Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70E79B8499711EFB3AAE2B8762E951A.roa
File: F70E79B8499711EFB3AAE2B8762E951A.roa (raw, json)
Hash identifier: 8XhXWcGfHo0cPR+Xu0POqmt4RA2+I1eB0jH7cEJKqgM=
Subject key identifier: 91:CF:34:0E:BC:98:8C:31:C0:3B:D7:60:DE:16:1A:50:CC:66:49:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70E79B8499711EFB3AAE2B8762E951A.roa
Signing time: Wed 24 Jul 2024 08:37:31 +0000
ROA not before: Wed 24 Jul 2024 08:37:27 +0000
ROA not after: Wed 31 Jul 2024 08:37:27 +0000
asID: 44559
IP address blocks: 156.236.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40739 (0x9f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:37:27 2024 GMT
Not After : Jul 31 08:37:27 2024 GMT
Subject: CN=66a0bd4a-86a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:f6:79:20:a2:92:4f:76:c6:ff:eb:eb:78:
22:bb:a4:cf:0e:ae:f3:f5:9a:4b:77:bd:8c:b5:06:
a7:ef:da:50:24:c8:04:e7:86:e3:63:13:1d:d1:a4:
53:5d:ef:95:54:08:47:ae:90:7a:86:40:90:31:0b:
ff:53:bb:27:af:20:2e:d3:4b:cc:53:24:d8:5a:e8:
68:b1:b6:93:27:1d:67:ed:f0:61:5c:90:de:64:78:
ad:49:04:08:db:89:28:5f:65:bc:da:59:9d:e8:7c:
09:96:45:c3:4b:2b:58:95:60:53:bf:ee:a9:03:7b:
d8:03:ae:78:fa:1d:9e:25:73:64:2d:a9:c8:ad:ec:
15:48:9c:dc:a7:11:b7:6b:9c:e0:f5:58:50:fb:d8:
ca:99:38:b3:56:08:7b:7f:f6:65:40:6b:a0:3e:00:
02:43:02:6b:f8:34:5a:3e:33:e7:21:30:9e:bb:67:
01:58:d2:47:ab:d4:21:7e:52:d0:ff:e3:f8:0c:1d:
b2:08:48:e2:53:26:83:d4:ef:52:02:6a:d7:a2:ba:
62:1d:01:71:14:64:47:02:2c:f6:2a:93:b3:86:10:
4a:94:52:9f:5f:14:c1:14:c3:c6:42:e7:b4:7a:21:
09:87:46:42:ff:85:3e:84:0c:b4:ac:aa:96:96:dd:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:34:0E:BC:98:8C:31:C0:3B:D7:60:DE:16:1A:50:CC:66:49:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70E79B8499711EFB3AAE2B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.8.0/22
Signature Algorithm: sha256WithRSAEncryption
18:3d:ec:da:91:e3:55:e5:c3:2d:f8:75:c3:98:62:11:96:07:
ba:90:4b:55:66:71:35:ae:5a:b3:13:c4:77:3a:c4:b4:d6:c5:
a5:7d:65:39:4b:89:1b:b8:e0:73:d8:fa:7e:b4:a6:36:3a:57:
9e:4d:10:bc:35:bd:49:ec:0a:a2:1d:f8:00:7d:d1:3e:89:6f:
ee:3f:8a:3e:fa:08:6c:b4:c9:90:23:e2:ba:69:c2:20:f6:18:
fc:66:ee:56:35:6c:bc:aa:4b:5b:01:93:8f:62:d0:50:6b:49:
1c:37:3a:74:5e:8e:bf:3c:9b:db:2d:6c:0d:4b:c0:dc:e3:e6:
89:3b:e9:31:47:20:d9:62:41:1b:55:a4:96:03:14:22:f7:b7:
0a:1b:c8:3e:2c:3b:d3:33:f1:a2:96:77:b0:a1:1b:b2:36:6b:
f4:af:1c:96:f2:5c:4d:69:7b:4b:dd:3e:50:1d:2b:2a:ab:50:
0d:22:b3:4e:bc:af:1e:09:ce:90:b1:c9:f3:b3:f7:d6:fe:44:
f2:84:7d:7e:35:ed:1e:28:01:cf:52:1b:ff:7d:89:90:7d:ba:
87:e5:7a:6a:2f:97:e5:4f:a8:51:67:0d:2b:af:ef:3f:af:90:
9f:9a:a0:ab:f8:bb:49:5d:22:a0:22:77:b4:15:28:a3:84:02:
bb:dc:1b:a1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ8jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDgzNzI3WhcNMjQwNzMxMDgzNzI3WjAYMRYw
FAYDVQQDEw02NmEwYmQ0YS04NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5NT2eSCikk92xv/r63giu6TPDq7z9ZpLd72MtQan79pQJMgE54bjYxMd
0aRTXe+VVAhHrpB6hkCQMQv/U7snryAu00vMUyTYWuhosbaTJx1n7fBhXJDeZHit
SQQI24koX2W82lmd6HwJlkXDSytYlWBTv+6pA3vYA654+h2eJXNkLanIrewVSJzc
pxG3a5zg9VhQ+9jKmTizVgh7f/ZlQGugPgACQwJr+DRaPjPnITCeu2cBWNJHq9Qh
flLQ/+P4DB2yCEjiUyaD1O9SAmrXorpiHQFxFGRHAiz2KpOzhhBKlFKfXxTBFMPG
Que0eiEJh0ZC/4U+hAy0rKqWlt0nMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJHP
NA68mIwxwDvXYN4WGlDMZkl/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNzBFNzlCODQ5OTcxMUVGQjNBQUUyQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOwIMA0GCSqGSIb3DQEBCwUA
A4IBAQAYPezakeNV5cMt+HXDmGIRlge6kEtVZnE1rlqzE8R3OsS01sWlfWU5S4kb
uOBz2Pp+tKY2OleeTRC8Nb1J7AqiHfgAfdE+iW/uP4o++ghstMmQI+K6acIg9hj8
Zu5WNWy8qktbAZOPYtBQa0kcNzp0Xo6/PJvbLWwNS8Dc4+aJO+kxRyDZYkEbVaSW
AxQi97cKG8g+LDvTM/GilnewoRuyNmv0rxyW8lxNaXtL3T5QHSsqq1ANIrNOvK8e
Cc6Qscnzs/fW/kTyhH1+Ne0eKAHPUhv/fYmQfbqH5XpqL5flT6hRZw0rr+8/r5Cf
mqCr+LtJXSKgIne0FSijhAK73Buh
-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org