Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65CBEC63CCE11EF8BFEC146762E951A.roa
File: D65CBEC63CCE11EF8BFEC146762E951A.roa (raw, json)
Hash identifier: otIcDORBNEvs4AtYSkBi+tq0lWRvLYVwBFBadnnO7u8=
Subject key identifier: 72:A3:4C:40:57:E6:B7:7B:CA:FF:C2:9B:6A:03:64:D3:66:82:4A:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9958
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65CBEC63CCE11EF8BFEC146762E951A.roa
Signing time: Mon 08 Jul 2024 02:07:33 +0000
ROA not before: Mon 08 Jul 2024 02:07:30 +0000
ROA not after: Sat 10 Aug 2024 02:07:30 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39256 (0x9958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:07:30 2024 GMT
Not After : Aug 10 02:07:30 2024 GMT
Subject: CN=668b49e5-f7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:23:d9:82:68:35:fb:84:35:a3:34:03:62:
2d:32:a4:77:34:2c:1f:ef:f6:b3:87:ce:cf:93:8f:
e3:e5:de:e6:49:ca:1c:82:eb:b0:af:b2:d0:d4:2c:
32:fb:11:d6:dc:9c:89:07:8e:0b:07:be:e7:32:2a:
60:a2:30:d3:3e:db:54:2e:1b:30:b8:78:28:2c:9e:
e6:93:f9:bc:f5:82:18:fc:74:91:07:c2:9d:08:a7:
11:ad:04:42:1d:25:ec:c2:1a:3d:71:13:59:d8:93:
38:2e:27:5e:74:19:e3:5a:e1:4e:15:98:0c:fa:0e:
61:3f:cd:33:55:5a:6a:0b:d9:eb:ed:eb:58:ab:ec:
e6:2e:fb:fa:08:90:c6:ff:88:84:4f:05:07:fa:33:
5b:b7:da:78:f1:e3:a3:66:b4:a0:cd:94:d4:f6:18:
29:a3:d0:b7:5b:d0:35:e2:9a:ee:b1:bd:de:d5:31:
8c:ea:2a:3c:0f:fd:eb:d8:0c:71:f7:fe:2c:a0:54:
62:34:c3:6d:fd:ce:e1:5c:e2:c1:86:3d:ba:97:21:
bf:a9:91:72:53:5f:77:58:ca:ab:1f:a0:0f:0d:74:
95:31:58:18:e3:fa:14:c7:18:d4:30:c8:da:09:2a:
98:a7:14:87:b7:22:46:9d:8c:17:4e:6c:0c:50:31:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:4C:40:57:E6:B7:7B:CA:FF:C2:9B:6A:03:64:D3:66:82:4A:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65CBEC63CCE11EF8BFEC146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:78:24:54:4f:5d:68:8d:56:d8:35:18:2c:c9:00:0c:76:8b:
1f:16:16:7f:03:44:9d:85:fb:8c:ae:44:b4:02:aa:3d:d3:80:
5b:33:33:e8:2b:b4:2b:ee:4e:19:f8:b5:e5:32:85:49:ae:ec:
77:c2:b5:9d:c4:62:e6:a7:8c:c6:67:c7:ab:e5:3a:94:e9:1a:
76:c5:68:1b:1a:6b:27:62:f3:56:d0:ed:4f:a2:78:9c:a0:6d:
04:13:0a:f7:63:f3:bb:26:96:e2:4c:02:64:13:f5:81:8a:7c:
ba:fe:7b:26:10:b4:ca:fe:4e:bb:a0:0c:d9:74:fa:5b:87:b7:
df:aa:be:0e:9f:a0:d0:99:de:11:6c:40:61:53:d2:15:9f:3d:
ff:36:a8:79:09:76:3f:b3:d5:d0:51:b1:dc:18:7a:7b:d5:d0:
81:9d:2e:65:d6:8b:fb:6f:b8:15:12:6a:ac:e4:ab:fe:e4:f8:
29:02:c4:ab:a5:df:9b:93:bd:ae:05:cc:22:9c:7f:c8:94:08:
54:81:03:11:66:81:0b:7b:bc:07:e9:a1:ee:6c:00:dc:03:59:
e7:4a:84:25:42:fe:82:41:c2:e7:fb:ec:6b:33:38:83:eb:00:
0e:3f:bb:70:54:b8:97:b8:c7:9c:8c:a5:a9:a4:a6:1a:53:39:
3b:40:d1:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJlYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA4MDIwNzMwWhcNMjQwODEwMDIwNzMwWjAYMRYw
FAYDVQQDEw02NjhiNDllNS1mN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4q0j2YJoNfuENaM0A2ItMqR3NCwf7/azh87Pk4/j5d7mScocguuwr7LQ
1Cwy+xHW3JyJB44LB77nMipgojDTPttULhswuHgoLJ7mk/m89YIY/HSRB8KdCKcR
rQRCHSXswho9cRNZ2JM4LidedBnjWuFOFZgM+g5hP80zVVpqC9nr7etYq+zmLvv6
CJDG/4iETwUH+jNbt9p48eOjZrSgzZTU9hgpo9C3W9A14prusb3e1TGM6io8D/3r
2Axx9/4soFRiNMNt/c7hXOLBhj26lyG/qZFyU193WMqrH6APDXSVMVgY4/oUxxjU
MMjaCSqYpxSHtyJGnYwXTmwMUDGp9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHKj
TEBX5rd7yv/Cm2oDZNNmgkoXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjVDQkVDNjNDQ0UxMUVGOEJGRUMxNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwNMA0GCSqGSIb3DQEBCwUA
A4IBAQAgeCRUT11ojVbYNRgsyQAMdosfFhZ/A0SdhfuMrkS0Aqo904BbMzPoK7Qr
7k4Z+LXlMoVJrux3wrWdxGLmp4zGZ8er5TqU6Rp2xWgbGmsnYvNW0O1PonicoG0E
Ewr3Y/O7JpbiTAJkE/WBiny6/nsmELTK/k67oAzZdPpbh7ffqr4On6DQmd4RbEBh
U9IVnz3/Nqh5CXY/s9XQUbHcGHp71dCBnS5l1ov7b7gVEmqs5Kv+5PgpAsSrpd+b
k72uBcwinH/IlAhUgQMRZoELe7wH6aHubADcA1nnSoQlQv6CQcLn++xrMziD6wAO
P7twVLiXuMecjKWppKYaUzk7QNE1
-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org