Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB6BF1F8441611EF86AD4051762E951A.roa
File: DB6BF1F8441611EF86AD4051762E951A.roa (raw, json)
Hash identifier: Ve+URBlFi4xWsXLqu/hpJ2HQ8/pYF2l0qwSMByeCNco=
Subject key identifier: 1F:42:68:DF:7C:32:A6:CB:A6:1E:16:73:C3:B2:1C:01:5A:29:5F:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB6BF1F8441611EF86AD4051762E951A.roa
Signing time: Wed 17 Jul 2024 08:30:43 +0000
ROA not before: Wed 17 Jul 2024 08:30:40 +0000
ROA not after: Sat 27 Jul 2024 08:30:40 +0000
asID: 5065
IP address blocks: 156.235.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40222 (0x9d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:30:40 2024 GMT
Not After : Jul 27 08:30:40 2024 GMT
Subject: CN=66978133-6c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:47:00:43:c5:fe:ce:86:37:8f:b9:bc:4f:
72:85:32:b7:86:f7:02:50:3e:3e:8d:11:d7:2a:ff:
60:01:8f:a4:cf:6e:5d:79:d7:ed:57:e2:06:ca:38:
5e:60:1e:69:94:d6:35:a1:17:95:b8:c5:44:59:00:
ff:fb:98:20:28:61:68:63:0e:6f:51:93:64:0f:b8:
f1:d1:9d:67:a9:14:90:92:17:c4:07:26:fa:c1:cf:
8a:5f:fc:e4:fd:3e:7a:32:5c:4e:3d:49:d5:2d:58:
3d:77:7e:ef:db:37:a7:c2:9e:cd:9e:ad:78:af:e2:
f2:8f:4f:1e:55:8f:d5:6f:bc:00:6b:df:cd:74:91:
ba:6c:da:69:9a:aa:be:d2:c4:26:92:83:98:94:28:
5d:72:c2:57:c7:a3:88:60:a0:e0:ad:62:ef:ba:fd:
e3:ad:c4:e7:32:2f:62:a4:5d:94:76:d7:0b:51:81:
c4:e0:fb:ce:3f:d2:93:6f:8f:01:98:6a:d0:f4:86:
17:04:62:6f:fd:50:3e:0f:f6:cb:a5:ac:c6:ae:ed:
46:ef:ee:a3:a4:18:d2:b5:66:21:90:87:1a:d1:d5:
19:9f:31:e9:8c:aa:e4:43:49:d1:bd:09:fa:7d:1c:
11:3b:8c:52:14:02:3c:8c:71:48:c6:f6:8f:b3:c3:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:68:DF:7C:32:A6:CB:A6:1E:16:73:C3:B2:1C:01:5A:29:5F:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB6BF1F8441611EF86AD4051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:81:d7:1a:73:82:d0:e6:36:8d:df:a7:c8:95:09:5f:52:d5:
20:2e:56:ff:38:87:4b:bf:e8:06:69:69:45:e3:a3:7e:3b:ff:
49:ee:9f:dc:4b:5d:16:6e:c9:f8:f6:d0:94:36:26:2b:56:e6:
c4:82:67:e1:9c:82:0c:86:f3:e4:56:f0:30:b7:d8:ee:8a:67:
83:79:07:79:4a:03:9e:2c:81:65:e6:9f:b9:26:a8:34:d0:de:
d7:11:77:ee:a3:54:cf:fc:ce:3c:28:3c:63:e2:11:55:55:39:
0a:a2:1b:41:bf:fb:cb:7d:13:76:14:27:4d:fe:5e:57:93:3c:
1b:db:b7:2f:e5:87:fa:03:a7:0e:1d:6c:31:82:e4:44:45:d5:
11:93:d4:41:ac:fe:b6:f5:ee:40:d9:9d:3b:17:20:8e:e9:8e:
e7:78:82:26:73:c4:ef:45:0d:af:aa:54:2f:b7:51:2d:36:68:
b1:72:bc:d4:86:aa:f4:8f:a4:de:bc:83:7c:1f:e5:5e:dc:04:
80:dd:f1:5e:a4:78:1a:68:8b:28:21:ec:60:8f:7d:ea:b4:01:
e5:9d:05:c3:07:a7:da:61:6c:36:95:df:14:37:fc:82:78:e9:
2f:5d:ee:92:e9:1e:1f:e8:2b:b8:78:82:6e:d5:f3:49:7f:4f:
fa:ee:c6:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ0eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE3MDgzMDQwWhcNMjQwNzI3MDgzMDQwWjAYMRYw
FAYDVQQDEw02Njk3ODEzMy02YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApVtHAEPF/s6GN4+5vE9yhTK3hvcCUD4+jRHXKv9gAY+kz25dedftV+IG
yjheYB5plNY1oReVuMVEWQD/+5ggKGFoYw5vUZNkD7jx0Z1nqRSQkhfEByb6wc+K
X/zk/T56MlxOPUnVLVg9d37v2zenwp7Nnq14r+Lyj08eVY/Vb7wAa9/NdJG6bNpp
mqq+0sQmkoOYlChdcsJXx6OIYKDgrWLvuv3jrcTnMi9ipF2UdtcLUYHE4PvOP9KT
b48BmGrQ9IYXBGJv/VA+D/bLpazGru1G7+6jpBjStWYhkIca0dUZnzHpjKrkQ0nR
vQn6fRwRO4xSFAI8jHFIxvaPs8OVxwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB9C
aN98MqbLph4Wc8OyHAFaKV+vMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQjZCRjFGODQ0MTYxMUVGODZBRDQwNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsWMA0GCSqGSIb3DQEBCwUA
A4IBAQCjgdcac4LQ5jaN36fIlQlfUtUgLlb/OIdLv+gGaWlF46N+O/9J7p/cS10W
bsn49tCUNiYrVubEgmfhnIIMhvPkVvAwt9juimeDeQd5SgOeLIFl5p+5Jqg00N7X
EXfuo1TP/M48KDxj4hFVVTkKohtBv/vLfRN2FCdN/l5Xkzwb27cv5Yf6A6cOHWwx
guRERdURk9RBrP629e5A2Z07FyCO6Y7neIImc8TvRQ2vqlQvt1EtNmixcrzUhqr0
j6TevIN8H+Ve3ASA3fFepHgaaIsoIexgj33qtAHlnQXDB6faYWw2ld8UN/yCeOkv
Xe6S6R4f6Cu4eIJu1fNJf0/67sbJ
-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org