Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041B83AECE8511EF99A23A64762E951A.roa
File: 041B83AECE8511EF99A23A64762E951A.roa (raw, json)
Hash identifier: 8EJ4eSOyIBbVCu8hhI656WNIOn/QH40Av4I34tVC+sE=
Subject key identifier: 71:CF:E2:FB:A7:39:21:C6:CF:32:84:F1:D4:7A:84:4A:13:BE:D0:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041B83AECE8511EF99A23A64762E951A.roa
Signing time: Thu 09 Jan 2025 12:26:57 +0000
ROA not before: Thu 09 Jan 2025 12:26:53 +0000
ROA not after: Sat 01 Feb 2025 12:26:53 +0000
asID: 17561
IP address blocks: 45.203.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66500 (0x103c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:26:53 2025 GMT
Not After : Feb 1 12:26:53 2025 GMT
Subject: CN=677fc091-2d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:87:e2:0a:9d:9a:1b:7c:be:bd:cf:ac:93:
7b:dd:80:ff:62:f5:75:a8:5d:ed:31:5a:b6:0f:3b:
03:f6:29:ad:3b:75:d8:ca:0f:f4:b1:87:ef:9f:4c:
50:1d:ba:50:22:1e:b4:7a:db:1e:b6:8c:75:01:a9:
30:74:51:86:d5:66:d9:f4:46:39:4c:6d:f6:08:c2:
63:af:1d:21:00:16:47:d1:68:c5:d6:1e:0b:a8:4f:
fe:82:fc:48:83:91:73:b4:0b:49:a6:b3:97:23:71:
87:9e:fa:15:df:48:94:39:b6:58:bb:86:5b:29:f2:
e8:7e:0a:d2:c4:47:bf:be:1d:79:31:b6:8b:02:98:
50:d2:88:b7:c8:1c:21:40:6b:0e:66:14:7d:16:f7:
84:09:f6:4c:a6:98:6b:0b:5c:5e:d5:a5:44:0c:7b:
b7:c5:e1:6c:d0:60:55:63:88:84:3e:8a:62:59:c8:
df:5c:23:33:92:45:52:c2:ee:d2:9f:96:b0:50:53:
cb:ca:23:0b:52:f0:4d:81:bd:9a:db:cc:7a:cb:f6:
7b:48:6c:5a:dd:5c:d9:2f:03:20:c4:db:ad:39:4a:
51:91:cc:7c:7a:6c:e7:70:0b:84:39:22:02:30:dc:
2f:76:5e:31:6f:b3:e4:0a:d4:eb:8f:f6:f4:b0:85:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:E2:FB:A7:39:21:C6:CF:32:84:F1:D4:7A:84:4A:13:BE:D0:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041B83AECE8511EF99A23A64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:b5:45:ed:25:b1:1f:9d:47:1d:42:78:6a:29:77:43:9e:
b5:74:8d:9b:d7:fd:ba:86:c9:2d:31:f2:1c:3d:76:75:58:c7:
31:1d:e1:84:e1:7b:f9:22:03:d1:f9:12:fd:97:f8:02:7f:0f:
57:5c:72:e7:d0:79:53:2f:7e:67:94:2d:6a:2d:9a:fb:0e:35:
79:2c:e3:e2:2b:46:82:a8:f8:79:8b:2d:ee:54:c4:05:74:11:
d3:3a:d2:00:dc:28:0c:70:9b:74:47:81:16:7d:45:e6:b4:fa:
92:e3:78:23:41:3a:b6:07:d5:47:fb:9a:9e:92:9f:5b:20:f3:
ce:48:97:9d:98:5c:e8:43:db:23:69:36:42:16:0d:fc:88:3f:
fc:92:89:12:1c:39:a7:29:06:49:11:e1:46:20:64:2b:b4:e8:
18:70:a3:09:fa:36:ba:c0:e0:68:f2:01:3e:7c:2b:b2:51:e5:
92:b7:4e:26:6b:14:3d:be:72:b8:b6:48:1d:27:5e:2b:0a:39:
4d:0d:01:dd:44:c9:4c:1c:0f:f2:7d:e1:7b:28:ee:ad:65:1b:
2b:14:ed:c1:59:a6:95:62:c4:a2:3e:3a:51:da:9f:a3:62:0b:
cb:54:a7:a4:c2:be:c7:f4:ea:69:0a:d6:e8:e8:a2:03:09:ce:
61:ea:3e:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQPEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTIyNjUzWhcNMjUwMjAxMTIyNjUzWjAYMRYw
FAYDVQQDEw02NzdmYzA5MS0yZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn8CH4gqdmht8vr3PrJN73YD/YvV1qF3tMVq2DzsD9imtO3XYyg/0sYfv
n0xQHbpQIh60etsetox1AakwdFGG1WbZ9EY5TG32CMJjrx0hABZH0WjF1h4LqE/+
gvxIg5FztAtJprOXI3GHnvoV30iUObZYu4ZbKfLofgrSxEe/vh15MbaLAphQ0oi3
yBwhQGsOZhR9FveECfZMpphrC1xe1aVEDHu3xeFs0GBVY4iEPopiWcjfXCMzkkVS
wu7Sn5awUFPLyiMLUvBNgb2a28x6y/Z7SGxa3VzZLwMgxNutOUpRkcx8emzncAuE
OSICMNwvdl4xb7PkCtTrj/b0sIWr3QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHHP
4vunOSHGzzKE8dR6hEoTvtB0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDFCODNBRUNFODUxMUVGOTlBMjNBNjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcscMA0GCSqGSIb3DQEBCwUA
A4IBAQCkt7VF7SWxH51HHUJ4ail3Q561dI2b1/26hsktMfIcPXZ1WMcxHeGE4Xv5
IgPR+RL9l/gCfw9XXHLn0HlTL35nlC1qLZr7DjV5LOPiK0aCqPh5iy3uVMQFdBHT
OtIA3CgMcJt0R4EWfUXmtPqS43gjQTq2B9VH+5qekp9bIPPOSJedmFzoQ9sjaTZC
Fg38iD/8kokSHDmnKQZJEeFGIGQrtOgYcKMJ+ja6wOBo8gE+fCuyUeWSt04maxQ9
vnK4tkgdJ14rCjlNDQHdRMlMHA/yfeF7KO6tZRsrFO3BWaaVYsSiPjpR2p+jYgvL
VKekwr7H9OppCtbo6KIDCc5h6j4u
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:33 2025 by rpki-client