Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7C6A82499611EFBE4FDCB3762E951A.roa
File: FC7C6A82499611EFBE4FDCB3762E951A.roa (raw, json)
Hash identifier: TwWnyUeqcwQKP0Osk3W8k6TlhMXc0G1pmRYNINRS71U=
Subject key identifier: D6:62:7A:31:56:DB:28:C6:1F:43:F9:18:0E:97:A1:83:3E:8F:D0:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7C6A82499611EFBE4FDCB3762E951A.roa
Signing time: Wed 24 Jul 2024 08:30:30 +0000
ROA not before: Wed 24 Jul 2024 08:30:27 +0000
ROA not after: Fri 02 Aug 2024 08:30:27 +0000
asID: 44559
IP address blocks: 156.233.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40735 (0x9f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:30:27 2024 GMT
Not After : Aug 2 08:30:27 2024 GMT
Subject: CN=66a0bba6-a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:c5:df:a2:dd:95:a0:72:67:99:a8:e0:81:
aa:dd:6f:2f:11:c1:90:04:03:04:e0:03:ef:bc:ae:
b3:fa:04:3f:71:7a:05:b2:50:b1:b9:26:b8:f9:0d:
eb:28:d8:d1:92:28:44:f2:22:bd:3f:a1:ed:4b:7f:
cc:fb:df:17:61:32:86:78:ac:d5:d0:2f:02:ee:88:
e9:76:62:17:da:e9:c5:51:37:11:57:1c:a5:5c:39:
50:d2:50:8d:ad:37:74:8d:74:2e:f0:7e:f7:52:fa:
58:d1:88:de:e7:2a:8e:00:c5:d4:b2:8e:a1:57:a9:
59:6c:9a:ed:06:28:9f:a4:b9:1d:ce:6e:ff:85:4b:
55:af:35:f4:b2:bc:37:6a:92:fb:37:57:56:3d:b2:
e9:b0:07:bf:e7:77:cc:0b:01:3e:09:3c:cc:d9:f3:
f9:fa:e5:53:0b:3d:66:91:7c:69:a0:de:9f:ef:31:
fe:98:cc:80:d5:1e:e7:d7:52:f2:67:04:b0:24:78:
21:75:8c:3f:07:28:bf:75:5f:21:ab:9c:40:01:00:
5f:be:7f:80:18:0a:98:86:e5:8d:5a:b6:e8:7d:7e:
da:06:d4:cb:40:e8:bb:8f:a9:ee:f7:8c:a3:62:e2:
79:08:76:1f:5d:1e:38:dd:92:70:8d:32:a0:a1:b6:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:7A:31:56:DB:28:C6:1F:43:F9:18:0E:97:A1:83:3E:8F:D0:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7C6A82499611EFBE4FDCB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/19
Signature Algorithm: sha256WithRSAEncryption
82:f3:65:1f:58:ea:5d:40:81:99:76:42:80:b7:fc:33:ec:5a:
76:3f:8a:53:2b:a0:18:c7:5c:78:c4:4d:0e:a7:96:b3:8a:5a:
07:1c:51:2a:34:d7:1d:cd:20:7c:84:dd:14:1e:59:76:78:9c:
73:72:ef:17:54:31:e3:90:f9:88:04:12:1e:d8:60:a6:b6:95:
3c:fc:a1:81:07:bb:33:b9:b7:9b:02:4d:80:60:7d:56:7d:87:
d0:4b:cc:93:8b:7b:20:03:68:c2:06:ab:61:bf:4f:56:d5:22:
6b:92:56:54:d4:6e:41:1b:ea:d7:50:3b:78:0f:32:2e:90:e1:
62:30:25:ac:55:06:ae:6c:bd:50:f8:ac:d4:3f:73:2c:4e:3c:
f1:bb:7a:43:47:94:cb:27:6b:a2:c2:1f:36:38:a7:be:8d:c9:
f2:12:81:a5:50:af:a5:a2:86:21:52:c5:ce:fa:df:c1:40:04:
ee:2d:92:92:a2:6a:62:4d:b0:80:b1:7b:75:1e:71:53:56:4b:
32:ae:24:d8:16:a5:ce:8f:fb:ce:65:05:cf:f8:f8:31:7e:c3:
66:e0:76:c9:97:0c:0c:13:51:53:dc:a3:84:22:e9:5a:20:5a:
78:c3:bf:34:bb:05:6a:62:27:4a:cd:a3:b0:13:dd:8c:13:f4:
05:8f:09:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ8fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDgzMDI3WhcNMjQwODAyMDgzMDI3WjAYMRYw
FAYDVQQDEw02NmEwYmJhNi1hNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0T3F36LdlaByZ5mo4IGq3W8vEcGQBAME4APvvK6z+gQ/cXoFslCxuSa4
+Q3rKNjRkihE8iK9P6HtS3/M+98XYTKGeKzV0C8C7ojpdmIX2unFUTcRVxylXDlQ
0lCNrTd0jXQu8H73UvpY0Yje5yqOAMXUso6hV6lZbJrtBiifpLkdzm7/hUtVrzX0
srw3apL7N1dWPbLpsAe/53fMCwE+CTzM2fP5+uVTCz1mkXxpoN6f7zH+mMyA1R7n
11LyZwSwJHghdYw/Byi/dV8hq5xAAQBfvn+AGAqYhuWNWrbofX7aBtTLQOi7j6nu
94yjYuJ5CHYfXR443ZJwjTKgobbgNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNZi
ejFW2yjGH0P5GA6XoYM+j9BuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzdDNkE4MjQ5OTYxMUVGQkU0RkRDQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOkgMA0GCSqGSIb3DQEBCwUA
A4IBAQCC82UfWOpdQIGZdkKAt/wz7Fp2P4pTK6AYx1x4xE0Op5aziloHHFEqNNcd
zSB8hN0UHll2eJxzcu8XVDHjkPmIBBIe2GCmtpU8/KGBB7szubebAk2AYH1WfYfQ
S8yTi3sgA2jCBqthv09W1SJrklZU1G5BG+rXUDt4DzIukOFiMCWsVQaubL1Q+KzU
P3MsTjzxu3pDR5TLJ2uiwh82OKe+jcnyEoGlUK+looYhUsXO+t/BQATuLZKSompi
TbCAsXt1HnFTVksyriTYFqXOj/vOZQXP+PgxfsNm4HbJlwwME1FT3KOEIulaIFp4
w780uwVqYidKzaOwE92ME/QFjwl9
-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org