Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDAB9EC2488911EC8AB0773ED8A014CE.roa
File: DDAB9EC2488911EC8AB0773ED8A014CE.roa (raw, json)
Hash identifier: xipz1QJRwusnOj1w781pQAt84ffY8pp2X673/55Sedg=
Subject key identifier: 11:05:A3:EB:C7:10:87:16:6D:FB:54:96:3B:00:47:35:23:8B:84:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0E1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDAB9EC2488911EC8AB0773ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:09:11 +0000
ROA not before: Fri 19 Nov 2021 16:09:07 +0000
ROA not after: Sat 19 Nov 2022 16:09:07 +0000
asID: 139879
IP address blocks: 156.249.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3614 (0xe1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 16:09:07 2021 GMT
Not After : Nov 19 16:09:07 2022 GMT
Subject: CN=61967aa7-8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:6e:d2:8e:a9:5f:7f:2c:19:01:a7:1f:4c:
0a:c2:1e:cd:8a:c8:ba:9e:4b:12:b8:29:17:78:f2:
ca:02:f2:9f:43:89:50:fd:a1:e8:41:c7:99:e1:53:
0b:fa:20:10:c8:77:37:17:f6:04:7b:19:d6:fb:e6:
c1:e0:25:de:7b:02:99:f3:d6:ca:e4:fa:b0:41:fa:
92:76:79:bd:38:47:fa:0d:6c:be:67:13:65:26:4f:
32:e1:af:a0:33:ad:7b:a0:3e:ac:7e:b4:1b:3c:42:
91:d2:a3:3f:72:09:b7:d7:ec:14:7a:51:ed:9d:6c:
b9:ce:83:e5:1b:f5:c6:2c:46:2b:c4:28:19:45:ff:
25:14:1c:3a:62:10:3f:3e:0e:a9:e0:15:55:55:fb:
f8:3d:a4:34:8a:b6:ab:f6:8a:f0:b3:b2:38:ef:ad:
41:bd:96:9e:53:fb:b3:56:9d:f0:d3:bf:1e:30:ae:
45:1d:41:ac:27:39:85:f6:28:5c:41:77:11:cb:92:
8c:1d:75:68:55:ba:b2:29:e8:34:51:44:af:6a:ee:
c3:c7:c7:f2:c6:9e:2e:a7:0e:d1:76:8d:ff:87:f0:
de:67:3c:6b:95:ca:76:81:93:7a:11:2b:06:bd:03:
2e:21:87:c9:95:97:c3:ec:b2:4f:70:fb:7c:13:b2:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:A3:EB:C7:10:87:16:6D:FB:54:96:3B:00:47:35:23:8B:84:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDAB9EC2488911EC8AB0773ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3f:8a:d8:d0:ce:21:f8:1c:05:ff:e2:bd:15:3d:b5:98:17:
70:fb:7e:3b:75:3a:8e:7b:d2:ae:c6:a6:f1:6b:59:7c:6f:66:
c6:da:d5:d7:6d:a0:0d:65:5e:4e:dd:59:0d:16:53:36:e5:90:
07:7b:cc:e4:82:2b:a7:02:49:7e:9c:d3:ca:ab:40:d9:de:a3:
75:a3:73:cb:ab:e2:ca:86:f7:3e:18:7e:1e:91:53:2f:24:a6:
a5:a5:2a:29:0d:07:df:d8:66:ec:f9:56:f7:d2:8f:b0:87:59:
a0:76:bf:d7:60:eb:84:96:77:2f:0e:75:e0:40:29:81:d6:9c:
1f:66:9a:8b:ef:13:5e:6b:40:78:5f:02:1d:f8:98:2d:18:d1:
51:3f:e3:19:ca:c7:8f:09:1b:1c:99:30:4a:e2:b7:06:40:d2:
32:5c:03:8e:cb:7c:9d:03:73:62:a6:ef:89:46:ff:aa:ec:60:
cb:79:c6:fd:25:f3:09:c8:6a:51:b6:da:c3:40:85:03:60:b9:
c2:02:4a:c6:85:ac:84:fa:ed:5c:82:85:f7:a6:81:99:ca:bf:
cb:10:a3:47:7c:c9:74:25:25:0b:97:35:16:2a:40:9b:dc:29:
c6:89:22:79:10:a3:2e:ad:62:d1:bf:9f:17:bb:3e:1e:02:e3:
44:22:45:1f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDh4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNjA5MDdaFw0yMjExMTkxNjA5MDdaMBgxFjAU
BgNVBAMMDTYxOTY3YWE3LThlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCueG7SjqlffywZAacfTArCHs2KyLqeSxK4KRd48soC8p9DiVD9oehBx5nh
Uwv6IBDIdzcX9gR7Gdb75sHgJd57Apnz1srk+rBB+pJ2eb04R/oNbL5nE2UmTzLh
r6AzrXugPqx+tBs8QpHSoz9yCbfX7BR6Ue2dbLnOg+Ub9cYsRivEKBlF/yUUHDpi
ED8+DqngFVVV+/g9pDSKtqv2ivCzsjjvrUG9lp5T+7NWnfDTvx4wrkUdQawnOYX2
KFxBdxHLkowddWhVurIp6DRRRK9q7sPHx/LGni6nDtF2jf+H8N5nPGuVynaBk3oR
Kwa9Ay4hh8mVl8Pssk9w+3wTsua3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEQWj
68cQhxZt+1SWOwBHNSOLhLYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0REQUI5RUMyNDg4OTExRUM4QUIwNzczRUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+cQwDQYJKoZIhvcNAQELBQAD
ggEBAIg/itjQziH4HAX/4r0VPbWYF3D7fjt1Oo570q7GpvFrWXxvZsba1ddtoA1l
Xk7dWQ0WUzblkAd7zOSCK6cCSX6c08qrQNneo3Wjc8ur4sqG9z4Yfh6RUy8kpqWl
KikNB9/YZuz5VvfSj7CHWaB2v9dg64SWdy8OdeBAKYHWnB9mmovvE15rQHhfAh34
mC0Y0VE/4xnKx48JGxyZMEritwZA0jJcA47LfJ0Dc2Km74lG/6rsYMt5xv0l8wnI
alG22sNAhQNgucICSsaFrIT67VyChfemgZnKv8sQo0d8yXQlJQuXNRYqQJvcKcaJ
InkQoy6tYtG/nxe7Ph4C40QiRR8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org