjkxOTExRURCNDdDNjIyMDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOc6dgwDQYJKoZIhvcNAQELBQAD
ggEBADII6SbkdCQdT1yVgUr2Q8fg/Y6n/ZwkjsseM7Yzd8nCFvoyBcnWhv4WINBK
TaBK9T4+sHZViK1Yayfo0lC8wYxXmeYKoH2cGQLMSpJq9h2h/SKlzxZETS6f+lA2
Mpfdw9D+1NepEXPN7lW/kLFFOFtf1qiNks0bRulcY/YCRdpticVx1ILQin/6WXXW
jKG5AiWRthMxvYc8KBVEYtUaH5Sgew2p0jvvj7iPzXr8laq8Ks010oHLjBJUvlFh
nd8ZgusUX4zxq1iTyZr14w/TmSbX7AyEIsYoIoy07unC58Jc51dXM5Bo5gqXCkDc
TW46bicACPci3X5wzrm1NPaCqg0=
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org