Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED182678441211EFA1FD7FB3762E951A.roa
File: ED182678441211EFA1FD7FB3762E951A.roa (raw, json)
Hash identifier: Xu3SIoKHsHkwPY5Vqhq4f7IOQ6Tlr6xr0zFgrNEl8wc=
Subject key identifier: 0E:7C:2A:95:57:31:A4:D3:31:6A:C0:BA:86:A7:3B:5D:EA:DA:48:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED182678441211EFA1FD7FB3762E951A.roa
Signing time: Wed 17 Jul 2024 08:02:35 +0000
ROA not before: Wed 17 Jul 2024 08:02:32 +0000
ROA not after: Sat 27 Jul 2024 08:02:32 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40208 (0x9d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:02:32 2024 GMT
Not After : Jul 27 08:02:32 2024 GMT
Subject: CN=66977a9b-317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:81:9b:2a:4b:59:69:bb:db:18:90:58:6f:
5f:e1:67:0b:95:68:17:a6:b1:b1:b2:fe:4a:cd:a3:
17:a8:3b:49:d7:a2:00:40:b4:0d:08:4d:e3:13:b1:
34:e6:76:0f:6e:4f:68:52:46:af:d3:a6:6e:c2:33:
b1:95:17:55:a1:34:61:58:82:b6:43:97:df:af:19:
ec:cb:ea:0c:a7:d9:09:48:19:32:66:91:f9:fc:6e:
1c:c6:d3:2a:9d:bd:af:b3:62:af:28:26:d8:6c:7f:
02:88:14:20:fc:25:34:61:66:53:e0:2f:74:33:5e:
49:71:71:13:8c:20:5d:2e:d8:c4:26:15:5f:b7:c8:
4c:e9:39:ad:b6:57:21:0d:1b:70:be:39:a4:bf:77:
34:c6:1c:08:ae:ad:67:97:62:30:23:ff:74:3b:cf:
c9:7a:ee:cd:dc:9c:80:1e:89:6b:45:65:52:d2:b4:
7c:08:77:51:8d:45:de:db:0b:93:eb:57:fa:08:1c:
b8:80:9c:1f:44:6c:ed:d2:e0:51:ed:80:5d:8e:ca:
70:c9:15:4d:0a:23:51:ed:6e:ca:06:b5:a2:f5:f9:
04:db:4e:4b:d0:81:1f:8a:76:ec:4a:a0:24:55:c7:
3f:41:dd:9b:58:3f:3a:c3:5c:63:00:f6:e6:ea:b4:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:2A:95:57:31:A4:D3:31:6A:C0:BA:86:A7:3B:5D:EA:DA:48:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED182678441211EFA1FD7FB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
68:76:6a:db:37:a1:58:e0:44:75:97:b3:43:35:cb:b1:da:b1:
22:00:45:a8:5a:f5:63:cf:fb:f4:1a:dc:18:bf:95:f5:21:05:
54:22:fd:11:be:04:e7:d5:99:2b:ca:6f:5f:25:1f:0d:b7:ea:
f9:8f:23:88:a3:39:23:14:52:3c:8a:a6:ac:d9:0a:dd:7f:95:
8e:d8:1d:8d:5f:1a:40:a5:65:4e:69:9b:8d:62:23:a3:73:87:
00:51:52:e6:ad:ad:51:c7:2b:bf:72:f2:cf:d8:98:da:a8:ac:
1c:0a:20:15:ce:b8:f2:a9:78:bf:47:2f:a2:4d:00:e6:d1:01:
e3:d5:6c:cc:bb:3a:a6:6c:f1:7b:2b:21:c6:82:9c:9e:2d:11:
ff:54:c0:91:47:03:95:be:3d:a7:4f:2f:29:b9:c7:08:7a:b2:
d1:7d:10:e5:3d:9b:c3:7f:db:53:85:b2:df:f7:f4:d4:4d:64:
21:d8:80:50:c0:1c:fb:41:f1:cc:bf:8b:64:b3:7c:3b:13:34:
86:90:29:38:7b:3d:0a:42:74:2b:d8:0b:19:38:87:b7:a1:0a:
7f:bf:f7:d7:27:a4:5c:44:c7:8e:0d:78:76:21:01:a7:84:5b:
4c:02:16:05:05:12:62:1f:00:d7:20:8a:17:89:1b:ce:e1:09:
46:e7:e8:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ0QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE3MDgwMjMyWhcNMjQwNzI3MDgwMjMyWjAYMRYw
FAYDVQQDEw02Njk3N2E5Yi0zMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArD2BmypLWWm72xiQWG9f4WcLlWgXprGxsv5KzaMXqDtJ16IAQLQNCE3j
E7E05nYPbk9oUkav06ZuwjOxlRdVoTRhWIK2Q5ffrxnsy+oMp9kJSBkyZpH5/G4c
xtMqnb2vs2KvKCbYbH8CiBQg/CU0YWZT4C90M15JcXETjCBdLtjEJhVft8hM6Tmt
tlchDRtwvjmkv3c0xhwIrq1nl2IwI/90O8/Jeu7N3JyAHolrRWVS0rR8CHdRjUXe
2wuT61f6CBy4gJwfRGzt0uBR7YBdjspwyRVNCiNR7W7KBrWi9fkE205L0IEfinbs
SqAkVcc/Qd2bWD86w1xjAPbm6rSyZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA58
KpVXMaTTMWrAuoanO13q2kimMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRDE4MjY3ODQ0MTIxMUVGQTFGRDdGQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBodmrbN6FY4ER1l7NDNcux2rEiAEWoWvVjz/v0GtwYv5X1IQVUIv0RvgTn
1Zkrym9fJR8Nt+r5jyOIozkjFFI8iqas2Qrdf5WO2B2NXxpApWVOaZuNYiOjc4cA
UVLmra1Rxyu/cvLP2JjaqKwcCiAVzrjyqXi/Ry+iTQDm0QHj1WzMuzqmbPF7KyHG
gpyeLRH/VMCRRwOVvj2nTy8puccIerLRfRDlPZvDf9tThbLf9/TUTWQh2IBQwBz7
QfHMv4tks3w7EzSGkCk4ez0KQnQr2AsZOIe3oQp/v/fXJ6RcRMeODXh2IQGnhFtM
AhYFBRJiHwDXIIoXiRvO4QlG5+jO
-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:42 2024 by rpki-client on console-fra.rpki-client.org