Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35CF6E247DF11EFB9DA428E762E951A.roa
File: E35CF6E247DF11EFB9DA428E762E951A.roa (raw, json)
Hash identifier: 52iZw+9Hk0LOjQ44XM1XdDMKj+WEVFSgjRWdI3PjdD0=
Subject key identifier: 1A:AC:56:4B:B0:23:81:10:77:65:BB:09:CC:AC:5B:CA:CB:93:BB:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35CF6E247DF11EFB9DA428E762E951A.roa
Signing time: Mon 22 Jul 2024 04:07:19 +0000
ROA not before: Mon 22 Jul 2024 04:07:16 +0000
ROA not after: Sat 24 Aug 2024 04:07:16 +0000
asID: 135391
IP address blocks: 156.253.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40469 (0x9e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 04:07:16 2024 GMT
Not After : Aug 24 04:07:16 2024 GMT
Subject: CN=669ddaf7-15db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:eb:80:2c:0f:cf:2c:6f:c0:3f:cd:98:97:
5a:00:c6:21:fd:0e:ac:59:f3:a8:36:a4:ec:d3:0f:
1b:4f:e7:8f:af:ea:d1:45:98:7f:57:54:22:5e:2f:
c3:eb:c3:2b:17:31:77:81:c9:cf:54:a4:ed:48:09:
8d:7a:28:b5:7f:25:68:3f:cb:db:54:4a:23:b3:80:
74:3e:ce:ee:dc:f2:c5:fd:49:64:4b:23:76:eb:f4:
57:78:f1:a2:6d:d4:27:19:1b:bd:e4:53:f3:f4:55:
b8:c4:56:46:1c:c1:67:96:87:52:fc:cf:1b:05:7a:
f9:73:ab:cf:54:6e:8a:c9:a8:88:97:67:dd:7d:74:
d6:f4:40:7b:d5:b7:19:b7:60:47:a6:c0:f0:da:26:
34:d9:77:43:6c:9a:03:c0:03:a9:7e:fc:b7:1f:3a:
00:17:04:11:c4:a1:cd:a4:19:85:88:3a:1b:f7:70:
06:1b:6b:0b:d1:19:91:e0:b1:a9:c9:9b:ac:7e:f5:
31:4b:ad:d9:1a:92:8c:02:f2:8f:ed:43:17:8e:62:
f7:42:19:62:62:cc:4b:ac:6d:58:1d:6a:1f:be:1e:
c1:59:16:af:05:ac:b9:4a:12:b8:51:81:98:1c:53:
ed:d3:e2:26:a5:2f:dc:17:90:14:60:13:b2:10:2d:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:56:4B:B0:23:81:10:77:65:BB:09:CC:AC:5B:CA:CB:93:BB:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E35CF6E247DF11EFB9DA428E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
42:09:06:02:57:a4:a2:3b:1e:34:dd:56:6c:6f:ee:30:57:68:
1e:82:67:32:a2:68:91:ff:7f:a2:99:be:73:4b:12:79:0d:cc:
4e:36:27:08:11:ef:df:9f:47:75:28:06:8e:18:73:b4:7c:7e:
cb:3c:2e:e6:40:cc:a9:22:53:14:35:c0:e0:13:ed:cd:1d:75:
c4:c0:e5:d5:88:b7:27:83:dd:66:9e:80:0f:e8:bf:dd:ce:98:
9d:cb:56:b8:43:1c:d2:2a:c8:ff:87:6b:cc:13:f7:2a:86:d0:
74:9d:45:25:58:1b:cd:b1:53:12:11:5f:83:22:84:d1:9f:87:
61:05:ef:f7:2a:a6:86:75:6a:65:cc:3a:cc:96:6a:ad:78:91:
d0:bf:67:b5:df:48:a2:19:9e:e6:ed:77:88:14:6a:80:04:25:
67:1c:80:68:2e:77:92:de:47:54:e2:e2:42:85:dc:6d:a0:d6:
e2:16:fd:0f:c4:d3:ce:cd:fe:b2:21:6f:6a:5e:a5:6f:e6:e5:
6e:14:d2:4c:b0:9f:64:3a:04:25:d5:66:30:a8:1b:0d:b8:b2:
3a:47:34:21:45:c0:84:ff:8b:40:20:f9:5d:2a:1d:91:24:14:
1b:85:fe:29:b5:e9:ec:ff:94:5d:ae:91:a6:b2:34:09:28:7e:
2a:6b:c7:e4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ4VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDQwNzE2WhcNMjQwODI0MDQwNzE2WjAYMRYw
FAYDVQQDEw02NjlkZGFmNy0xNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7JXrgCwPzyxvwD/NmJdaAMYh/Q6sWfOoNqTs0w8bT+ePr+rRRZh/V1Qi
Xi/D68MrFzF3gcnPVKTtSAmNeii1fyVoP8vbVEojs4B0Ps7u3PLF/UlkSyN26/RX
ePGibdQnGRu95FPz9FW4xFZGHMFnlodS/M8bBXr5c6vPVG6KyaiIl2fdfXTW9EB7
1bcZt2BHpsDw2iY02XdDbJoDwAOpfvy3HzoAFwQRxKHNpBmFiDob93AGG2sL0RmR
4LGpyZusfvUxS63ZGpKMAvKP7UMXjmL3QhliYsxLrG1YHWofvh7BWRavBay5ShK4
UYGYHFPt0+ImpS/cF5AUYBOyEC08MwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBqs
VkuwI4EQd2W7CcysW8rLk7tnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMzVDRjZFMjQ3REYxMUVGQjlEQTQyOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP0CMA0GCSqGSIb3DQEBCwUA
A4IBAQBCCQYCV6SiOx403VZsb+4wV2gegmcyomiR/3+imb5zSxJ5DcxONicIEe/f
n0d1KAaOGHO0fH7LPC7mQMypIlMUNcDgE+3NHXXEwOXViLcng91mnoAP6L/dzpid
y1a4QxzSKsj/h2vME/cqhtB0nUUlWBvNsVMSEV+DIoTRn4dhBe/3KqaGdWplzDrM
lmqteJHQv2e130iiGZ7m7XeIFGqABCVnHIBoLneS3kdU4uJChdxtoNbiFv0PxNPO
zf6yIW9qXqVv5uVuFNJMsJ9kOgQl1WYwqBsNuLI6RzQhRcCE/4tAIPldKh2RJBQb
hf4ptens/5RdrpGmsjQJKH4qa8fk
-----END CERTIFICATE-----
Generated at Sun Aug 25 04:33:11 2024 by rpki-client on console-fra.rpki-client.org