Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB977B90DF2E11EBA9228355F8AEA228.roa
File: BB977B90DF2E11EBA9228355F8AEA228.roa (raw, json)
Hash identifier: rok26eSLTd2cFxTuYXSCVmsTw/7NWCfSP0B8ppEck/k=
Subject key identifier: 58:04:DC:71:9C:0A:C1:CA:71:D7:18:64:51:3C:CE:F9:4F:CB:F5:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 06D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB977B90DF2E11EBA9228355F8AEA228.roa
Signing time: Wed 07 Jul 2021 14:22:17 +0000
ROA not before: Wed 07 Jul 2021 14:22:13 +0000
ROA not after: Sun 07 Aug 2022 14:22:13 +0000
asID: 22773
IP address blocks: 156.232.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:22:13 2021 GMT
Not After : Aug 7 14:22:13 2022 GMT
Subject: CN=60e5b899-4d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:ab:40:d2:d0:0b:20:69:b3:e5:ab:88:68:
43:b5:c6:35:ac:17:ec:80:c3:2e:69:e2:e0:ec:fb:
58:31:14:24:0b:16:d1:ac:6e:45:2d:21:e6:50:8a:
2c:82:80:6e:01:5c:17:15:90:bb:5c:ea:77:1a:3a:
c5:9e:17:e8:02:e5:65:e5:f6:9e:5a:7d:b2:8b:de:
91:dc:a2:15:f8:db:11:50:5b:5c:33:86:dd:b0:6f:
60:01:0b:96:35:a8:5d:cf:6d:ca:70:a6:a1:c0:5e:
f1:23:18:83:bb:25:41:28:b6:2a:27:13:0b:87:ee:
74:f8:a4:43:0c:b9:cf:3c:f5:c1:48:8b:f9:d0:c7:
92:f8:89:96:e0:5e:87:d9:55:25:7a:1d:fa:74:f3:
64:ce:df:b6:3e:02:c8:3d:fd:db:fd:30:86:44:c6:
f0:b2:9e:81:7d:73:ae:7f:79:54:80:66:85:61:ea:
b9:f0:47:10:c2:0e:bd:19:ae:fb:27:ef:60:49:b3:
4a:38:77:a8:e7:1c:dc:42:d7:a3:03:8e:34:1a:e7:
6b:69:9f:cb:b1:df:03:d1:90:57:6a:79:45:4f:48:
b6:64:83:fe:78:cd:09:e5:bf:14:d9:26:85:eb:71:
6b:c4:46:a6:c6:30:bd:39:76:83:f7:b0:eb:82:3c:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:DC:71:9C:0A:C1:CA:71:D7:18:64:51:3C:CE:F9:4F:CB:F5:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB977B90DF2E11EBA9228355F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:f6:5e:fe:c2:6e:2d:e2:16:80:58:47:b7:d2:62:e4:d5:17:
2e:cd:4d:9a:01:2e:52:dc:af:21:ef:e6:8a:d7:e7:02:bc:21:
e7:d8:7a:df:02:68:48:50:bd:32:a1:8d:50:78:b4:7b:f5:a1:
f6:b9:ea:e1:4d:bf:44:24:4b:f9:be:b5:3d:35:86:94:51:36:
f8:11:b7:f0:8d:7e:5e:dd:0c:76:1a:9b:8b:ac:09:c9:cc:ac:
7d:96:59:30:19:b9:1e:2c:d9:99:19:58:4d:4b:89:54:04:f5:
f0:53:cc:98:12:2b:52:ac:31:25:dc:3a:5c:45:50:c9:b5:60:
1a:5f:54:91:d5:cb:60:a9:5d:14:05:a7:76:cd:14:73:eb:c3:
ac:18:df:86:70:aa:87:e5:6e:13:f9:e8:a9:18:85:44:8f:97:
1a:91:89:b3:5d:12:8a:cc:77:77:80:a7:db:69:23:b4:b0:4b:
a2:76:4f:29:08:80:1c:aa:0f:07:26:3b:ff:c4:5f:6a:4e:7f:
86:a9:2c:d8:f5:99:98:f4:46:56:0b:60:77:a6:aa:5c:e1:2e:
9f:a4:a6:2b:93:ff:3e:29:2f:f3:67:3d:48:c5:59:09:8a:5f:
81:5e:47:a3:04:1c:b4:00:c4:0e:ea:71:11:ea:15:03:a0:3d:
a1:dc:13:29
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA3MDcxNDIyMTNaFw0yMjA4MDcxNDIyMTNaMBgxFjAU
BgNVBAMTDTYwZTViODk5LTRkNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgMqtA0tALIGmz5auIaEO1xjWsF+yAwy5p4uDs+1gxFCQLFtGsbkUtIeZQ
iiyCgG4BXBcVkLtc6ncaOsWeF+gC5WXl9p5afbKL3pHcohX42xFQW1wzht2wb2AB
C5Y1qF3PbcpwpqHAXvEjGIO7JUEotionEwuH7nT4pEMMuc889cFIi/nQx5L4iZbg
XofZVSV6Hfp082TO37Y+Asg9/dv9MIZExvCynoF9c65/eVSAZoVh6rnwRxDCDr0Z
rvsn72BJs0o4d6jnHNxC16MDjjQa52tpn8ux3wPRkFdqeUVPSLZkg/54zQnlvxTZ
JoXrcWvERqbGML05doP3sOuCPLm3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUWATc
cZwKwcpx1xhkUTzO+U/L9SIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JCOTc3QjkwREYyRTExRUJBOTIyODM1NUY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc6AAwDQYJKoZIhvcNAQELBQAD
ggEBAKz2Xv7Cbi3iFoBYR7fSYuTVFy7NTZoBLlLcryHv5orX5wK8IefYet8CaEhQ
vTKhjVB4tHv1ofa56uFNv0QkS/m+tT01hpRRNvgRt/CNfl7dDHYam4usCcnMrH2W
WTAZuR4s2ZkZWE1LiVQE9fBTzJgSK1KsMSXcOlxFUMm1YBpfVJHVy2CpXRQFp3bN
FHPrw6wY34ZwqoflbhP56KkYhUSPlxqRibNdEorMd3eAp9tpI7SwS6J2TykIgByq
DwcmO//EX2pOf4apLNj1mZj0RlYLYHemqlzhLp+kpiuT/z4pL/NnPUjFWQmKX4Fe
R6MEHLQAxA7qcRHqFQOgPaHcEyk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org