Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE0FB7C607A911EFBC6E235C017001B1.roa
File: EE0FB7C607A911EFBC6E235C017001B1.roa (raw, json)
Hash identifier: DiXmFd7o01GzBL6TfuGwNEEdYx/CAzOdNYVQu1KtiUE=
Subject key identifier: 37:2F:C1:DC:94:F6:B4:E1:00:69:A6:6E:D8:73:09:9C:14:12:71:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 871E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE0FB7C607A911EFBC6E235C017001B1.roa
Signing time: Wed 01 May 2024 10:59:50 +0000
ROA not before: Wed 01 May 2024 10:59:46 +0000
ROA not after: Thu 16 May 2024 10:59:46 +0000
asID: 136778
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34590 (0x871e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:59:46 2024 GMT
Not After : May 16 10:59:46 2024 GMT
Subject: CN=663220a6-f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:f4:9c:41:66:fd:21:91:ff:e1:e2:60:64:
05:47:13:3d:20:0b:1f:cc:73:19:8d:33:0a:af:b8:
2c:64:34:99:f0:83:7f:30:83:8b:21:a3:13:cf:58:
d6:82:e3:0a:49:30:53:41:f2:31:4b:d1:01:1d:f6:
21:78:09:ac:1b:19:74:7b:89:c9:b0:20:99:91:f7:
87:5c:dc:a3:e3:09:0d:1e:00:81:4d:ab:c9:7a:bb:
5d:b8:f2:06:8e:de:a9:b7:9a:a0:00:0d:a2:25:63:
86:95:f2:85:33:b2:15:1d:39:db:13:34:e1:f0:fc:
f1:02:17:00:13:a0:71:c7:8b:d7:65:2e:ff:3e:3d:
9b:45:9d:4a:61:89:ad:e0:7a:bc:c1:11:ce:96:f1:
bf:72:7c:d2:f7:50:bc:7c:91:c7:19:66:fc:4a:65:
35:0a:fc:8b:ac:9f:b4:d5:47:d7:ec:79:90:f8:e6:
c7:5d:58:48:1c:12:89:0b:ba:eb:b3:d7:34:e9:2f:
3d:40:c4:d9:b3:16:41:46:aa:8b:1d:e4:dd:51:39:
c9:c2:ea:d5:a6:aa:f5:b3:1a:77:97:88:57:ff:d7:
d3:4b:8a:6f:31:2b:04:2c:9d:c8:61:cb:38:56:39:
fa:cd:f8:d5:e7:8b:13:b4:6c:5b:45:65:7a:dc:f7:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:C1:DC:94:F6:B4:E1:00:69:A6:6E:D8:73:09:9C:14:12:71:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE0FB7C607A911EFBC6E235C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
11:75:22:44:3b:87:d7:d8:ce:34:54:1d:25:9b:a9:80:a7:ed:
8a:ff:0a:96:15:53:62:04:8b:fb:cc:3b:92:b1:05:ab:77:51:
82:d0:99:a1:69:16:2d:ef:e6:eb:d7:72:b9:31:a3:23:d7:8c:
41:a8:01:89:d7:19:58:fc:84:58:48:de:78:d1:87:e0:ea:5e:
02:08:fc:91:58:dd:56:d4:cb:f6:22:a9:37:c3:04:49:5a:d8:
41:ca:b8:50:05:73:a4:74:93:8b:ec:31:36:52:31:8d:99:bd:
23:d0:a2:c9:b9:ca:83:1d:a1:9e:90:0a:7c:6b:5f:d9:25:59:
96:03:e8:d3:10:2b:3f:82:d2:67:cc:b6:0b:4e:97:2e:69:5c:
85:d1:e2:98:83:ce:59:73:46:19:87:7d:b8:23:8d:df:ed:d0:
bb:62:5f:ba:ef:90:a9:14:01:f0:8c:3b:da:76:3f:9f:c5:00:
ae:d9:ee:77:66:64:66:f8:04:45:1c:8f:67:66:ea:17:13:3b:
38:75:c2:11:79:d4:67:f0:6c:d0:04:88:04:83:17:5b:e0:ca:
cc:aa:c3:5d:21:93:25:e3:60:9b:44:4f:38:4b:ec:5d:e4:09:
1d:5e:df:d8:60:57:fa:6f:54:f8:d5:e2:77:16:50:01:70:7f:
c0:e8:4b:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIceMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTAxMTA1OTQ2WhcNMjQwNTE2MTA1OTQ2WjAYMRYw
FAYDVQQDEw02NjMyMjBhNi1mODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt0T0nEFm/SGR/+HiYGQFRxM9IAsfzHMZjTMKr7gsZDSZ8IN/MIOLIaMT
z1jWguMKSTBTQfIxS9EBHfYheAmsGxl0e4nJsCCZkfeHXNyj4wkNHgCBTavJertd
uPIGjt6pt5qgAA2iJWOGlfKFM7IVHTnbEzTh8PzxAhcAE6Bxx4vXZS7/Pj2bRZ1K
YYmt4Hq8wRHOlvG/cnzS91C8fJHHGWb8SmU1CvyLrJ+01UfX7HmQ+ObHXVhIHBKJ
C7rrs9c06S89QMTZsxZBRqqLHeTdUTnJwurVpqr1sxp3l4hX/9fTS4pvMSsELJ3I
Ycs4Vjn6zfjV54sTtGxbRWV63PczBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDcv
wdyU9rThAGmmbthzCZwUEnGpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTBGQjdDNjA3QTkxMUVGQkM2RTIzNUMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxSMA0GCSqGSIb3DQEBCwUA
A4IBAQARdSJEO4fX2M40VB0lm6mAp+2K/wqWFVNiBIv7zDuSsQWrd1GC0JmhaRYt
7+br13K5MaMj14xBqAGJ1xlY/IRYSN540Yfg6l4CCPyRWN1W1Mv2Iqk3wwRJWthB
yrhQBXOkdJOL7DE2UjGNmb0j0KLJucqDHaGekAp8a1/ZJVmWA+jTECs/gtJnzLYL
TpcuaVyF0eKYg85Zc0YZh324I43f7dC7Yl+675CpFAHwjDvadj+fxQCu2e53ZmRm
+ARFHI9nZuoXEzs4dcIRedRn8GzQBIgEgxdb4MrMqsNdIZMl42CbRE84S+xd5Akd
Xt/YYFf6b1T41eJ3FlABcH/A6Esd
-----END CERTIFICATE-----
Generated at Fri May 17 02:04:04 2024 by rpki-client on console-fra.rpki-client.org