Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74714962F83E11EFBA3A5E9B762E951A.roa
File: 74714962F83E11EFBA3A5E9B762E951A.roa (raw, json)
Hash identifier: tSooUct32aUWgUE3l/CNncVM6heUG1C7a4y1IzkxbNw=
Subject key identifier: 2B:62:FB:71:2F:FB:5E:86:1C:AF:5A:A1:2F:F8:C0:33:7B:5A:2D:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0141C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74714962F83E11EFBA3A5E9B762E951A.roa
Signing time: Mon 03 Mar 2025 14:47:40 +0000
ROA not before: Mon 03 Mar 2025 14:47:36 +0000
ROA not after: Sun 30 Mar 2025 14:47:36 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82375 (0x141c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 14:47:36 2025 GMT
Not After : Mar 30 14:47:36 2025 GMT
Subject: CN=67c5c10c-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:96:2f:7c:96:f6:16:26:e7:22:95:b2:3c:
39:77:d1:8a:8e:05:e2:cd:9b:a1:1b:93:15:ed:dd:
fd:1a:a6:75:86:8e:8d:7b:a9:00:dd:1e:84:4b:ca:
c3:a0:4d:b5:35:54:ea:c2:68:1b:6a:c8:c5:8e:a5:
c6:bf:9e:88:00:e5:ae:2c:a0:82:3c:27:3d:ef:a1:
9c:6c:77:42:55:0b:a5:d9:a4:6f:e7:26:75:a2:00:
19:5d:10:b4:3e:11:02:f7:18:34:34:73:51:ff:a8:
05:cf:f8:e7:89:f1:13:68:74:5e:7c:42:e2:9a:fe:
ad:4b:f3:e6:d9:53:6b:1f:3b:9f:8b:cc:bf:47:b3:
17:12:72:a0:2d:56:38:d9:a5:1a:88:ad:08:d1:53:
fc:de:7a:45:7b:26:9d:99:03:80:cf:8f:08:77:42:
7b:9c:cf:6d:cb:14:7c:32:be:2e:7b:be:f7:7d:46:
2a:d8:29:64:48:18:9d:8d:29:ae:ae:d9:da:25:18:
74:75:91:3a:f3:60:ea:50:b8:71:7e:52:ce:dd:7a:
d9:d5:37:a5:3c:4a:f7:f3:07:3e:a6:15:e0:90:b1:
b1:ae:f0:4e:1d:b0:4d:0f:c0:2b:3a:b9:63:c7:f2:
0b:8f:93:b4:2f:c2:a4:1d:8c:06:69:17:0e:21:e5:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:FB:71:2F:FB:5E:86:1C:AF:5A:A1:2F:F8:C0:33:7B:5A:2D:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74714962F83E11EFBA3A5E9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
Signature Algorithm: sha256WithRSAEncryption
44:96:e8:8a:c3:a4:4a:d1:dc:55:10:71:98:3d:4e:bb:f4:ee:
51:9b:26:19:28:8b:55:d6:47:6e:6b:88:c0:4f:e5:b7:27:5d:
55:1a:df:0b:61:4f:1a:c9:e8:1a:44:49:b1:28:d8:53:93:06:
eb:44:da:28:bd:56:4d:bc:77:4c:ee:c9:6e:4f:24:31:2b:d4:
d7:fd:74:6b:3b:09:b1:7f:6d:d2:4f:77:2c:f1:44:16:12:15:
ee:d1:75:01:22:7e:8e:32:06:78:3f:87:f4:c7:de:75:4f:e1:
7e:fd:47:1a:13:92:1b:ba:c4:df:eb:af:1a:a1:1d:ff:64:f3:
59:3b:b4:89:8b:04:98:c7:ce:df:ab:e9:25:a6:6e:cf:45:38:
85:81:13:aa:69:12:c5:e5:2d:99:a8:e8:2e:4e:54:86:17:25:
95:78:98:f3:02:93:9f:2c:b9:6d:6b:e9:77:92:87:35:0a:72:
3d:43:dc:97:d4:b3:06:c9:51:d6:c5:5a:10:40:5d:a7:c1:9d:
b3:d0:9d:5e:79:25:b3:97:3e:89:27:05:98:22:20:56:1a:3f:
d4:39:a2:d3:41:0a:ab:3d:6f:cb:49:7d:6b:12:83:22:8a:57:
78:a2:8e:34:99:3a:fa:85:28:b0:9b:d4:73:01:ad:08:d5:1c:
dd:ca:c2:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUHHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMTQ0NzM2WhcNMjUwMzMwMTQ0NzM2WjAYMRYw
FAYDVQQDEw02N2M1YzEwYy1mOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw+qWL3yW9hYm5yKVsjw5d9GKjgXizZuhG5MV7d39GqZ1ho6Ne6kA3R6E
S8rDoE21NVTqwmgbasjFjqXGv56IAOWuLKCCPCc976GcbHdCVQul2aRv5yZ1ogAZ
XRC0PhEC9xg0NHNR/6gFz/jnifETaHRefELimv6tS/Pm2VNrHzufi8y/R7MXEnKg
LVY42aUaiK0I0VP83npFeyadmQOAz48Id0J7nM9tyxR8Mr4ue773fUYq2ClkSBid
jSmurtnaJRh0dZE682DqULhxflLO3XrZ1TelPEr38wc+phXgkLGxrvBOHbBND8Ar
Orljx/ILj5O0L8KkHYwGaRcOIeWmuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCti
+3Ev+16GHK9aoS/4wDN7Wi2RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDcxNDk2MkY4M0UxMUVGQkEzQTVFOUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTcMA0GCSqGSIb3DQEBCwUA
A4IBAQBEluiKw6RK0dxVEHGYPU679O5RmyYZKItV1kdua4jAT+W3J11VGt8LYU8a
yegaREmxKNhTkwbrRNoovVZNvHdM7sluTyQxK9TX/XRrOwmxf23ST3cs8UQWEhXu
0XUBIn6OMgZ4P4f0x951T+F+/UcaE5IbusTf668aoR3/ZPNZO7SJiwSYx87fq+kl
pm7PRTiFgROqaRLF5S2ZqOguTlSGFyWVeJjzApOfLLlta+l3koc1CnI9Q9yX1LMG
yVHWxVoQQF2nwZ2z0J1eeSWzlz6JJwWYIiBWGj/UOaLTQQqrPW/LSX1rEoMiild4
oo40mTr6hSiwm9RzAa0I1RzdysLE
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:15 2025 by rpki-client