Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E5BE50B92B11EF8532C39D762E951A.roa
File: 03E5BE50B92B11EF8532C39D762E951A.roa (raw, json)
Hash identifier: OSyrWkNc5NENKwu0/rz0q1ThVjfzLzqzyof7Wpl9lp8=
Subject key identifier: 30:0B:25:15:60:65:56:6B:59:DE:FF:9D:04:5C:A8:F1:37:6A:B3:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E345
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E5BE50B92B11EF8532C39D762E951A.roa
Signing time: Fri 13 Dec 2024 08:19:47 +0000
ROA not before: Fri 13 Dec 2024 08:19:44 +0000
ROA not after: Sat 25 Jan 2025 08:19:44 +0000
asID: 202656
IP address blocks: 45.199.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58181 (0xe345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:19:44 2024 GMT
Not After : Jan 25 08:19:44 2025 GMT
Subject: CN=675bee23-4b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:b4:16:3b:cd:89:c2:ee:8e:ec:9d:c4:7a:
f3:c2:83:61:8d:c7:50:c7:66:56:16:be:11:0d:38:
ed:24:4f:8a:5d:5a:53:6e:5d:2a:e0:ff:87:c8:93:
f2:59:b8:a3:d7:65:92:da:c2:e1:7e:b4:04:d2:f1:
37:b2:e5:55:16:e2:4b:48:ac:ed:82:f9:ea:d9:39:
7f:5b:e6:e9:de:ab:c5:5c:98:60:f9:83:f3:bf:23:
f6:8c:3d:6e:1b:b4:e3:c6:fc:34:65:5d:25:e3:0d:
62:06:c2:14:cd:21:f6:27:ae:5c:77:72:ba:78:60:
31:a7:37:83:36:8a:b6:f9:4d:92:7e:b2:15:0c:95:
c9:ed:75:d0:8d:a5:63:5a:2c:97:fd:9a:1c:6e:9f:
4a:e0:97:e6:f2:8f:48:48:58:b9:c0:48:e7:77:d9:
54:67:87:72:54:d4:b5:30:ac:39:88:f6:7f:d3:e1:
74:b9:e2:64:d3:ea:09:58:09:d4:94:44:88:fe:3b:
ff:74:bf:1a:a8:a2:bd:87:59:68:94:5b:75:cd:b1:
df:4c:e6:52:15:01:3e:7d:88:70:bb:57:c3:7a:79:
0a:22:e8:4c:ed:57:90:11:98:eb:00:03:f5:3f:86:
3c:b4:87:92:f8:38:1c:7a:9f:3e:ca:d6:dd:c3:40:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:25:15:60:65:56:6B:59:DE:FF:9D:04:5C:A8:F1:37:6A:B3:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03E5BE50B92B11EF8532C39D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.230.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c6:d1:1a:18:fc:24:6e:ec:c7:38:b4:3f:fb:49:45:bc:c6:
30:79:0c:90:9f:95:3e:3a:6e:a6:57:73:8a:1a:4f:a7:47:d7:
29:f1:be:cd:45:6b:e2:66:eb:1a:d2:d6:08:bb:96:04:cd:fd:
bf:b2:f7:ba:ee:95:95:4f:89:ce:44:68:d0:ec:0d:7b:ef:04:
fc:d6:b9:70:8e:58:11:13:08:0b:eb:6f:e1:48:0f:1c:66:a8:
07:4a:27:b7:28:7a:72:aa:e1:7e:9b:35:a1:8c:3c:3d:4d:4c:
cf:76:b1:13:e9:9c:e7:2e:67:69:d8:1b:a1:7e:7c:02:ee:62:
f1:96:be:77:08:fd:56:9b:b7:52:b2:79:e6:2c:71:ab:43:2b:
96:bc:59:94:77:c1:d3:53:53:cd:90:fd:a6:f3:d5:31:76:fc:
37:ea:d9:31:cc:e9:3d:ab:1b:da:a5:c4:33:71:6b:9f:b3:10:
65:80:74:8c:26:18:3f:cb:03:58:aa:3a:78:8f:f9:a7:6c:9b:
6e:05:b9:c6:4b:4a:1f:d2:67:65:e6:7c:6a:7d:37:18:d6:76:
29:78:b8:e8:ee:0c:ed:ff:8a:d6:1f:ab:01:14:c9:71:80:f3:
78:42:88:8f:b4:55:53:e8:42:00:1e:2b:35:23:60:5a:50:e3:
0a:fd:11:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAONFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDgxOTQ0WhcNMjUwMTI1MDgxOTQ0WjAYMRYw
FAYDVQQDEw02NzViZWUyMy00YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxJK0FjvNicLujuydxHrzwoNhjcdQx2ZWFr4RDTjtJE+KXVpTbl0q4P+H
yJPyWbij12WS2sLhfrQE0vE3suVVFuJLSKztgvnq2Tl/W+bp3qvFXJhg+YPzvyP2
jD1uG7Tjxvw0ZV0l4w1iBsIUzSH2J65cd3K6eGAxpzeDNoq2+U2SfrIVDJXJ7XXQ
jaVjWiyX/Zocbp9K4Jfm8o9ISFi5wEjnd9lUZ4dyVNS1MKw5iPZ/0+F0ueJk0+oJ
WAnUlESI/jv/dL8aqKK9h1lolFt1zbHfTOZSFQE+fYhwu1fDenkKIuhM7VeQEZjr
AAP1P4Y8tIeS+Dgcep8+ytbdw0B3YQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDAL
JRVgZVZrWd7/nQRcqPE3arO9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wM0U1QkU1MEI5MkIxMUVGODUzMkMzOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfmMA0GCSqGSIb3DQEBCwUA
A4IBAQAGxtEaGPwkbuzHOLQ/+0lFvMYweQyQn5U+Om6mV3OKGk+nR9cp8b7NRWvi
Zusa0tYIu5YEzf2/sve67pWVT4nORGjQ7A177wT81rlwjlgREwgL62/hSA8cZqgH
Sie3KHpyquF+mzWhjDw9TUzPdrET6ZznLmdp2BuhfnwC7mLxlr53CP1Wm7dSsnnm
LHGrQyuWvFmUd8HTU1PNkP2m89Uxdvw36tkxzOk9qxvapcQzcWufsxBlgHSMJhg/
ywNYqjp4j/mnbJtuBbnGS0of0mdl5nxqfTcY1nYpeLjo7gzt/4rWH6sBFMlxgPN4
QoiPtFVT6EIAHis1I2BaUOMK/REs
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:28 2025 by rpki-client