Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F8996432BF11EFA687EE4A762E951A.roa
File: 03F8996432BF11EFA687EE4A762E951A.roa (raw, json)
Hash identifier: /s5IBzMLBeMaTtKRSb9owLu+pfc0F4UnPlBitE7h0ps=
Subject key identifier: FC:0D:EF:41:E0:6B:B1:93:0E:06:CF:ED:C5:9C:FD:86:58:22:5C:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 949E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F8996432BF11EFA687EE4A762E951A.roa
Signing time: Tue 25 Jun 2024 06:49:06 +0000
ROA not before: Tue 25 Jun 2024 06:49:03 +0000
ROA not after: Sun 28 Jul 2024 06:49:03 +0000
asID: 211871
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38046 (0x949e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:49:03 2024 GMT
Not After : Jul 28 06:49:03 2024 GMT
Subject: CN=667a6862-10de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:6b:97:9e:df:df:1a:6e:25:91:98:1c:5d:
51:8b:cf:26:ba:b1:e7:c1:12:69:ef:97:65:4a:ac:
bd:0e:f7:4e:4e:58:2b:b0:13:2a:8d:03:aa:25:a7:
4b:85:ff:56:86:5a:c0:e9:05:03:39:bb:94:a1:76:
7d:51:e9:07:60:70:03:28:87:29:53:5f:16:99:8f:
a3:ae:50:f8:46:b0:3f:7a:f8:88:c2:94:8c:42:5c:
4f:bd:92:1b:21:0f:cd:7d:8b:c2:04:08:84:51:25:
67:ab:b4:76:96:d9:99:98:69:46:f8:5e:1a:a5:ab:
b4:a8:ee:56:2b:0d:c7:c6:d6:b3:8a:7c:f2:3c:c4:
7d:b1:b1:26:a2:03:2a:ce:a8:aa:23:e2:98:db:05:
d3:39:8a:7b:5c:75:2b:7b:61:36:ff:4d:35:e9:ce:
c3:82:22:c1:ec:6f:01:70:b5:41:5a:66:6b:3c:7a:
67:f4:2f:66:8b:10:0f:12:2c:f7:0d:50:e1:28:f3:
fc:99:80:04:6b:44:56:61:54:d0:92:7f:8b:fe:35:
cd:9d:29:37:14:d1:01:87:68:ed:23:c6:5f:02:dd:
ab:5c:e1:18:e8:0b:67:b5:df:ab:20:6e:f8:62:e8:
ce:b5:a0:71:89:6c:0b:60:ca:b8:f0:f6:8b:9e:34:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:EF:41:E0:6B:B1:93:0E:06:CF:ED:C5:9C:FD:86:58:22:5C:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F8996432BF11EFA687EE4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
15:15:a1:22:45:cb:b8:11:0c:d7:2b:dc:20:d5:a0:4f:9e:cc:
d5:48:38:31:47:f8:dc:4f:99:9f:74:ee:3b:d7:aa:53:11:c8:
8d:05:56:30:cc:14:03:a3:9d:7e:db:50:e6:0d:95:f7:32:34:
82:3b:3e:ea:28:0e:be:36:54:b3:b2:59:91:ca:f8:14:a5:a7:
84:f9:e9:02:a2:5f:01:99:9d:48:f1:d2:e0:0e:cb:ff:10:82:
3c:78:fe:6d:7e:bb:27:07:89:78:f8:e6:ab:54:5b:21:d6:5e:
ff:87:ba:66:ca:35:b2:67:bd:d7:4e:d7:a7:83:97:22:13:0c:
97:e2:18:64:d8:04:d5:f0:07:8c:ea:8f:a7:d8:8e:f9:b1:fe:
3b:eb:e9:ea:5d:16:58:a8:55:aa:50:19:20:81:1a:aa:e6:9d:
a0:c1:97:50:3f:54:0c:8f:14:4c:af:15:37:f6:5b:14:f5:38:
ec:cb:f4:df:ae:82:f5:dd:14:e1:01:9b:50:fe:9d:09:32:5c:
20:28:ee:92:ea:49:ee:30:cb:09:93:17:2e:c2:a6:8c:f5:9c:
10:52:43:59:14:7b:54:86:94:77:f4:ba:5c:ce:52:5a:b5:d4:
fc:06:a2:5b:e1:29:3f:bf:f5:8e:20:57:0b:02:f2:bf:fc:4d:
bf:92:86:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJSeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI1MDY0OTAzWhcNMjQwNzI4MDY0OTAzWjAYMRYw
FAYDVQQDEw02NjdhNjg2Mi0xMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnYRrl57f3xpuJZGYHF1Ri88murHnwRJp75dlSqy9DvdOTlgrsBMqjQOq
JadLhf9WhlrA6QUDObuUoXZ9UekHYHADKIcpU18WmY+jrlD4RrA/eviIwpSMQlxP
vZIbIQ/NfYvCBAiEUSVnq7R2ltmZmGlG+F4apau0qO5WKw3HxtazinzyPMR9sbEm
ogMqzqiqI+KY2wXTOYp7XHUre2E2/0016c7DgiLB7G8BcLVBWmZrPHpn9C9mixAP
Eiz3DVDhKPP8mYAEa0RWYVTQkn+L/jXNnSk3FNEBh2jtI8ZfAt2rXOEY6Atntd+r
IG74YujOtaBxiWwLYMq48PaLnjS2iwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPwN
70Hga7GTDgbP7cWc/YZYIlw9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wM0Y4OTk2NDMyQkYxMUVGQTY4N0VFNEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcMZMA0GCSqGSIb3DQEBCwUA
A4IBAQAVFaEiRcu4EQzXK9wg1aBPnszVSDgxR/jcT5mfdO4716pTEciNBVYwzBQD
o51+21DmDZX3MjSCOz7qKA6+NlSzslmRyvgUpaeE+ekCol8BmZ1I8dLgDsv/EII8
eP5tfrsnB4l4+OarVFsh1l7/h7pmyjWyZ73XTteng5ciEwyX4hhk2ATV8AeM6o+n
2I75sf476+nqXRZYqFWqUBkggRqq5p2gwZdQP1QMjxRMrxU39lsU9Tjsy/TfroL1
3RThAZtQ/p0JMlwgKO6S6knuMMsJkxcuwqaM9ZwQUkNZFHtUhpR39LpczlJatdT8
BqJb4Sk/v/WOIFcLAvK//E2/koaA
-----END CERTIFICATE-----
Generated at Mon Jul 29 03:37:12 2024 by rpki-client on console-fra.rpki-client.org