Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBEF19D2327411EDAF2958D2F1222468.roa
File: BBEF19D2327411EDAF2958D2F1222468.roa (raw, json)
Hash identifier: QrYpanlZHAh/TuqpHqWdNlDrIvYkVlInDY71Kf0+2XA=
Subject key identifier: 2B:42:FC:47:D9:16:8A:A4:DE:5E:9A:EF:30:AE:A0:28:94:4A:06:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBEF19D2327411EDAF2958D2F1222468.roa
Signing time: Mon 12 Sep 2022 08:27:27 +0000
ROA not before: Mon 12 Sep 2022 08:27:24 +0000
ROA not after: Sun 15 Jan 2023 08:27:24 +0000
asID: 1239
IP address blocks: 156.251.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6051 (0x17a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 08:27:24 2022 GMT
Not After : Jan 15 08:27:24 2023 GMT
Subject: CN=631eed6f-059e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:fc:d9:dc:a9:9d:f7:d2:c0:cc:65:93:36:
fc:12:2a:06:03:55:d8:51:9c:09:6f:eb:b7:ec:a2:
7e:0f:12:23:6d:5c:73:69:84:d9:38:5f:8a:f3:1a:
c6:9c:ed:c6:8c:49:33:e4:cb:06:01:4e:5b:0a:d9:
08:cf:92:6c:b0:b4:22:e9:d0:0c:ae:d6:67:72:a7:
5d:91:52:8e:93:29:41:d4:11:81:de:a7:83:bc:48:
34:ea:9d:b3:46:6b:67:2f:4d:e1:d2:21:45:01:c0:
52:8b:7e:9b:01:b1:fb:ba:5a:f6:8a:e7:6d:ee:60:
9a:ab:eb:a9:1c:2a:c4:1b:c2:c0:f8:f9:4f:6f:2d:
85:bb:69:0f:63:f0:eb:2b:03:df:6f:c8:bd:f1:d8:
7f:22:2f:01:27:5d:98:45:68:cc:be:94:6f:b2:63:
77:9b:7a:c1:76:24:60:7a:ca:00:06:39:5a:c9:4a:
3e:21:f9:47:d9:d2:e2:e9:9c:bc:20:7c:98:8b:5a:
7e:9b:f9:6d:03:28:9c:27:5e:98:c5:42:92:b9:14:
db:fa:78:c2:9b:e5:a4:3a:c4:8e:f2:ac:57:1a:26:
c3:42:d9:c3:1b:6d:23:cc:50:45:38:6e:77:22:d3:
08:4f:27:08:c3:a7:18:47:6a:98:c7:f6:87:02:2a:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:FC:47:D9:16:8A:A4:DE:5E:9A:EF:30:AE:A0:28:94:4A:06:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBEF19D2327411EDAF2958D2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.112.0/20
Signature Algorithm: sha256WithRSAEncryption
57:a2:a4:7e:08:85:6f:ab:73:62:d3:b4:9c:58:11:2b:2c:c9:
6f:46:92:34:63:ea:59:47:9d:3b:52:72:bc:7a:25:9a:b5:98:
9d:20:82:d8:1e:79:93:f5:57:96:4b:8d:c4:d9:65:23:c6:26:
e3:46:76:46:f4:3f:c8:d6:9c:cf:4c:1a:04:24:b2:11:1e:a0:
0c:58:20:09:8b:5c:da:ce:1e:1c:c6:2f:29:77:b8:2b:eb:f7:
a3:b3:f4:4f:17:4c:4e:58:a0:0d:8c:75:0e:7f:a6:8f:56:1d:
2e:72:a0:79:cb:27:b0:53:ac:3d:a3:73:ba:08:51:62:35:4b:
33:2b:17:96:da:55:61:76:88:2f:e8:41:7e:4b:99:6b:13:d1:
22:cf:59:79:97:92:79:c4:19:88:1c:fb:6c:c6:ae:7f:e8:88:
f5:8a:97:d4:22:18:0b:5c:9c:23:a9:c1:9b:67:54:e1:21:b0:
32:22:39:08:c2:89:dc:17:59:aa:12:7c:b7:1a:12:5b:a2:74:
3e:5f:b4:39:fb:b4:2c:39:58:d0:3d:51:14:01:30:b3:f5:84:
d5:67:4d:5e:f2:2a:e7:3d:e5:50:0a:e0:7a:f4:82:d7:03:6c:
62:f3:2d:58:ba:2d:0f:15:5d:b1:19:4d:5e:30:93:24:23:8b:
38:b0:26:22
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICF6MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MTIwODI3MjRaFw0yMzAxMTUwODI3MjRaMBgxFjAU
BgNVBAMMDTYzMWVlZDZmLTA1OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwFfzZ3Kmd99LAzGWTNvwSKgYDVdhRnAlv67fson4PEiNtXHNphNk4X4rz
Gsac7caMSTPkywYBTlsK2QjPkmywtCLp0Ayu1mdyp12RUo6TKUHUEYHep4O8SDTq
nbNGa2cvTeHSIUUBwFKLfpsBsfu6WvaK523uYJqr66kcKsQbwsD4+U9vLYW7aQ9j
8OsrA99vyL3x2H8iLwEnXZhFaMy+lG+yY3ebesF2JGB6ygAGOVrJSj4h+UfZ0uLp
nLwgfJiLWn6b+W0DKJwnXpjFQpK5FNv6eMKb5aQ6xI7yrFcaJsNC2cMbbSPMUEU4
bnci0whPJwjDpxhHapjH9ocCKgQlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUK0L8
R9kWiqTeXprvMK6gKJRKBqEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JCRUYxOUQyMzI3NDExRURBRjI5NThEMkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASc+3AwDQYJKoZIhvcNAQELBQAD
ggEBAFeipH4IhW+rc2LTtJxYESssyW9GkjRj6llHnTtScrx6JZq1mJ0ggtgeeZP1
V5ZLjcTZZSPGJuNGdkb0P8jWnM9MGgQkshEeoAxYIAmLXNrOHhzGLyl3uCvr96Oz
9E8XTE5YoA2MdQ5/po9WHS5yoHnLJ7BTrD2jc7oIUWI1SzMrF5baVWF2iC/oQX5L
mWsT0SLPWXmXknnEGYgc+2zGrn/oiPWKl9QiGAtcnCOpwZtnVOEhsDIiOQjCidwX
WaoSfLcaEluidD5ftDn7tCw5WNA9URQBMLP1hNVnTV7yKuc95VAK4Hr0gtcDbGLz
LVi6LQ8VXbEZTV4wkyQjiziwJiI=
-----END CERTIFICATE-----