Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F312C95647D311EF886862B9762E951A.roa
File: F312C95647D311EF886862B9762E951A.roa (raw, json)
Hash identifier: Yi8Gw0ctKtUuhlvzfhvq6cUvt48AEOvQQ9C41p+/7+s=
Subject key identifier: 18:16:E3:F2:0F:FD:FB:7A:19:83:25:05:78:80:61:5B:54:6D:67:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F312C95647D311EF886862B9762E951A.roa
Signing time: Mon 22 Jul 2024 02:41:51 +0000
ROA not before: Mon 22 Jul 2024 02:41:47 +0000
ROA not after: Fri 23 Aug 2024 02:41:47 +0000
asID: 44559
IP address blocks: 156.246.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40383 (0x9dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:41:47 2024 GMT
Not After : Aug 23 02:41:47 2024 GMT
Subject: CN=669dc6ef-789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:53:b9:f4:bd:ea:a0:65:0f:0e:e3:49:2b:
2e:49:80:e0:9a:ff:73:5c:9a:2f:e6:9f:8c:c9:bb:
cf:a2:ce:49:24:9f:1f:89:8e:2f:9a:1f:69:f8:27:
17:6f:77:15:a9:01:76:fa:76:6e:f5:40:99:da:d9:
2b:98:d0:66:c6:72:d7:6f:a3:8f:2c:4d:06:6f:ee:
04:38:e4:75:e6:4b:8f:74:48:f1:e2:36:c3:c0:30:
4e:13:b1:b3:57:4a:5d:4b:2f:ce:bc:41:0b:ed:1d:
a9:71:7d:51:d2:ca:70:c0:f4:fc:b0:9e:62:35:5e:
2b:32:ae:ef:58:31:e6:fb:d2:44:ae:1c:b7:95:78:
d6:b9:83:e0:9e:29:56:af:e9:95:d5:25:f3:9d:2c:
7c:e9:df:6e:c0:ef:d2:6f:f6:cc:ad:79:82:83:d7:
9f:87:a7:6e:35:2c:96:1e:96:99:f2:81:1f:7e:8b:
df:7d:3d:c2:52:0b:b7:9b:95:93:28:8d:98:b9:2e:
a3:d9:5b:f9:48:91:a5:14:57:a0:4f:0a:bd:69:d9:
ea:cb:e4:90:38:9f:c2:90:8c:3b:77:ec:d4:ca:1b:
e0:23:31:f3:68:cf:ba:fd:c8:d3:ac:c9:1a:ff:f9:
ce:2c:42:ba:91:0d:7f:cb:df:b5:a1:fa:19:2b:62:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:E3:F2:0F:FD:FB:7A:19:83:25:05:78:80:61:5B:54:6D:67:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F312C95647D311EF886862B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7b:bc:49:32:4a:92:db:a7:01:5a:22:97:e9:13:cf:78:35:
11:a3:57:06:e4:4e:ee:9f:8c:f2:3d:f9:06:5d:bb:3f:73:91:
6b:58:df:fb:c4:e4:9b:b1:17:cf:8d:e1:b1:60:5e:ba:e4:e7:
f2:10:1b:1f:86:04:82:57:74:64:51:8f:15:6a:98:9b:67:0d:
01:8f:7d:e9:fc:48:2b:df:06:05:e7:a5:1d:6f:06:3b:0d:ec:
a2:5b:db:68:b3:78:31:e3:28:05:ab:4c:2c:96:12:30:f5:12:
0d:54:b1:d0:b1:41:af:d5:cd:41:1d:ee:10:76:c5:5a:23:28:
75:d5:5d:a8:d5:d0:d4:88:80:90:3c:db:76:02:68:c5:8f:4c:
9e:0c:21:ac:45:7b:d1:d4:c2:b2:dd:fe:2c:d8:25:04:a7:67:
09:91:3b:c1:96:56:4a:12:96:a3:b0:b3:bb:ab:cb:9f:c2:70:
9a:30:d2:71:98:c9:3b:40:c7:e3:ba:28:7c:06:3d:b6:d4:13:
7e:66:b7:6a:a7:31:73:59:2f:4f:bd:78:7f:b7:a0:02:7b:00:
ee:6c:1f:67:de:f8:4c:f8:ca:66:67:d7:44:c1:c8:e5:e6:9c:
8f:66:8c:74:fe:fa:45:f9:db:d3:16:56:e6:22:8e:03:cf:87:
31:60:e0:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ2/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDI0MTQ3WhcNMjQwODIzMDI0MTQ3WjAYMRYw
FAYDVQQDEw02NjlkYzZlZi03ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2axTufS96qBlDw7jSSsuSYDgmv9zXJov5p+MybvPos5JJJ8fiY4vmh9p
+CcXb3cVqQF2+nZu9UCZ2tkrmNBmxnLXb6OPLE0Gb+4EOOR15kuPdEjx4jbDwDBO
E7GzV0pdSy/OvEEL7R2pcX1R0spwwPT8sJ5iNV4rMq7vWDHm+9JErhy3lXjWuYPg
nilWr+mV1SXznSx86d9uwO/Sb/bMrXmCg9efh6duNSyWHpaZ8oEffovffT3CUgu3
m5WTKI2YuS6j2Vv5SJGlFFegTwq9adnqy+SQOJ/CkIw7d+zUyhvgIzHzaM+6/cjT
rMka//nOLEK6kQ1/y9+1ofoZK2JqPwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBgW
4/IP/ft6GYMlBXiAYVtUbWdlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzEyQzk1NjQ3RDMxMUVGODg2ODYyQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPb/MA0GCSqGSIb3DQEBCwUA
A4IBAQB9e7xJMkqS26cBWiKX6RPPeDURo1cG5E7un4zyPfkGXbs/c5FrWN/7xOSb
sRfPjeGxYF665OfyEBsfhgSCV3RkUY8VapibZw0Bj33p/Egr3wYF56UdbwY7Deyi
W9tos3gx4ygFq0wslhIw9RINVLHQsUGv1c1BHe4QdsVaIyh11V2o1dDUiICQPNt2
AmjFj0yeDCGsRXvR1MKy3f4s2CUEp2cJkTvBllZKEpajsLO7q8ufwnCaMNJxmMk7
QMfjuih8Bj221BN+ZrdqpzFzWS9PvXh/t6ACewDubB9n3vhM+MpmZ9dEwcjl5pyP
Zox0/vpF+dvTFlbmIo4Dz4cxYOAx
-----END CERTIFICATE-----
Generated at Fri Aug 23 07:13:26 2024 by rpki-client on console-ams.rpki-client.org