Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732E28A488A11ECB4766340D8A014CE.roa
File: C732E28A488A11ECB4766340D8A014CE.roa (raw, json)
Hash identifier: 7KcOUgrLl1gjsN9QAf1iTBZHFVly2M5TULxIg7Jj+i0=
Subject key identifier: FB:67:10:03:03:36:E4:29:91:49:E8:47:96:41:3D:44:BE:A2:2D:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732E28A488A11ECB4766340D8A014CE.roa
Signing time: Thu 18 Nov 2021 16:15:43 +0000
ROA not before: Fri 19 Nov 2021 16:15:39 +0000
ROA not after: Sat 19 Nov 2022 16:15:39 +0000
asID: 139879
IP address blocks: 156.249.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3664 (0xe50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:15:39 2021 GMT
Not After : Nov 19 16:15:39 2022 GMT
Subject: CN=61967c2f-05ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:9c:00:f6:5f:39:16:b9:de:62:f2:cf:f0:
4f:23:ae:2c:35:eb:7c:87:75:82:b0:4d:f4:52:cd:
53:f1:08:0e:ae:b9:a3:b0:e9:c9:a4:28:a9:ba:51:
7c:df:f7:53:c6:72:46:3b:74:b9:df:23:c7:af:ea:
2f:22:f5:9b:88:fc:b2:eb:2d:37:1f:fc:a3:41:25:
35:30:66:b2:ae:8c:f0:c8:e8:41:01:28:d9:65:23:
d3:ad:9a:51:63:79:91:71:97:01:79:8b:62:3f:48:
4d:68:9b:b7:2e:46:ea:73:52:2e:02:12:18:b3:da:
5b:ad:5d:d1:5b:3f:6e:c1:b8:c4:bd:c4:30:71:9f:
23:0a:e3:bc:a1:5a:7e:87:91:f3:cd:68:2e:06:07:
47:71:32:97:99:ee:84:c5:34:a5:a0:9a:1a:bf:79:
50:29:18:da:27:e2:3b:ea:97:90:1a:1c:9c:c0:0a:
68:18:61:4d:34:72:c0:1b:f8:86:19:0a:4e:6e:99:
d7:5e:9d:2e:51:ac:17:07:e1:d1:89:74:a9:e1:f0:
4f:d1:44:f7:ab:7d:06:58:13:69:58:2e:d5:82:5d:
de:03:23:81:dc:37:bf:0a:33:33:45:f6:cb:da:e3:
2a:34:21:53:41:b2:41:0d:20:47:ca:c6:fc:ea:30:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:10:03:03:36:E4:29:91:49:E8:47:96:41:3D:44:BE:A2:2D:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732E28A488A11ECB4766340D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.205.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2d:f9:20:84:cc:f9:42:f0:a9:8e:78:17:51:4f:a2:eb:d3:
c8:56:dd:c4:04:53:b8:f3:6c:fd:24:3c:45:bc:9b:41:76:6f:
8e:19:3f:42:16:d8:3e:a7:40:18:1e:14:b8:d5:3d:23:0b:4f:
be:5e:64:10:8d:6e:38:c4:07:b3:31:8d:cd:d4:ae:19:cc:f4:
78:be:94:24:98:4e:1c:fd:b5:56:43:13:a5:0f:c0:57:e1:ae:
9b:05:f8:8c:dd:3e:01:cf:3d:56:9a:04:86:fd:9d:4f:48:f6:
58:2f:14:e8:1f:6f:1f:f9:ba:55:b5:d3:72:74:9a:49:44:56:
61:71:4c:0e:d0:ab:9d:a9:d5:0c:37:53:a1:d8:a8:c3:c0:ec:
a8:a3:b2:e0:a3:a1:30:6b:31:b6:ae:2c:cc:75:d5:df:81:80:
ff:bd:3e:2f:78:4c:47:27:ff:26:4f:b9:f5:6c:01:a4:6d:6e:
ad:5d:d5:a4:8c:9b:55:4a:4e:b1:a0:1a:2f:e1:3a:e8:b1:72:
37:c7:cb:73:fe:7f:13:32:8c:3d:a2:f7:6e:c9:5c:8e:c4:6a:
da:a4:21:8b:47:1a:6d:b0:ad:1e:fd:97:36:52:58:62:69:67:
0f:d6:a9:0c:ff:5a:4d:c9:17:f5:d7:f7:e6:08:0d:7d:fd:e8:
8b:c6:ae:81
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDlAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNjE1MzlaFw0yMjExMTkxNjE1MzlaMBgxFjAU
BgNVBAMMDTYxOTY3YzJmLTA1ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFSpwA9l85FrneYvLP8E8jriw163yHdYKwTfRSzVPxCA6uuaOw6cmkKKm6
UXzf91PGckY7dLnfI8ev6i8i9ZuI/LLrLTcf/KNBJTUwZrKujPDI6EEBKNllI9Ot
mlFjeZFxlwF5i2I/SE1om7cuRupzUi4CEhiz2lutXdFbP27BuMS9xDBxnyMK47yh
Wn6HkfPNaC4GB0dxMpeZ7oTFNKWgmhq/eVApGNon4jvql5AaHJzACmgYYU00csAb
+IYZCk5umddenS5RrBcH4dGJdKnh8E/RRPerfQZYE2lYLtWCXd4DI4HcN78KMzNF
9sva4yo0IVNBskENIEfKxvzqMIhJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+2cQ
AwM25CmRSehHlkE9RL6iLVAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M3MzJFMjhBNDg4QTExRUNCNDc2NjM0MEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+c0wDQYJKoZIhvcNAQELBQAD
ggEBACAt+SCEzPlC8KmOeBdRT6Lr08hW3cQEU7jzbP0kPEW8m0F2b44ZP0IW2D6n
QBgeFLjVPSMLT75eZBCNbjjEB7Mxjc3UrhnM9Hi+lCSYThz9tVZDE6UPwFfhrpsF
+IzdPgHPPVaaBIb9nU9I9lgvFOgfbx/5ulW103J0mklEVmFxTA7Qq52p1Qw3U6HY
qMPA7KijsuCjoTBrMbauLMx11d+BgP+9Pi94TEcn/yZPufVsAaRtbq1d1aSMm1VK
TrGgGi/hOuixcjfHy3P+fxMyjD2i927JXI7EatqkIYtHGm2wrR79lzZSWGJpZw/W
qQz/Wk3JF/XX9+YIDX396IvGroE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org