Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4854546499311EFADA995A0762E951A.roa
File: E4854546499311EFADA995A0762E951A.roa (raw, json)
Hash identifier: nW+9SnPkBRk47dkA6t1pPbOn2v1bNRANEVCkofQO6KU=
Subject key identifier: 6F:76:8D:F6:35:D4:CD:71:FC:0E:15:A5:8C:4E:3D:90:5E:DD:90:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4854546499311EFADA995A0762E951A.roa
Signing time: Wed 24 Jul 2024 08:08:21 +0000
ROA not before: Wed 24 Jul 2024 08:08:18 +0000
ROA not after: Fri 23 Aug 2024 08:08:18 +0000
asID: 202656
IP address blocks: 156.246.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40685 (0x9eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:08:18 2024 GMT
Not After : Aug 23 08:08:18 2024 GMT
Subject: CN=66a0b675-c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:fa:50:43:bc:ac:24:7a:7e:67:d7:5a:fd:
7f:0e:c1:98:94:f9:e0:57:79:1f:4e:7c:5d:37:94:
1a:d1:d7:02:07:40:2e:7a:b9:fb:6b:ff:cd:35:da:
2b:53:a1:17:bf:e0:dc:d0:ec:ac:37:e3:32:c2:22:
5c:9e:6b:1b:ad:a7:31:6f:b0:81:b0:e5:1a:b5:a2:
1f:54:e7:89:bc:80:c0:4c:b3:52:23:f3:ff:97:06:
e3:5d:fb:10:18:34:a1:62:8c:50:08:92:26:46:e3:
1e:6e:26:66:46:05:86:23:0b:1f:8d:80:51:23:1c:
26:36:07:06:f3:c6:12:74:52:3a:06:8f:31:a0:91:
69:d7:0f:1f:28:0c:71:0a:29:14:a0:f7:bf:6a:da:
26:0e:e1:4b:e9:a2:16:61:a8:d1:e4:8e:a0:32:69:
9e:6f:5d:1c:78:20:76:a3:54:de:53:b9:bb:c9:5f:
f6:03:f0:3f:dc:2e:74:61:f7:76:77:9e:54:9f:7b:
8e:c4:44:3b:0c:3b:3d:70:12:b0:01:55:00:89:fd:
17:f6:ff:7e:9d:96:e2:e7:9c:14:84:8c:90:f7:23:
0d:14:48:2e:9f:c0:68:53:5d:4d:97:56:f0:5f:c3:
a4:56:b1:cd:99:f9:0f:ab:1f:92:92:bc:b1:2c:3f:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:8D:F6:35:D4:CD:71:FC:0E:15:A5:8C:4E:3D:90:5E:DD:90:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4854546499311EFADA995A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:8a:27:d3:51:80:c7:fa:48:56:b5:13:c5:34:cd:75:89:06:
10:27:60:fb:63:9c:6b:6b:71:a0:fe:83:4b:d7:99:e4:94:36:
1b:26:c8:fc:f0:9c:6e:f6:e8:15:8c:76:02:87:70:50:43:78:
fa:ac:b1:0e:58:b3:d2:60:b6:c1:b8:79:dd:17:43:7a:e2:30:
51:9a:5f:43:45:b4:7b:66:3a:ac:f0:a9:66:63:03:04:b1:de:
54:48:b6:e5:ba:08:08:f5:a4:0b:a7:2e:b2:a1:09:74:9b:c4:
05:97:32:9e:17:5f:13:f1:17:4e:48:de:9c:19:11:ad:f0:ac:
7f:dd:ce:39:a6:f7:7c:f6:b2:cd:57:ef:2a:93:f6:6e:98:ae:
76:42:16:e1:40:48:05:11:15:32:20:0f:fa:c3:b6:90:b0:e8:
e6:c5:ef:ff:f5:fc:4c:68:8c:8c:64:2a:78:a7:24:e5:f3:8d:
0c:12:65:2d:41:fb:74:ce:b6:ce:df:34:d5:ea:68:05:75:83:
1f:82:77:17:60:9f:2a:15:33:75:5f:89:2e:dd:82:db:5c:f7:
25:6d:19:85:21:62:3f:80:36:78:41:27:16:54:75:f6:ca:6a:
ad:01:48:44:49:ba:a3:69:36:02:8f:f6:da:3e:89:ce:62:bd:
a9:dc:ba:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ7tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDgwODE4WhcNMjQwODIzMDgwODE4WjAYMRYw
FAYDVQQDEw02NmEwYjY3NS1jMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3uT6UEO8rCR6fmfXWv1/DsGYlPngV3kfTnxdN5Qa0dcCB0Auern7a//N
NdorU6EXv+Dc0OysN+MywiJcnmsbracxb7CBsOUataIfVOeJvIDATLNSI/P/lwbj
XfsQGDShYoxQCJImRuMebiZmRgWGIwsfjYBRIxwmNgcG88YSdFI6Bo8xoJFp1w8f
KAxxCikUoPe/atomDuFL6aIWYajR5I6gMmmeb10ceCB2o1TeU7m7yV/2A/A/3C50
Yfd2d55Un3uOxEQ7DDs9cBKwAVUAif0X9v9+nZbi55wUhIyQ9yMNFEgun8BoU11N
l1bwX8OkVrHNmfkPqx+SkryxLD/nQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG92
jfY11M1x/A4VpYxOPZBe3ZChMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNDg1NDU0NjQ5OTMxMUVGQURBOTk1QTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPa4MA0GCSqGSIb3DQEBCwUA
A4IBAQANiifTUYDH+khWtRPFNM11iQYQJ2D7Y5xra3Gg/oNL15nklDYbJsj88Jxu
9ugVjHYCh3BQQ3j6rLEOWLPSYLbBuHndF0N64jBRml9DRbR7Zjqs8KlmYwMEsd5U
SLbluggI9aQLpy6yoQl0m8QFlzKeF18T8RdOSN6cGRGt8Kx/3c45pvd89rLNV+8q
k/ZumK52QhbhQEgFERUyIA/6w7aQsOjmxe//9fxMaIyMZCp4pyTl840MEmUtQft0
zrbO3zTV6mgFdYMfgncXYJ8qFTN1X4ku3YLbXPclbRmFIWI/gDZ4QScWVHX2ymqt
AUhESbqjaTYCj/baPonOYr2p3Lob
-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:49 2024 by rpki-client on console-fra.rpki-client.org