Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E21CCD1C021F11EF886E3436017001B1.roa
File: E21CCD1C021F11EF886E3436017001B1.roa (raw, json)
Hash identifier: PA2HV1aVi8qevEAsmOvsoCoKhfMpgqKfpQLxIhgfQfQ=
Subject key identifier: 05:80:7E:6A:36:B6:06:72:5D:8C:2D:B0:E0:C1:26:95:85:56:72:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E21CCD1C021F11EF886E3436017001B1.roa
Signing time: Wed 24 Apr 2024 09:49:03 +0000
ROA not before: Wed 24 Apr 2024 09:49:00 +0000
ROA not after: Fri 03 May 2024 09:49:00 +0000
asID: 133522
IP address blocks: 156.227.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33998 (0x84ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 09:49:00 2024 GMT
Not After : May 3 09:49:00 2024 GMT
Subject: CN=6628d58f-37a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:f8:95:e9:9a:d1:a9:0e:fe:c6:ba:ad:a3:
ad:5c:64:7b:f5:f4:04:08:94:e4:8f:1a:df:cc:96:
42:cd:fb:98:ca:bd:7b:cb:e9:ad:07:65:7c:ae:b0:
40:0c:af:2e:00:24:19:96:5d:ce:84:a4:e7:b8:50:
f0:74:81:7d:e9:d4:92:69:b7:47:8f:94:d3:d1:b4:
cf:26:a8:94:42:cb:dd:18:60:13:51:cb:48:87:18:
f1:33:02:53:af:63:0c:db:29:a1:f5:cb:dd:93:6b:
9c:29:2e:9e:48:a1:c5:c0:37:fd:e6:b7:6b:8b:c3:
83:a9:f2:e9:ca:a3:c2:b1:d3:f6:72:fc:2f:35:4f:
d2:5e:d0:4f:8c:b5:4a:8f:1b:28:45:20:8f:76:37:
07:51:11:8c:c8:3f:9e:aa:da:7c:e8:38:89:61:59:
0e:cc:fa:37:a4:7b:64:0d:10:21:21:1e:ef:15:11:
9a:bc:89:e6:80:de:68:8b:1d:92:96:36:8e:be:a2:
52:2b:5f:e1:04:e5:ab:82:4a:37:ec:05:62:52:25:
1c:ca:3b:b1:c7:fb:85:86:69:84:ba:8e:97:57:91:
43:bd:a3:1f:b7:0f:dc:ea:cd:83:1d:57:63:ee:12:
32:5e:d3:4f:1d:22:c4:2a:bc:0d:f3:0c:5d:e7:37:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:80:7E:6A:36:B6:06:72:5D:8C:2D:B0:E0:C1:26:95:85:56:72:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E21CCD1C021F11EF886E3436017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:c5:6b:d5:a3:b6:78:39:da:61:99:5e:e5:ec:de:75:a5:13:
be:e7:74:5b:5b:39:c0:cd:08:11:2b:50:4b:0d:1c:a2:53:a1:
2a:3e:c5:b7:f0:a9:bb:f6:40:45:ad:d3:26:36:be:f8:66:58:
51:0b:67:3f:05:6c:28:af:bd:fd:fe:59:f7:ef:f8:a9:bc:ad:
73:7c:90:27:a5:2f:5b:3f:67:4c:74:81:c8:5e:ef:85:98:64:
a8:23:d6:d8:ab:ed:72:7d:c7:37:96:a3:e0:b7:a3:f8:d4:e9:
de:04:65:0d:3a:64:9b:64:a7:26:c3:a5:17:81:9b:20:ce:aa:
6b:9f:69:ec:37:2d:10:89:a8:8d:e2:c1:cd:cf:e7:0f:7d:77:
aa:52:c9:01:43:f8:3c:2d:79:20:f0:7d:05:4c:90:61:35:71:
fc:c1:a3:d9:db:8c:8d:35:9d:06:95:4e:1f:2e:1b:66:1e:18:
61:81:bf:fc:fb:5d:c2:dd:ac:da:92:62:52:79:79:7d:3e:6f:
50:ce:5d:19:8e:bc:6f:d0:60:ee:7a:12:eb:61:fe:c3:93:3d:
1a:5c:18:4d:2f:0f:28:26:dd:dd:b4:7f:67:86:85:a3:0b:5f:
4c:7d:2d:ae:b9:ca:69:55:64:57:b0:c6:f9:b4:ad:b7:2e:c6:
6d:8d:6c:28
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAITOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI0MDk0OTAwWhcNMjQwNTAzMDk0OTAwWjAYMRYw
FAYDVQQDEw02NjI4ZDU4Zi0zN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbL4lema0akO/sa6raOtXGR79fQECJTkjxrfzJZCzfuYyr17y+mtB2V8
rrBADK8uACQZll3OhKTnuFDwdIF96dSSabdHj5TT0bTPJqiUQsvdGGATUctIhxjx
MwJTr2MM2ymh9cvdk2ucKS6eSKHFwDf95rdri8ODqfLpyqPCsdP2cvwvNU/SXtBP
jLVKjxsoRSCPdjcHURGMyD+eqtp86DiJYVkOzPo3pHtkDRAhIR7vFRGavInmgN5o
ix2SljaOvqJSK1/hBOWrgko37AViUiUcyjuxx/uFhmmEuo6XV5FDvaMftw/c6s2D
HVdj7hIyXtNPHSLEKrwN8wxd5zcKHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAWA
fmo2tgZyXYwtsODBJpWFVnJzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjFDQ0QxQzAyMUYxMUVGODg2RTM0MzYwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOMgMA0GCSqGSIb3DQEBCwUA
A4IBAQCzxWvVo7Z4OdphmV7l7N51pRO+53RbWznAzQgRK1BLDRyiU6EqPsW38Km7
9kBFrdMmNr74ZlhRC2c/BWwor739/ln37/ipvK1zfJAnpS9bP2dMdIHIXu+FmGSo
I9bYq+1yfcc3lqPgt6P41OneBGUNOmSbZKcmw6UXgZsgzqprn2nsNy0QiaiN4sHN
z+cPfXeqUskBQ/g8LXkg8H0FTJBhNXH8waPZ24yNNZ0GlU4fLhtmHhhhgb/8+13C
3azakmJSeXl9Pm9Qzl0Zjrxv0GDuehLrYf7Dkz0aXBhNLw8oJt3dtH9nhoWjC19M
fS2uucppVWRXsMb5tK23LsZtjWwo
-----END CERTIFICATE-----
Generated at Sat May 4 03:15:34 2024 by rpki-client on console-fra.rpki-client.org