Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9A112C4A7211EF8CABBB8D762E951A.roa
File: DE9A112C4A7211EF8CABBB8D762E951A.roa (raw, json)
Hash identifier: w6BmN6SR4eflMFMa31MaxPWvCYkRFCi4Z1gPHe0GKrc=
Subject key identifier: 9A:EE:E1:D1:E2:95:7E:A7:48:30:73:13:94:06:4C:54:98:07:95:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A045
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9A112C4A7211EF8CABBB8D762E951A.roa
Signing time: Thu 25 Jul 2024 10:44:29 +0000
ROA not before: Thu 25 Jul 2024 10:44:26 +0000
ROA not after: Sun 04 Aug 2024 10:44:26 +0000
asID: 5065
IP address blocks: 156.252.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41029 (0xa045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:44:26 2024 GMT
Not After : Aug 4 10:44:26 2024 GMT
Subject: CN=66a22c8d-1d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:d3:2c:a6:a1:c3:0c:07:12:9a:8d:64:b6:
e6:4e:2e:5e:36:fc:6e:50:30:34:a2:26:04:d2:70:
43:00:dd:d5:fb:8a:7e:e7:2d:fc:d5:7f:79:0d:ec:
93:2e:36:9d:05:8d:a7:ad:33:cd:26:67:f2:8c:90:
89:29:5e:a8:89:15:44:28:69:17:b0:0a:98:fb:4f:
17:b4:29:86:12:b2:9c:35:14:5c:90:b7:d0:6c:9b:
2a:85:cd:ea:eb:54:35:f3:17:7d:df:e7:f3:b4:c7:
d8:28:84:f9:2a:26:62:a2:cd:f2:3c:3f:18:84:d3:
eb:65:d1:df:92:0b:6f:4d:40:2c:3e:58:fd:df:93:
0f:94:71:c5:bc:36:ec:b0:01:6a:b6:a1:d5:5c:a1:
a8:91:6c:b5:07:85:2d:f4:c3:c0:7d:10:39:17:17:
00:09:77:be:d2:48:ca:17:3d:18:73:08:b6:a5:b2:
67:82:30:8d:37:70:d2:f6:b1:1a:4c:3d:bb:2d:59:
b6:f9:e6:6a:7b:e2:39:e5:45:e4:cc:1d:45:37:75:
05:12:db:ce:a6:a1:b7:9a:48:81:b5:a2:d4:04:f5:
54:21:f7:01:99:5b:20:35:68:4e:1f:c5:8b:ea:54:
b9:7f:60:94:28:1d:a6:6d:ce:87:9a:f7:37:76:6c:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:E1:D1:E2:95:7E:A7:48:30:73:13:94:06:4C:54:98:07:95:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE9A112C4A7211EF8CABBB8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:cf:7d:a2:c5:00:fd:68:4c:5c:57:d3:c1:4c:a0:8a:b3:54:
73:56:29:64:e5:7c:8c:df:a0:c8:c4:3e:c9:d8:7a:24:d1:97:
cd:82:80:b9:75:57:f9:68:3e:77:97:94:24:5b:52:e2:b7:c8:
a7:d4:79:93:82:20:69:81:29:55:21:ab:4f:58:2c:cd:54:1e:
74:0f:f1:54:57:35:7e:1f:26:fe:c0:26:7f:1e:30:37:1c:9d:
6e:73:82:ac:f6:46:dd:e5:80:67:74:40:68:b4:d6:a0:b1:52:
42:3f:f5:0a:19:59:64:fd:91:44:91:19:1e:6b:fc:6d:64:3d:
f1:ad:7f:32:fe:a1:5f:b0:a6:52:07:02:49:42:81:a1:0a:95:
4a:39:7e:5c:87:60:10:5f:eb:e1:8d:da:fe:ef:94:c2:86:cc:
fe:37:95:a2:c0:b8:a8:d4:30:a6:2b:f2:4b:75:f2:63:0a:60:
58:dc:9b:40:cf:59:21:0d:3e:11:ea:95:8b:0d:9f:0b:a3:9c:
9d:7a:f4:45:ee:ee:c2:b4:31:04:d6:40:c2:51:06:33:4a:0e:
c6:2a:cc:11:45:21:39:ef:29:79:d1:db:f9:1e:f9:35:63:0c:
99:c6:a2:60:0a:17:91:5f:ba:b6:c0:e6:00:4e:86:f8:c1:c8:
ff:5e:7c:41
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKBFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MTA0NDI2WhcNMjQwODA0MTA0NDI2WjAYMRYw
FAYDVQQDEw02NmEyMmM4ZC0xZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzfjTLKahwwwHEpqNZLbmTi5eNvxuUDA0oiYE0nBDAN3V+4p+5y381X95
DeyTLjadBY2nrTPNJmfyjJCJKV6oiRVEKGkXsAqY+08XtCmGErKcNRRckLfQbJsq
hc3q61Q18xd93+fztMfYKIT5KiZios3yPD8YhNPrZdHfkgtvTUAsPlj935MPlHHF
vDbssAFqtqHVXKGokWy1B4Ut9MPAfRA5FxcACXe+0kjKFz0Ycwi2pbJngjCNN3DS
9rEaTD27LVm2+eZqe+I55UXkzB1FN3UFEtvOpqG3mkiBtaLUBPVUIfcBmVsgNWhO
H8WL6lS5f2CUKB2mbc6Hmvc3dmzeUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJru
4dHilX6nSDBzE5QGTFSYB5WGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERTlBMTEyQzRBNzIxMUVGOENBQkJCOEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPwYMA0GCSqGSIb3DQEBCwUA
A4IBAQCyz32ixQD9aExcV9PBTKCKs1RzVilk5XyM36DIxD7J2Hok0ZfNgoC5dVf5
aD53l5QkW1Lit8in1HmTgiBpgSlVIatPWCzNVB50D/FUVzV+Hyb+wCZ/HjA3HJ1u
c4Ks9kbd5YBndEBotNagsVJCP/UKGVlk/ZFEkRkea/xtZD3xrX8y/qFfsKZSBwJJ
QoGhCpVKOX5ch2AQX+vhjdr+75TChsz+N5WiwLio1DCmK/JLdfJjCmBY3JtAz1kh
DT4R6pWLDZ8Lo5ydevRF7u7CtDEE1kDCUQYzSg7GKswRRSE57yl50dv5Hvk1YwyZ
xqJgCheRX7q2wOYATob4wcj/XnxB
-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org