Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15E4FEE4B2211EF9B6B08B9762E951A.roa
File: E15E4FEE4B2211EF9B6B08B9762E951A.roa (raw, json)
Hash identifier: T4n0G4WCt9bjLNYP76t5345TGEWvwd8Hj4V8ZCIjSaQ=
Subject key identifier: 29:AB:6C:62:7A:8E:12:35:FE:5E:5A:9E:E0:7F:EC:BA:BE:4C:BF:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A062
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15E4FEE4B2211EF9B6B08B9762E951A.roa
Signing time: Fri 26 Jul 2024 07:44:25 +0000
ROA not before: Fri 26 Jul 2024 07:44:22 +0000
ROA not after: Sun 04 Aug 2024 07:44:22 +0000
asID: 5065
IP address blocks: 156.252.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41058 (0xa062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:44:22 2024 GMT
Not After : Aug 4 07:44:22 2024 GMT
Subject: CN=66a353d9-e2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:d4:26:16:a0:cf:19:f1:06:36:2e:6a:5b:
17:fe:7b:23:0b:88:35:cd:60:36:83:3e:0f:95:c1:
cc:1d:2d:4b:5d:99:c4:aa:29:81:87:31:4f:75:33:
fe:17:f7:fa:83:d4:4f:ef:40:6f:ac:73:e1:16:18:
35:63:5e:4c:da:01:ec:65:87:44:05:f1:32:ba:a3:
86:24:1d:f1:1f:f9:68:5a:a3:9f:ac:53:04:89:77:
59:4f:b1:89:0b:e8:af:ac:26:46:81:6b:7f:5d:38:
8a:03:a6:b2:34:78:2d:ef:3d:73:0f:f6:4e:5e:1c:
0c:db:47:bc:56:cb:65:88:7e:88:44:f3:cb:2e:f3:
da:d7:c3:93:8c:dd:67:79:e5:bd:19:cb:b7:77:65:
66:35:eb:e5:78:ea:0a:81:9d:77:6b:40:7e:65:62:
18:50:33:7f:d0:87:89:47:9f:b8:4e:86:bf:af:70:
19:66:11:d1:7d:fc:5c:ce:65:ba:bc:fe:4f:e8:cc:
3a:1f:ca:d4:7d:7e:88:4b:ae:c7:93:cd:82:89:d5:
35:d4:f2:7c:ec:67:35:ee:16:7b:63:47:d0:f4:73:
86:82:81:09:5c:b6:86:0c:2b:6b:ce:90:47:8b:e1:
63:29:b8:96:f0:6b:68:ba:f3:a0:5b:2e:e3:76:b9:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:6C:62:7A:8E:12:35:FE:5E:5A:9E:E0:7F:EC:BA:BE:4C:BF:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15E4FEE4B2211EF9B6B08B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.4.0/22
Signature Algorithm: sha256WithRSAEncryption
33:4c:a9:ec:70:01:a4:e9:8e:3d:17:f7:85:44:19:dc:2f:42:
b2:3a:2a:54:0a:27:20:0d:9a:3b:91:d6:24:fe:2a:59:58:80:
b1:48:35:fa:b1:65:b5:e8:4e:e4:ed:9e:8c:33:e2:84:25:c4:
17:2e:4b:bc:5f:f2:7c:66:70:5f:a8:c8:c9:33:2d:1f:70:f9:
5f:a9:cb:1d:c4:fe:91:0e:8e:38:61:86:c1:b0:c3:74:0b:93:
a0:f2:f2:7b:29:66:c0:9b:df:d8:93:2b:0c:f7:e5:45:b2:c4:
a0:64:89:47:fe:6d:71:ef:5a:66:7e:03:a5:a7:31:8a:f2:5f:
69:56:39:50:73:df:98:69:b3:a9:f9:bd:6d:6c:e1:fc:b5:2a:
5c:e0:fd:32:f7:5e:ca:73:c3:a2:8a:de:15:f0:dc:c2:cf:95:
f7:69:ad:35:e2:34:cf:e9:47:b7:c0:ea:bb:2f:7a:73:ef:9a:
12:88:40:96:ab:3d:24:18:f5:07:63:80:20:9f:af:74:31:be:
8c:04:42:29:5e:b8:07:eb:05:46:da:4b:47:96:90:34:75:d6:
ee:72:00:74:d3:b4:13:17:a0:54:8d:9e:a3:1f:61:04:dc:51:
7d:a2:05:e3:50:6b:7f:e1:6f:b4:44:0a:f4:71:ac:23:3b:1d:
8b:64:ce:b3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKBiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDc0NDIyWhcNMjQwODA0MDc0NDIyWjAYMRYw
FAYDVQQDEw02NmEzNTNkOS1lMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqJzUJhagzxnxBjYualsX/nsjC4g1zWA2gz4PlcHMHS1LXZnEqimBhzFP
dTP+F/f6g9RP70BvrHPhFhg1Y15M2gHsZYdEBfEyuqOGJB3xH/loWqOfrFMEiXdZ
T7GJC+ivrCZGgWt/XTiKA6ayNHgt7z1zD/ZOXhwM20e8VstliH6IRPPLLvPa18OT
jN1neeW9Gcu3d2VmNevleOoKgZ13a0B+ZWIYUDN/0IeJR5+4Toa/r3AZZhHRffxc
zmW6vP5P6Mw6H8rUfX6IS67Hk82CidU11PJ87Gc17hZ7Y0fQ9HOGgoEJXLaGDCtr
zpBHi+FjKbiW8GtouvOgWy7jdrm6TwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCmr
bGJ6jhI1/l5anuB/7Lq+TL9ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTVFNEZFRTRCMjIxMUVGOUI2QjA4Qjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPwEMA0GCSqGSIb3DQEBCwUA
A4IBAQAzTKnscAGk6Y49F/eFRBncL0KyOipUCicgDZo7kdYk/ipZWICxSDX6sWW1
6E7k7Z6MM+KEJcQXLku8X/J8ZnBfqMjJMy0fcPlfqcsdxP6RDo44YYbBsMN0C5Og
8vJ7KWbAm9/YkysM9+VFssSgZIlH/m1x71pmfgOlpzGK8l9pVjlQc9+YabOp+b1t
bOH8tSpc4P0y917Kc8Oiit4V8NzCz5X3aa014jTP6Ue3wOq7L3pz75oSiECWqz0k
GPUHY4Agn690Mb6MBEIpXrgH6wVG2ktHlpA0ddbucgB007QTF6BUjZ6jH2EE3FF9
ogXjUGt/4W+0RAr0cawjOx2LZM6z
-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org