Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C379BF86E89611ECAD6EE0C6F1222468.roa
File: C379BF86E89611ECAD6EE0C6F1222468.roa (raw, json)
Hash identifier: Gg5vtIz4PnQQjRwGBk2nvkcqVuv9Mb5McBJXPIRnaco=
Subject key identifier: D7:10:C7:E9:96:87:07:4E:1B:D8:56:23:3C:49:E3:57:D1:CB:79:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1472
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C379BF86E89611ECAD6EE0C6F1222468.roa
Signing time: Fri 10 Jun 2022 08:24:37 +0000
ROA not before: Fri 10 Jun 2022 08:24:33 +0000
ROA not after: Wed 30 Nov 2022 08:24:33 +0000
asID: 133199
IP address blocks: 156.245.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5234 (0x1472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:24:33 2022 GMT
Not After : Nov 30 08:24:33 2022 GMT
Subject: CN=62a2ffc4-f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:54:65:99:4b:3c:b5:14:64:3a:01:15:95:
50:e9:8a:85:4d:ac:64:4b:f3:62:6c:a3:00:93:2f:
9d:0c:cc:a5:9b:5a:13:f5:4e:e0:30:a0:57:99:a5:
1f:e8:52:d4:73:d8:ab:9f:cc:d7:09:d3:a0:a5:81:
88:a8:d6:15:d6:bc:cb:7c:c6:86:7d:4f:2f:b7:83:
3e:98:be:46:19:83:f0:00:fd:f2:a7:9a:6b:d8:b8:
d2:7e:0e:d4:3a:c5:92:79:1a:e0:9c:13:3b:5b:1e:
17:cd:7f:c6:c6:80:4e:44:c2:5c:8a:db:b8:53:2a:
e9:93:e2:00:4a:86:d9:32:ec:a4:6e:da:db:5e:7e:
1c:02:06:12:7d:8a:50:8d:8d:1e:ed:f0:b9:11:2c:
e5:8f:41:9b:bf:a0:f4:39:63:bd:cc:8a:fa:01:07:
2b:b6:1a:61:7c:c2:68:f7:5f:ca:8e:2a:0d:e5:63:
9f:ab:56:16:d2:87:b4:06:9f:ac:c7:54:cd:ce:68:
95:8e:ae:a0:64:93:35:09:c2:62:b8:31:19:c8:17:
7d:30:f0:f7:65:a0:9a:3b:78:12:24:75:c9:5d:07:
af:76:c7:77:7d:29:d7:16:cc:24:58:07:ea:a5:5e:
dd:ac:4e:ee:de:ee:03:a0:2f:c1:53:5d:ac:a3:ed:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:10:C7:E9:96:87:07:4E:1B:D8:56:23:3C:49:E3:57:D1:CB:79:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C379BF86E89611ECAD6EE0C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f8:93:35:a9:25:66:44:6d:88:63:78:1e:bb:ff:af:61:52:
ba:fe:ad:55:03:93:a2:17:6a:00:5b:55:e1:ab:78:fa:86:0d:
50:9c:7f:99:63:a5:68:bb:65:c0:11:94:1c:8f:4d:2a:5d:c2:
39:ae:72:fa:04:60:7f:95:e2:e7:68:59:2c:f5:66:be:5b:ab:
64:1d:09:38:e1:18:64:7c:b1:54:1d:6c:0a:f4:3f:ad:46:1e:
44:56:9c:7e:db:66:31:22:06:a0:31:8f:72:5e:44:b3:bb:7c:
69:9b:73:39:f7:db:92:1f:70:b0:49:06:99:fc:a8:51:bc:f5:
a2:26:05:05:86:92:c2:9e:de:c4:3d:d5:2c:e7:63:65:9a:31:
30:78:d9:e3:86:e9:38:de:15:7a:7a:6a:58:b7:d0:f7:ff:94:
16:00:99:29:19:b4:51:3a:f2:12:84:96:e3:16:be:bb:a9:74:
ac:5f:c3:12:ff:a2:0b:fb:a3:3d:7d:79:8f:47:f0:7f:b0:28:
bd:dc:3e:76:3f:a2:1e:b2:f0:9f:1a:3e:14:ea:0c:37:43:1d:
6d:af:da:ef:38:73:fc:c3:de:e1:0f:a6:f5:69:ec:a6:be:b1:
26:2c:ab:53:00:aa:de:21:88:dc:5a:6e:87:a8:33:06:69:b3:
7e:31:30:f5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFHIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA2MTAwODI0MzNaFw0yMjExMzAwODI0MzNaMBgxFjAU
BgNVBAMMDTYyYTJmZmM0LWY1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFQVRlmUs8tRRkOgEVlVDpioVNrGRL82JsowCTL50MzKWbWhP1TuAwoFeZ
pR/oUtRz2KufzNcJ06ClgYio1hXWvMt8xoZ9Ty+3gz6YvkYZg/AA/fKnmmvYuNJ+
DtQ6xZJ5GuCcEztbHhfNf8bGgE5EwlyK27hTKumT4gBKhtky7KRu2ttefhwCBhJ9
ilCNjR7t8LkRLOWPQZu/oPQ5Y73MivoBByu2GmF8wmj3X8qOKg3lY5+rVhbSh7QG
n6zHVM3OaJWOrqBkkzUJwmK4MRnIF30w8PdloJo7eBIkdcldB692x3d9KdcWzCRY
B+qlXt2sTu7e7gOgL8FTXayj7eUZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1xDH
6ZaHB04b2FYjPEnjV9HLea8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0MzNzlCRjg2RTg5NjExRUNBRDZFRTBDNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9RcwDQYJKoZIhvcNAQELBQAD
ggEBAHL4kzWpJWZEbYhjeB67/69hUrr+rVUDk6IXagBbVeGrePqGDVCcf5ljpWi7
ZcARlByPTSpdwjmucvoEYH+V4udoWSz1Zr5bq2QdCTjhGGR8sVQdbAr0P61GHkRW
nH7bZjEiBqAxj3JeRLO7fGmbczn325IfcLBJBpn8qFG89aImBQWGksKe3sQ91Szn
Y2WaMTB42eOG6TjeFXp6ali30Pf/lBYAmSkZtFE68hKEluMWvrupdKxfwxL/ogv7
oz19eY9H8H+wKL3cPnY/oh6y8J8aPhTqDDdDHW2v2u84c/zD3uEPpvVp7Ka+sSYs
q1MAqt4hiNxaboeoMwZps34xMPU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org