Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC0ADE7C4A6011EF8BDEEA92762E951A.roa
File: CC0ADE7C4A6011EF8BDEEA92762E951A.roa (raw, json)
Hash identifier: PZoCVFHe2Tsnn7/FxLhWgojQEijlfdvOGrAK0iuNGmI=
Subject key identifier: BA:0B:AC:0D:F7:85:19:C7:B4:91:2A:EB:60:FF:6C:E9:C6:6B:33:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC0ADE7C4A6011EF8BDEEA92762E951A.roa
Signing time: Thu 25 Jul 2024 08:35:07 +0000
ROA not before: Thu 25 Jul 2024 08:35:04 +0000
ROA not after: Sat 03 Aug 2024 08:35:04 +0000
asID: 22773
IP address blocks: 156.239.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40929 (0x9fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:35:04 2024 GMT
Not After : Aug 3 08:35:04 2024 GMT
Subject: CN=66a20e3b-a00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:90:db:a9:65:c2:9f:c4:34:f8:b8:2b:90:
51:3f:1d:52:25:db:9d:73:01:10:9f:5d:4c:ce:2f:
c5:91:b4:39:31:86:bd:2c:dc:04:2e:4c:fa:c4:81:
8d:6e:4d:a5:4d:c9:ac:c8:df:cb:3d:f9:5f:39:0d:
f4:1a:30:56:04:96:33:0e:2e:93:d5:31:b7:ff:e1:
bb:a3:c6:de:d3:25:bc:6e:8e:fc:60:97:55:4e:0a:
41:d4:f8:0c:a9:90:38:0e:dd:03:4e:d1:a2:c7:1a:
43:47:64:c7:38:88:03:d0:91:15:cf:19:15:01:b0:
69:f5:e8:7e:f3:63:b6:d9:eb:88:57:c1:10:db:81:
aa:a1:3d:40:61:99:47:6b:e0:b0:cb:ee:5b:90:42:
1c:0d:99:51:f9:ca:ae:2d:01:49:59:80:79:11:8a:
e8:04:01:a6:03:02:59:db:71:52:9a:a8:0f:06:bf:
e2:d1:59:01:47:b4:99:cf:f9:b5:0b:ca:43:b6:4d:
0f:59:c4:29:fc:8a:09:aa:4e:df:30:d1:e5:bc:53:
65:3e:a0:0e:dd:8b:d6:2c:b8:81:e7:12:79:67:6b:
cd:35:88:60:3c:3b:9c:d5:40:cf:04:82:cf:bd:f3:
df:9a:6a:a3:cb:ad:93:ba:55:a5:79:67:5d:46:01:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:AC:0D:F7:85:19:C7:B4:91:2A:EB:60:FF:6C:E9:C6:6B:33:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC0ADE7C4A6011EF8BDEEA92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.16.0/21
Signature Algorithm: sha256WithRSAEncryption
11:48:fa:7e:d2:26:20:91:ac:b1:63:b9:7e:37:d5:ea:ec:68:
11:4c:46:62:48:f0:65:de:58:83:b1:3c:ba:f6:8c:75:82:e7:
bf:c1:73:c0:5b:25:2a:3c:35:fe:fb:5e:5b:a8:5f:7c:6f:c4:
a2:b2:0d:29:74:8b:1f:67:5a:69:a6:09:9e:5a:75:41:7d:75:
bb:5b:42:88:af:a7:a0:76:12:22:64:53:1e:2d:81:14:ab:1c:
f7:06:e8:10:99:18:89:63:d1:18:1d:f3:79:1c:1b:36:1b:c4:
6e:93:66:60:95:4a:b8:bc:a5:d8:b4:6b:ac:a9:72:7f:dd:37:
17:ac:d6:b0:84:ab:e5:81:08:ec:59:d2:59:6c:6a:8b:1a:0d:
1b:85:c4:26:ba:26:a6:ae:c4:db:10:41:8f:cc:49:46:d4:df:
6a:e9:e4:ef:de:ed:20:c3:98:c1:79:3e:d0:a1:7e:62:7e:bc:
8a:78:08:74:3e:d5:8a:cf:31:04:8a:a6:f9:53:26:2b:5c:e9:
c9:9a:c0:a3:6a:7d:7d:05:a5:cf:cd:8c:c2:7f:31:ac:c4:bf:
f9:54:ad:24:84:5b:ed:05:c5:e6:47:4e:ce:10:de:00:57:d3:
3b:a0:dc:a6:52:d7:bd:fb:51:55:0a:82:b3:19:9f:39:bf:9f:
19:8e:06:52
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDgzNTA0WhcNMjQwODAzMDgzNTA0WjAYMRYw
FAYDVQQDEw02NmEyMGUzYi1hMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0DGQ26llwp/ENPi4K5BRPx1SJdudcwEQn11Mzi/FkbQ5MYa9LNwELkz6
xIGNbk2lTcmsyN/LPflfOQ30GjBWBJYzDi6T1TG3/+G7o8be0yW8bo78YJdVTgpB
1PgMqZA4Dt0DTtGixxpDR2THOIgD0JEVzxkVAbBp9eh+82O22euIV8EQ24GqoT1A
YZlHa+Cwy+5bkEIcDZlR+cquLQFJWYB5EYroBAGmAwJZ23FSmqgPBr/i0VkBR7SZ
z/m1C8pDtk0PWcQp/IoJqk7fMNHlvFNlPqAO3YvWLLiB5xJ5Z2vNNYhgPDuc1UDP
BILPvfPfmmqjy62TulWleWddRgEmfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLoL
rA33hRnHtJEq62D/bOnGazOIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQzBBREU3QzRBNjAxMUVGOEJERUVBOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO8QMA0GCSqGSIb3DQEBCwUA
A4IBAQARSPp+0iYgkayxY7l+N9Xq7GgRTEZiSPBl3liDsTy69ox1gue/wXPAWyUq
PDX++15bqF98b8Sisg0pdIsfZ1pppgmeWnVBfXW7W0KIr6egdhIiZFMeLYEUqxz3
BugQmRiJY9EYHfN5HBs2G8Ruk2ZglUq4vKXYtGusqXJ/3TcXrNawhKvlgQjsWdJZ
bGqLGg0bhcQmuiamrsTbEEGPzElG1N9q6eTv3u0gw5jBeT7QoX5ifryKeAh0PtWK
zzEEiqb5UyYrXOnJmsCjan19BaXPzYzCfzGsxL/5VK0khFvtBcXmR07OEN4AV9M7
oNymUte9+1FVCoKzGZ85v58ZjgZS
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org