Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA435D6128311EF82B00251017001B1.roa
File: FAA435D6128311EF82B00251017001B1.roa (raw, json)
Hash identifier: 0YiLNOBlreX8TQmsZoc2FYN2rjtEyo9efq99h6Qpag8=
Subject key identifier: 4F:1B:F9:12:9A:FB:03:FC:5A:67:D1:5A:6B:A0:F0:37:50:E3:83:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA435D6128311EF82B00251017001B1.roa
Signing time: Wed 15 May 2024 06:25:53 +0000
ROA not before: Wed 15 May 2024 06:25:49 +0000
ROA not after: Sun 26 May 2024 06:25:49 +0000
asID: 142062
IP address blocks: 156.245.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35405 (0x8a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:25:49 2024 GMT
Not After : May 26 06:25:49 2024 GMT
Subject: CN=66445571-4d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c8:74:72:04:49:30:79:95:0e:60:57:34:98:
f3:66:d7:f9:2c:9d:74:ea:f2:0e:53:cb:4e:1a:5e:
bb:b4:98:16:bc:46:b4:0e:1e:5b:39:62:af:53:3e:
37:a7:04:77:41:f0:a8:0b:94:ec:f0:ca:57:05:2d:
bf:50:86:fc:02:de:6a:d2:1b:1e:03:57:66:48:a9:
f0:7c:ad:59:e2:db:d1:28:2d:d1:d2:7c:c0:25:e1:
95:d6:09:da:c9:2b:c9:05:0f:27:93:20:dd:26:39:
11:9b:21:ce:80:12:3c:49:2a:16:2a:3b:53:b6:0b:
b9:43:45:11:76:49:30:c1:3c:f6:b0:54:ba:a9:ec:
15:39:ee:71:d1:b3:e5:60:27:47:ad:69:ac:17:21:
f1:a4:d8:0a:df:7e:98:0a:49:1e:cc:c1:26:5e:f8:
5e:f1:49:7f:49:04:88:46:9c:2e:30:b8:15:89:71:
5f:81:2e:be:8f:15:55:f0:31:07:61:b2:c3:2a:5f:
fe:3b:80:c0:bb:b7:19:07:b2:b5:91:6b:bf:42:f6:
ea:93:9f:8c:be:d5:f3:53:a7:89:11:94:b2:5c:e6:
3b:e0:f6:11:60:cf:78:8d:d2:84:9f:35:29:d9:e2:
82:a5:29:a4:79:aa:10:35:92:b8:74:d8:fc:bd:55:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:F9:12:9A:FB:03:FC:5A:67:D1:5A:6B:A0:F0:37:50:E3:83:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA435D6128311EF82B00251017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:96:90:17:55:17:9b:7b:52:2b:4e:42:80:f6:97:fe:7e:13:
5e:7e:1e:54:0e:37:96:09:56:0d:b4:cf:11:2b:66:e6:17:01:
2e:09:23:7f:9c:3d:39:99:7a:6d:90:4b:77:16:16:1f:3b:ef:
a7:14:f7:3b:b6:76:55:f8:94:a2:19:d3:31:a8:cd:96:b1:e6:
50:b1:04:10:81:0f:e0:14:03:28:dc:fe:7b:7d:a7:fa:b3:20:
43:e9:a9:ba:19:70:5b:86:68:d0:e5:58:17:cf:55:81:38:a2:
cd:82:dd:df:f9:ef:02:a4:aa:6e:51:f4:43:ee:fc:f3:e0:b7:
d0:55:70:e6:6b:1d:b6:8c:1f:8b:82:c9:fa:b5:33:d7:2b:ce:
bf:f5:84:8f:36:b7:b0:3f:9c:01:3f:b4:11:21:32:02:c2:3b:
f0:20:5c:79:6a:3d:db:bf:e5:eb:2e:6c:ec:b7:c2:b2:5a:69:
31:82:02:b0:15:38:12:9b:60:2b:7a:62:2b:ed:ff:95:08:6f:
1b:63:79:b9:41:cf:46:d2:11:fc:ee:f4:07:bc:45:2b:5f:d4:
30:98:51:96:92:ed:41:60:d1:87:3c:19:69:39:8f:46:8a:77:
c9:63:bb:c0:16:1f:2b:48:9f:7a:95:c7:bc:87:22:4f:f9:65:
2a:f0:7f:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIpNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTE1MDYyNTQ5WhcNMjQwNTI2MDYyNTQ5WjAYMRYw
FAYDVQQDEw02NjQ0NTU3MS00ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+sh0cgRJMHmVDmBXNJjzZtf5LJ106vIOU8tOGl67tJgWvEa0Dh5bOWKv
Uz43pwR3QfCoC5Ts8MpXBS2/UIb8At5q0hseA1dmSKnwfK1Z4tvRKC3R0nzAJeGV
1gnaySvJBQ8nkyDdJjkRmyHOgBI8SSoWKjtTtgu5Q0URdkkwwTz2sFS6qewVOe5x
0bPlYCdHrWmsFyHxpNgK336YCkkezMEmXvhe8Ul/SQSIRpwuMLgViXFfgS6+jxVV
8DEHYbLDKl/+O4DAu7cZB7K1kWu/Qvbqk5+MvtXzU6eJEZSyXOY74PYRYM94jdKE
nzUp2eKCpSmkeaoQNZK4dNj8vVU+KwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE8b
+RKa+wP8WmfRWmug8DdQ44N1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQUE0MzVENjEyODMxMUVGODJCMDAyNTEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPVgMA0GCSqGSIb3DQEBCwUA
A4IBAQAKlpAXVRebe1IrTkKA9pf+fhNefh5UDjeWCVYNtM8RK2bmFwEuCSN/nD05
mXptkEt3FhYfO++nFPc7tnZV+JSiGdMxqM2WseZQsQQQgQ/gFAMo3P57faf6syBD
6am6GXBbhmjQ5VgXz1WBOKLNgt3f+e8CpKpuUfRD7vzz4LfQVXDmax22jB+Lgsn6
tTPXK86/9YSPNrewP5wBP7QRITICwjvwIFx5aj3bv+XrLmzst8KyWmkxggKwFTgS
m2AremIr7f+VCG8bY3m5Qc9G0hH87vQHvEUrX9QwmFGWku1BYNGHPBlpOY9GinfJ
Y7vAFh8rSJ96lce8hyJP+WUq8H/Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:49 2024 by rpki-client on console-fra.rpki-client.org