Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44B746BC06D711EF80FA502A017001B1.roa
File: 44B746BC06D711EF80FA502A017001B1.roa (raw, json)
Hash identifier: +xBCMVd70m95VEaUGM7Zr2Hnd9rYujLUW68dAAp1haI=
Subject key identifier: B0:0C:F2:47:15:C1:A0:40:F8:DD:B1:1F:58:C7:B6:AE:0C:29:87:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44B746BC06D711EF80FA502A017001B1.roa
Signing time: Tue 30 Apr 2024 09:51:51 +0000
ROA not before: Tue 30 Apr 2024 09:51:48 +0000
ROA not after: Tue 07 May 2024 09:51:48 +0000
asID: 142062
IP address blocks: 45.204.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34531 (0x86e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:51:48 2024 GMT
Not After : May 7 09:51:48 2024 GMT
Subject: CN=6630bf37-9d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:c0:2a:7e:45:b6:f5:41:a3:bf:8d:5c:b1:
3a:3e:3f:19:7d:15:b2:f8:c9:7f:7b:5e:09:30:7e:
20:3c:76:f5:84:3f:eb:2e:c9:c6:7e:56:db:93:9f:
e7:0d:5f:83:27:cd:3c:5d:72:d7:c5:8f:27:c3:e8:
68:bf:97:1f:05:05:dc:eb:68:e7:2e:61:5e:ba:55:
8c:1a:3a:f8:44:f3:20:4e:9f:18:c7:17:15:38:bf:
ed:42:e8:18:c0:b1:c0:a2:54:c5:d9:cb:8d:1a:16:
f5:0d:9a:ea:78:b6:50:5a:22:a4:48:09:cb:35:79:
7a:a2:0e:5b:87:aa:e4:bf:58:13:82:3a:bc:09:22:
62:60:9f:3f:fc:9a:22:ae:0c:56:6c:e7:a3:cc:cb:
6d:11:4a:39:a0:fc:b8:1f:9d:96:37:51:ef:fc:89:
2b:10:fb:27:36:be:18:03:18:5e:3e:1c:b3:82:ff:
35:56:51:af:b0:63:41:26:3e:f4:fd:18:54:eb:98:
d7:ca:9b:29:58:b0:51:24:27:c9:31:fc:99:36:de:
c4:84:6a:e4:67:df:55:a7:bc:dd:ea:c1:8f:70:f0:
52:cf:a5:86:ca:bf:fd:d9:2d:0a:5d:ca:bb:f9:8d:
15:88:cb:73:d3:32:34:d1:16:f3:17:54:3d:1c:ca:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:F2:47:15:C1:A0:40:F8:DD:B1:1F:58:C7:B6:AE:0C:29:87:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44B746BC06D711EF80FA502A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f1:cb:9c:c9:bf:b7:bb:74:d7:06:17:77:e3:15:62:de:9e:
60:17:7f:82:1e:e8:c5:7e:56:ca:20:63:ea:c3:de:fe:65:50:
45:6e:43:9f:59:22:5d:30:aa:21:cc:a6:46:55:fa:02:f8:37:
e0:36:21:b6:b7:3e:f2:9a:b5:ea:0f:91:0a:e2:cd:c2:53:bd:
c9:3b:58:25:e2:0d:4b:9d:74:a0:d2:fe:c9:06:6f:4e:f5:7c:
ac:5c:77:cd:28:de:c2:bc:bd:a0:8a:2b:65:22:85:62:9c:a3:
84:48:10:96:6d:94:31:66:fb:3d:01:7c:95:37:94:1d:5c:5e:
6b:62:d8:01:d1:a7:20:6e:60:e4:62:a1:7c:d8:5a:6f:0e:2b:
b9:68:bd:d9:cf:e4:b7:33:58:0f:9c:a0:77:cc:c3:74:38:6d:
54:2b:6a:9a:42:61:fd:20:a6:e0:4a:a6:ab:60:37:54:e8:d5:
70:90:3e:68:ad:5d:6b:ae:95:ed:47:f4:21:d8:96:ed:8b:95:
19:e5:19:1b:5e:75:28:28:1f:86:44:8f:86:6f:57:b9:1a:95:
f2:f2:66:35:78:54:75:65:a5:af:5f:25:7e:4b:de:5d:85:e6:
8d:21:c5:70:6c:9f:34:5f:d4:bc:24:f7:c9:88:9c:63:df:7b:
4d:c0:64:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIbjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDMwMDk1MTQ4WhcNMjQwNTA3MDk1MTQ4WjAYMRYw
FAYDVQQDEw02NjMwYmYzNy05ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA22vAKn5FtvVBo7+NXLE6Pj8ZfRWy+Ml/e14JMH4gPHb1hD/rLsnGflbb
k5/nDV+DJ808XXLXxY8nw+hov5cfBQXc62jnLmFeulWMGjr4RPMgTp8YxxcVOL/t
QugYwLHAolTF2cuNGhb1DZrqeLZQWiKkSAnLNXl6og5bh6rkv1gTgjq8CSJiYJ8/
/JoirgxWbOejzMttEUo5oPy4H52WN1Hv/IkrEPsnNr4YAxhePhyzgv81VlGvsGNB
Jj70/RhU65jXypspWLBRJCfJMfyZNt7EhGrkZ99Vp7zd6sGPcPBSz6WGyr/92S0K
Xcq7+Y0ViMtz0zI00RbzF1Q9HMqZ4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLAM
8kcVwaBA+N2xH1jHtq4MKYdRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEI3NDZCQzA2RDcxMUVGODBGQTUwMkEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxQMA0GCSqGSIb3DQEBCwUA
A4IBAQAi8cucyb+3u3TXBhd34xVi3p5gF3+CHujFflbKIGPqw97+ZVBFbkOfWSJd
MKohzKZGVfoC+DfgNiG2tz7ymrXqD5EK4s3CU73JO1gl4g1LnXSg0v7JBm9O9Xys
XHfNKN7CvL2giitlIoVinKOESBCWbZQxZvs9AXyVN5QdXF5rYtgB0acgbmDkYqF8
2FpvDiu5aL3Zz+S3M1gPnKB3zMN0OG1UK2qaQmH9IKbgSqarYDdU6NVwkD5orV1r
rpXtR/Qh2Jbti5UZ5RkbXnUoKB+GRI+Gb1e5GpXy8mY1eFR1ZaWvXyV+S95dheaN
IcVwbJ80X9S8JPfJiJxj33tNwGRq
-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org