Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104D78F8CFFC11EFAF4C54B5762E951A.roa
File: 104D78F8CFFC11EFAF4C54B5762E951A.roa (raw, json)
Hash identifier: WtfMLHCxdCowgeAbCxOtP3ypQYbV4vf/XUKNDf9AYpg=
Subject key identifier: 90:CC:1E:EA:DD:EC:82:44:7B:B6:9E:73:19:45:CE:9A:A0:7F:94:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01058E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104D78F8CFFC11EFAF4C54B5762E951A.roa
Signing time: Sat 11 Jan 2025 09:11:38 +0000
ROA not before: Sat 11 Jan 2025 09:11:35 +0000
ROA not after: Fri 24 Jan 2025 09:11:35 +0000
asID: 39600
IP address blocks: 45.197.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66958 (0x1058e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 09:11:35 2025 GMT
Not After : Jan 24 09:11:35 2025 GMT
Subject: CN=678235ca-1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:28:45:4e:29:79:6a:2e:d7:c8:21:14:b5:
e4:63:cf:6d:73:53:49:12:2d:f7:95:ad:cf:db:3c:
30:d3:84:cf:c6:01:41:6b:06:ec:57:85:7f:d7:3d:
8f:60:f7:95:78:df:3a:db:32:5a:f0:a3:14:fd:75:
fa:86:c3:f8:20:c2:cb:02:0d:28:6e:4e:f9:c5:68:
f8:11:63:07:3e:cf:56:7d:53:a1:53:a2:8d:fa:5a:
b8:24:7a:5d:fe:4a:e3:54:f1:2a:f1:9c:2d:2e:21:
2a:6c:48:80:b2:85:4e:2d:28:d8:7b:de:64:1e:b9:
2b:4e:98:d3:03:89:7c:03:43:b6:0e:9c:bd:f8:67:
98:66:a8:bc:5b:c7:5a:e8:62:a7:d1:91:48:76:95:
52:f8:72:bc:80:16:40:41:f3:e8:7d:80:4c:75:4b:
7b:c1:b5:af:db:43:28:71:a6:05:a8:90:43:eb:0f:
da:16:ab:56:d9:52:db:52:96:a2:0e:7d:b6:58:e2:
f8:af:57:af:7b:29:a3:82:a2:f5:00:71:cc:01:9a:
73:83:6a:e6:d6:85:e5:75:5f:c5:c1:1b:98:07:d2:
04:94:48:ff:1b:62:1f:8c:58:98:24:30:4b:cf:f6:
5f:9b:68:fd:e8:48:f5:8b:d9:c0:5a:9c:22:9b:3b:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:1E:EA:DD:EC:82:44:7B:B6:9E:73:19:45:CE:9A:A0:7F:94:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104D78F8CFFC11EFAF4C54B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b5:73:0a:1b:a3:a9:55:be:26:ff:93:38:26:aa:08:5c:8d:
e7:b0:97:b5:9c:4d:e0:fb:4c:87:b2:cf:b7:06:57:72:63:dc:
e5:da:c9:f7:30:e7:5a:b1:0c:bc:86:82:58:d0:99:b5:aa:81:
2c:05:35:ac:1f:0e:fb:c3:d4:d9:15:ca:c7:e4:d8:79:bf:62:
14:9d:5e:fb:85:b7:a8:6c:1c:25:60:01:58:d9:fc:9a:5d:ad:
82:16:77:2d:d3:33:7e:1e:b6:b4:56:86:c9:06:4a:cd:3f:a8:
70:4c:58:94:2b:b2:af:09:a9:70:65:2f:32:75:8f:43:a2:78:
c9:f1:73:59:ae:8d:dc:b2:5b:a6:d8:50:22:27:d8:3b:4c:d4:
bf:1d:71:5e:f3:df:59:fd:5f:94:9a:8e:40:35:bb:15:12:fe:
ca:e9:c6:af:60:4e:d1:33:54:ae:18:ec:30:84:f1:93:d9:d6:
d9:f5:30:f9:17:44:c8:98:68:6c:3b:3e:3b:69:20:f4:10:d9:
4e:ed:62:b3:d9:18:56:29:88:7e:06:30:88:52:7b:40:ec:30:
ed:19:43:fe:d8:e2:87:3f:c6:14:e7:bb:e8:4c:08:56:35:7d:
66:ba:60:e9:c3:a1:4c:c9:bb:d3:e3:d1:8f:7f:85:d3:78:79:
a6:31:28:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQWOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMDkxMTM1WhcNMjUwMTI0MDkxMTM1WjAYMRYw
FAYDVQQDEw02NzgyMzVjYS0xNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+4oRU4peWou18ghFLXkY89tc1NJEi33la3P2zww04TPxgFBawbsV4V/
1z2PYPeVeN862zJa8KMU/XX6hsP4IMLLAg0obk75xWj4EWMHPs9WfVOhU6KN+lq4
JHpd/krjVPEq8ZwtLiEqbEiAsoVOLSjYe95kHrkrTpjTA4l8A0O2Dpy9+GeYZqi8
W8da6GKn0ZFIdpVS+HK8gBZAQfPofYBMdUt7wbWv20MocaYFqJBD6w/aFqtW2VLb
UpaiDn22WOL4r1eveymjgqL1AHHMAZpzg2rm1oXldV/FwRuYB9IElEj/G2IfjFiY
JDBLz/Zfm2j96Ej1i9nAWpwimzuUzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJDM
Hurd7IJEe7aecxlFzpqgf5RNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDRENzhGOENGRkMxMUVGQUY0QzU0QjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcUdMA0GCSqGSIb3DQEBCwUA
A4IBAQCOtXMKG6OpVb4m/5M4JqoIXI3nsJe1nE3g+0yHss+3BldyY9zl2sn3MOda
sQy8hoJY0Jm1qoEsBTWsHw77w9TZFcrH5Nh5v2IUnV77hbeobBwlYAFY2fyaXa2C
Fnct0zN+Hra0VobJBkrNP6hwTFiUK7KvCalwZS8ydY9DonjJ8XNZro3cslum2FAi
J9g7TNS/HXFe899Z/V+Umo5ANbsVEv7K6cavYE7RM1SuGOwwhPGT2dbZ9TD5F0TI
mGhsOz47aSD0ENlO7WKz2RhWKYh+BjCIUntA7DDtGUP+2OKHP8YU57voTAhWNX1m
umDpw6FMybvT49GPf4XTeHmmMShQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client