Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81FC8D2CFDA11EBB2E49F47F8AEA228.roa
File: F81FC8D2CFDA11EBB2E49F47F8AEA228.roa (raw, json)
Hash identifier: lLCNoWJlIcm/uqfFdBuwvdpRR0alhtMT1htMqTBXD4o=
Subject key identifier: 1F:2E:76:DB:21:C8:7A:51:7F:A3:33:2C:BD:CF:C9:F2:35:63:98:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0679
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81FC8D2CFDA11EBB2E49F47F8AEA228.roa
Signing time: Fri 18 Jun 2021 02:14:54 +0000
ROA not before: Fri 18 Jun 2021 02:14:49 +0000
ROA not after: Tue 19 Jul 2022 02:14:49 +0000
asID: 7018
IP address blocks: 156.233.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 02:14:49 2021 GMT
Not After : Jul 19 02:14:49 2022 GMT
Subject: CN=60cc019e-3724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:30:54:ec:26:15:33:2d:75:9a:be:c3:eb:
f1:c2:5b:1d:b1:30:27:ef:5d:c7:fb:0f:3a:84:e1:
e1:7b:02:7c:b7:6f:30:d4:13:eb:50:e5:bc:b3:b3:
70:15:bd:36:8e:ff:66:57:0d:08:d2:e5:d3:83:a3:
01:f7:6a:76:a8:35:4d:b0:f9:21:4d:db:d7:f2:1d:
95:e7:f5:08:c2:c3:61:4f:c6:9d:9a:c2:41:c6:b7:
a7:93:30:ac:81:57:a8:63:1f:d7:86:0e:2f:97:79:
ad:1c:ef:d7:b3:ef:10:0b:09:ee:de:4e:7b:22:3d:
1a:71:7e:00:9b:80:8e:1a:e2:f5:db:f9:17:28:a2:
e0:c2:a7:77:84:e6:2f:7f:45:d4:59:7c:d5:a9:60:
56:00:ab:af:ac:69:91:94:3a:7a:41:c1:8c:3b:1b:
e6:38:96:93:fc:ff:0a:c9:ec:ff:5a:16:ee:8b:40:
26:bf:5d:54:8e:a6:ce:b5:e0:c5:ab:16:44:8c:ad:
fe:15:64:0a:ee:c6:bc:37:6b:32:1d:76:7e:03:9d:
6e:4b:e3:fc:04:75:79:0e:42:d7:bf:4f:1b:da:41:
5c:f0:3a:57:68:51:95:47:44:aa:76:58:21:94:c6:
bc:97:14:85:43:50:91:82:b3:e2:d1:8f:c9:9e:9e:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:76:DB:21:C8:7A:51:7F:A3:33:2C:BD:CF:C9:F2:35:63:98:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F81FC8D2CFDA11EBB2E49F47F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.0.0/23
Signature Algorithm: sha256WithRSAEncryption
90:d1:11:c1:8b:ff:30:ab:73:fe:63:57:06:8b:d7:3f:f1:ab:
10:8c:e9:8c:f3:15:15:f2:c7:a6:93:3e:f7:36:f9:a0:ff:5b:
fa:39:76:9c:1e:52:41:cb:6c:ef:66:2d:54:f9:f8:41:10:4e:
0b:84:27:d6:85:73:9f:83:e0:11:72:17:72:3b:b7:0f:9f:aa:
94:1a:f8:d7:d8:1f:c7:f6:c7:b2:bb:ff:45:fd:3c:f4:7f:e2:
a1:2b:ec:b0:81:bc:92:50:23:dd:a6:82:3f:d7:7c:1f:48:28:
c9:a9:79:1f:80:7d:32:78:90:17:cb:c5:93:2b:45:c6:d4:79:
72:b9:78:c3:f5:4e:61:bd:e2:f1:81:29:12:30:15:df:ef:d6:
9a:e1:ef:5c:37:15:fd:13:40:08:7c:a2:67:09:78:85:17:39:
96:6d:06:bd:f9:93:69:6d:0a:f8:d5:41:cf:8b:83:3b:49:70:
32:e3:8b:9a:50:02:db:2d:26:73:fd:ba:15:b0:a3:46:da:2a:
26:d3:19:90:9d:2d:24:a7:30:6f:d0:f6:45:d5:0f:4e:ab:c6:
88:ac:5d:b5:58:4c:d4:db:31:00:f8:bd:23:64:c2:ea:b0:92:
15:75:f3:c6:c3:63:be:70:9d:44:e5:95:13:f1:1a:bc:28:43:
5c:92:ec:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA2MTgwMjE0NDlaFw0yMjA3MTkwMjE0NDlaMBgxFjAU
BgNVBAMTDTYwY2MwMTllLTM3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw3jBU7CYVMy11mr7D6/HCWx2xMCfvXcf7DzqE4eF7Any3bzDUE+tQ5byz
s3AVvTaO/2ZXDQjS5dODowH3anaoNU2w+SFN29fyHZXn9QjCw2FPxp2awkHGt6eT
MKyBV6hjH9eGDi+Xea0c79ez7xALCe7eTnsiPRpxfgCbgI4a4vXb+RcoouDCp3eE
5i9/RdRZfNWpYFYAq6+saZGUOnpBwYw7G+Y4lpP8/wrJ7P9aFu6LQCa/XVSOps61
4MWrFkSMrf4VZAruxrw3azIddn4DnW5L4/wEdXkOQte/TxvaQVzwOldoUZVHRKp2
WCGUxryXFIVDUJGCs+LRj8menhrhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUHy52
2yHIelF/ozMsvc/J8jVjmBkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Y4MUZDOEQyQ0ZEQTExRUJCMkU0OUY0N0Y4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc6QAwDQYJKoZIhvcNAQELBQAD
ggEBAJDREcGL/zCrc/5jVwaL1z/xqxCM6YzzFRXyx6aTPvc2+aD/W/o5dpweUkHL
bO9mLVT5+EEQTguEJ9aFc5+D4BFyF3I7tw+fqpQa+NfYH8f2x7K7/0X9PPR/4qEr
7LCBvJJQI92mgj/XfB9IKMmpeR+AfTJ4kBfLxZMrRcbUeXK5eMP1TmG94vGBKRIw
Fd/v1prh71w3Ff0TQAh8omcJeIUXOZZtBr35k2ltCvjVQc+LgztJcDLji5pQAtst
JnP9uhWwo0baKibTGZCdLSSnMG/Q9kXVD06rxoisXbVYTNTbMQD4vSNkwuqwkhV1
88bDY75wnUTllRPxGrwoQ1yS7LE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org