Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030A8430D02211EF9BEA8CA3762E951A.roa
File: 030A8430D02211EF9BEA8CA3762E951A.roa (raw, json)
Hash identifier: lZPk1C8SfL0dCrg4MgOE46aDBkU1WuGcw0QhvBbcaFw=
Subject key identifier: D0:6F:29:EC:77:69:73:3F:93:73:C7:86:5F:80:F2:6C:0D:4F:25:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010604
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030A8430D02211EF9BEA8CA3762E951A.roa
Signing time: Sat 11 Jan 2025 13:43:17 +0000
ROA not before: Sat 11 Jan 2025 13:43:13 +0000
ROA not after: Sat 25 Jan 2025 13:43:13 +0000
asID: 141883
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67076 (0x10604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 13:43:13 2025 GMT
Not After : Jan 25 13:43:13 2025 GMT
Subject: CN=67827575-b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:62:66:46:53:f2:f5:09:c9:e5:7d:b9:e7:
03:3e:ee:46:fc:75:d2:cb:87:14:09:de:a2:ff:c8:
9b:f3:c8:9a:b7:35:8a:d8:51:70:7b:a0:97:0f:9b:
76:7d:10:0f:3f:9a:4c:18:1f:e8:24:15:ab:eb:b6:
76:c8:10:80:48:87:1b:10:dc:b5:0d:04:83:95:6f:
68:51:bf:b8:e5:87:62:b5:3d:69:6c:a8:a6:3a:61:
02:ae:63:7d:59:3a:b6:49:7c:e8:9f:53:6d:69:b8:
30:79:07:27:40:39:45:bc:ff:53:ac:8b:7a:25:32:
8e:c5:62:70:70:7f:12:c8:0f:e1:32:96:0d:9a:ec:
70:a7:70:31:83:27:31:ed:4f:b0:2d:60:f7:9a:88:
d2:d6:2d:1d:8d:2e:86:c9:55:3b:cb:b6:a5:bb:bd:
16:a0:9f:79:f7:bb:45:97:fa:3e:a2:d6:f7:d1:6a:
88:21:c9:e9:97:bf:02:b0:56:4c:71:84:fd:de:c9:
19:ab:35:c5:dc:51:0f:df:81:f0:00:ad:d8:99:a5:
77:f4:42:83:61:30:3b:67:37:72:b5:12:3a:23:2f:
29:cd:35:e7:e1:1f:1a:9f:e4:25:73:d0:97:3f:93:
c8:5e:ea:ab:2f:82:de:58:ca:7e:d0:69:de:0b:c0:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:29:EC:77:69:73:3F:93:73:C7:86:5F:80:F2:6C:0D:4F:25:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/030A8430D02211EF9BEA8CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
97:d6:31:7a:8b:c1:ee:22:5c:fb:a3:3a:d8:a3:d8:8c:3c:1a:
63:8d:5e:dd:af:b0:7e:44:12:77:21:aa:5f:66:a5:e9:87:e3:
78:53:3e:24:53:01:9c:64:e7:7b:3e:59:cb:61:bc:12:34:e8:
53:1d:a4:46:dd:e5:a4:52:ce:ef:f2:29:80:a3:4d:45:5a:3b:
6f:18:4b:02:43:c0:2c:c7:90:b1:0c:aa:fc:5b:5f:a0:29:0c:
a9:73:9e:3f:c5:74:c7:45:20:36:cc:3b:8f:cd:a7:bb:43:a4:
fc:dc:5e:bc:88:ea:7d:ea:e6:df:d4:6d:c8:cc:ec:18:a9:c5:
85:b5:84:e6:d7:28:fa:ae:ae:d5:7f:31:79:05:80:12:6f:49:
fd:77:4d:85:a9:95:28:94:2e:0f:6c:4c:c2:7c:eb:cf:de:ec:
6a:19:b0:37:62:c7:d4:a4:33:af:34:79:44:19:16:7f:40:c7:
08:4b:42:a5:5c:94:0c:e2:45:e3:ad:11:18:1d:1f:25:2d:dd:
d0:c5:32:13:70:c8:59:30:a1:79:f7:98:36:ab:64:42:09:1b:
27:1b:04:02:a3:71:21:fa:88:ce:56:cd:30:8f:d2:6d:85:42:
d7:d2:87:e7:4a:5a:8a:86:ce:5f:11:3a:d4:19:e6:94:a7:87:
60:d2:2b:04
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQYEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTM0MzEzWhcNMjUwMTI1MTM0MzEzWjAYMRYw
FAYDVQQDEw02NzgyNzU3NS1iMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0x1iZkZT8vUJyeV9uecDPu5G/HXSy4cUCd6i/8ib88iatzWK2FFwe6CX
D5t2fRAPP5pMGB/oJBWr67Z2yBCASIcbENy1DQSDlW9oUb+45YditT1pbKimOmEC
rmN9WTq2SXzon1NtabgweQcnQDlFvP9TrIt6JTKOxWJwcH8SyA/hMpYNmuxwp3Ax
gycx7U+wLWD3mojS1i0djS6GyVU7y7alu70WoJ9597tFl/o+otb30WqIIcnpl78C
sFZMcYT93skZqzXF3FEP34HwAK3YmaV39EKDYTA7ZzdytRI6Iy8pzTXn4R8an+Ql
c9CXP5PIXuqrL4LeWMp+0GneC8D9WwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNBv
Kex3aXM/k3PHhl+A8mwNTyVTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMzBBODQzMEQwMjIxMUVGOUJFQThDQTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcgYMA0GCSqGSIb3DQEBCwUA
A4IBAQCX1jF6i8HuIlz7ozrYo9iMPBpjjV7dr7B+RBJ3IapfZqXph+N4Uz4kUwGc
ZOd7PlnLYbwSNOhTHaRG3eWkUs7v8imAo01FWjtvGEsCQ8Asx5CxDKr8W1+gKQyp
c54/xXTHRSA2zDuPzae7Q6T83F68iOp96ubf1G3IzOwYqcWFtYTm1yj6rq7VfzF5
BYASb0n9d02FqZUolC4PbEzCfOvP3uxqGbA3YsfUpDOvNHlEGRZ/QMcIS0KlXJQM
4kXjrREYHR8lLd3QxTITcMhZMKF595g2q2RCCRsnGwQCo3Eh+ojOVs0wj9JthULX
0ofnSlqKhs5fETrUGeaUp4dg0isE
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:54 2025 by rpki-client