Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081A96BEFBA111EEB7FB9946017001B1.roa
File: 081A96BEFBA111EEB7FB9946017001B1.roa (raw, json)
Hash identifier: 6bza4Ych4wlNhsPZEJcEnVhCfYo0GK5IJQNd44XpbOc=
Subject key identifier: EB:DD:80:4C:8C:B4:B7:D9:8D:60:9A:32:0F:CA:BB:F9:1A:A4:87:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081A96BEFBA111EEB7FB9946017001B1.roa
Signing time: Tue 16 Apr 2024 03:25:54 +0000
ROA not before: Tue 16 Apr 2024 03:25:51 +0000
ROA not after: Wed 24 Apr 2024 03:25:51 +0000
asID: 136950
IP address blocks: 45.195.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33485 (0x82cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 03:25:51 2024 GMT
Not After : Apr 24 03:25:51 2024 GMT
Subject: CN=661defc2-5a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:20:9d:c6:5d:a1:47:db:1e:22:cc:9a:a6:
be:7a:52:bc:5f:38:a2:80:99:02:d2:78:f6:28:bb:
2b:c6:3a:82:01:4b:d1:6a:cf:1b:d5:80:85:c5:d4:
04:29:6f:78:99:3b:6a:ae:90:6e:bb:42:87:d3:2b:
da:ab:23:1d:ff:91:ac:6d:fb:70:c2:d1:75:3e:ac:
0e:c7:81:a0:c0:a1:dd:8c:05:6d:4c:9d:e0:19:ca:
47:5e:8e:b2:3f:c2:86:fc:d1:12:49:f7:b5:12:2f:
58:e2:03:29:b8:8a:83:c2:24:49:f7:cc:ee:06:c5:
17:a8:f7:ff:33:e4:6f:79:e7:63:87:18:f1:c0:9c:
8a:58:29:9c:17:2f:4f:e4:29:ca:a0:23:0c:7b:7f:
07:73:87:3e:8a:49:bf:a2:03:b1:86:85:b9:cc:32:
3a:4a:f9:46:28:e3:43:7a:71:ab:14:86:8d:73:62:
e7:48:0f:c7:56:06:ea:30:a8:42:d9:dd:c7:22:ba:
e4:c0:09:bd:07:a4:ef:c5:4b:26:b1:f5:ef:75:c5:
d7:91:94:4d:cd:83:1d:1f:e3:8f:51:7f:dd:b4:e5:
f4:a2:28:b9:17:8d:39:10:ed:fd:a2:9b:1c:b7:4f:
6d:cc:57:9e:cc:eb:6d:ef:c9:0e:0a:bf:d6:fb:34:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:80:4C:8C:B4:B7:D9:8D:60:9A:32:0F:CA:BB:F9:1A:A4:87:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081A96BEFBA111EEB7FB9946017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.204.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:a6:b9:c9:f9:b7:e3:d2:cf:e7:6c:33:e2:2b:98:9b:3f:
77:99:f8:c2:34:67:4f:bb:81:6b:b0:40:87:52:15:c1:51:80:
75:34:7f:30:84:1b:7c:9d:0c:1e:cc:97:28:83:22:56:df:75:
a2:15:78:11:ee:e3:a2:40:73:9d:3e:4c:b3:4a:eb:cf:a9:e0:
94:79:31:3b:f6:37:fe:1a:33:bd:9c:59:a5:a7:84:65:00:57:
eb:85:98:bb:30:8e:6b:4d:45:1f:64:a6:67:45:56:f6:7c:99:
a3:7c:75:4f:95:07:07:55:65:20:a3:f0:6a:08:0f:2e:d9:df:
bc:5d:48:b9:4e:c0:43:da:bd:a2:b1:b7:f1:db:f0:f2:d5:4b:
62:b5:62:03:c9:5b:81:c2:77:bb:4c:6a:9a:d7:ae:6f:fd:5f:
87:04:fe:8e:1b:e5:77:11:d7:8d:b5:03:4a:d8:8e:f4:71:a9:
06:7f:2b:18:72:e5:69:61:98:25:d9:a8:b7:19:71:54:2d:fe:
4d:3b:78:78:5f:e7:16:da:e6:22:27:97:d5:e4:b8:1d:de:a7:
62:36:3b:6c:af:6d:fa:f6:8f:a4:db:03:54:29:07:bc:a9:f0:
4e:a2:46:ed:d6:aa:a1:07:fa:fc:17:9c:e9:b0:72:ef:12:a8:
fa:0f:f1:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAILNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE2MDMyNTUxWhcNMjQwNDI0MDMyNTUxWjAYMRYw
FAYDVQQDEw02NjFkZWZjMi01YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1B4gncZdoUfbHiLMmqa+elK8XziigJkC0nj2KLsrxjqCAUvRas8b1YCF
xdQEKW94mTtqrpBuu0KH0yvaqyMd/5GsbftwwtF1PqwOx4GgwKHdjAVtTJ3gGcpH
Xo6yP8KG/NESSfe1Ei9Y4gMpuIqDwiRJ98zuBsUXqPf/M+RveedjhxjxwJyKWCmc
Fy9P5CnKoCMMe38Hc4c+ikm/ogOxhoW5zDI6SvlGKONDenGrFIaNc2LnSA/HVgbq
MKhC2d3HIrrkwAm9B6TvxUsmsfXvdcXXkZRNzYMdH+OPUX/dtOX0oii5F405EO39
opsct09tzFeezOtt78kOCr/W+zR10QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOvd
gEyMtLfZjWCaMg/Ku/kapIf7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODFBOTZCRUZCQTExMUVFQjdGQjk5NDYwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPMMA0GCSqGSIb3DQEBCwUA
A4IBAQBnj6a5yfm349LP52wz4iuYmz93mfjCNGdPu4FrsECHUhXBUYB1NH8whBt8
nQwezJcogyJW33WiFXgR7uOiQHOdPkyzSuvPqeCUeTE79jf+GjO9nFmlp4RlAFfr
hZi7MI5rTUUfZKZnRVb2fJmjfHVPlQcHVWUgo/BqCA8u2d+8XUi5TsBD2r2isbfx
2/Dy1UtitWIDyVuBwne7TGqa165v/V+HBP6OG+V3EdeNtQNK2I70cakGfysYcuVp
YZgl2ai3GXFULf5NO3h4X+cW2uYiJ5fV5Lgd3qdiNjtsr2369o+k2wNUKQe8qfBO
okbt1qqhB/r8F5zpsHLvEqj6D/Fb
-----END CERTIFICATE-----
Generated at Wed Apr 24 11:55:18 2024 by rpki-client on console-fra.rpki-client.org