Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1198EA1C022011EFB9BAB536017001B1.roa
File: 1198EA1C022011EFB9BAB536017001B1.roa (raw, json)
Hash identifier: tTj8Uba4pIE3+8Q/fuWogpcCvZ8IjSv8CMWSC5jy/3g=
Subject key identifier: FE:FF:FD:56:C7:C5:5B:51:2C:3D:88:28:B4:8D:8C:33:78:60:7D:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1198EA1C022011EFB9BAB536017001B1.roa
Signing time: Wed 24 Apr 2024 09:50:23 +0000
ROA not before: Wed 24 Apr 2024 09:50:20 +0000
ROA not after: Fri 03 May 2024 09:50:20 +0000
asID: 151800
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34000 (0x84d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 09:50:20 2024 GMT
Not After : May 3 09:50:20 2024 GMT
Subject: CN=6628d5df-79b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:fc:8e:69:0f:ea:ac:d6:1b:27:51:f0:50:
f7:89:3f:97:03:b3:c3:47:fb:c9:37:2e:f4:9b:3a:
6f:16:5d:7d:9e:68:4a:99:b9:ad:03:14:0b:47:0f:
56:01:7f:47:2c:0f:32:61:41:54:23:be:3e:e1:a9:
6f:18:60:c9:cc:a8:b0:78:7a:16:de:2a:07:f3:04:
e0:c0:34:11:3c:b7:09:2d:f9:04:a1:3d:ac:fb:c5:
a9:28:47:a6:e7:f0:80:f0:66:a7:a0:9e:1b:ac:a7:
2c:d4:8f:11:8c:bc:3e:02:65:9e:5e:60:ec:09:33:
81:45:30:ff:dd:41:29:9c:8b:9c:fc:ab:66:5a:f5:
94:64:37:e7:4a:3c:e5:2d:d1:f0:83:95:00:d0:f8:
f9:1a:23:22:9a:da:6c:38:46:16:20:7c:f3:33:13:
17:ae:d1:bb:fa:47:f5:c4:48:dd:67:7a:72:f3:3a:
d2:50:f6:4f:b5:e9:45:03:fd:3a:5a:65:8d:ea:d5:
08:a3:40:6c:e5:3d:c4:d4:fb:8f:d4:28:66:58:9f:
b6:17:0b:c6:69:33:63:f2:a9:12:16:b6:95:4c:17:
26:52:ec:a9:61:4f:f3:f2:55:5e:0d:8a:34:8f:e5:
bc:c2:76:10:92:f4:0e:fb:a1:42:64:53:8c:cb:ef:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:FD:56:C7:C5:5B:51:2C:3D:88:28:B4:8D:8C:33:78:60:7D:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1198EA1C022011EFB9BAB536017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:50:85:53:3c:18:13:58:6f:b0:e6:e0:0a:59:98:c7:fb:a4:
4a:b9:a3:0d:c4:50:e7:d8:c0:60:82:31:49:5a:fc:98:da:e2:
aa:b2:a5:ee:00:16:3f:29:1b:57:8e:5d:a3:00:5a:6e:76:17:
4d:86:43:f0:9b:16:8f:6f:c3:45:fc:43:f9:16:38:4f:59:44:
23:6a:6a:eb:b2:1a:6e:8f:5e:1e:9b:ad:b3:25:94:a7:d2:2d:
d5:78:86:19:09:4c:e3:1c:86:86:ef:4a:ee:1f:64:b8:4b:5b:
0b:3c:4f:5c:da:41:6a:ea:fd:28:f4:17:0e:b6:8c:66:fe:26:
94:af:cc:ed:ec:1e:14:17:a5:42:dd:3d:de:39:e2:72:dd:00:
b3:cd:e0:5a:46:e3:8a:6d:52:dd:05:ad:27:79:7d:76:e1:f7:
56:48:ab:0e:39:e6:c8:7f:c9:a4:13:72:aa:8f:c2:73:9f:55:
8f:ef:d6:58:1e:91:8f:c3:a5:02:e2:39:38:fc:39:09:c3:5d:
56:35:bf:6e:68:a5:22:5a:fb:5d:6a:e3:6a:29:07:40:b3:d2:
6a:31:db:70:fb:1c:cd:00:c6:d7:a1:de:7c:20:cf:9c:5a:7e:
b7:90:cc:f8:02:b5:f2:8b:be:57:f5:c0:9a:20:66:1d:28:88:
67:85:70:6f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAITQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI0MDk1MDIwWhcNMjQwNTAzMDk1MDIwWjAYMRYw
FAYDVQQDEw02NjI4ZDVkZi03OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt7D8jmkP6qzWGydR8FD3iT+XA7PDR/vJNy70mzpvFl19nmhKmbmtAxQL
Rw9WAX9HLA8yYUFUI74+4alvGGDJzKiweHoW3ioH8wTgwDQRPLcJLfkEoT2s+8Wp
KEem5/CA8GanoJ4brKcs1I8RjLw+AmWeXmDsCTOBRTD/3UEpnIuc/KtmWvWUZDfn
SjzlLdHwg5UA0Pj5GiMimtpsOEYWIHzzMxMXrtG7+kf1xEjdZ3py8zrSUPZPtelF
A/06WmWN6tUIo0Bs5T3E1PuP1ChmWJ+2FwvGaTNj8qkSFraVTBcmUuypYU/z8lVe
DYo0j+W8wnYQkvQO+6FCZFOMy++vcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP7/
/VbHxVtRLD2IKLSNjDN4YH3bMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMTk4RUExQzAyMjAxMUVGQjlCQUI1MzYwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcUgMA0GCSqGSIb3DQEBCwUA
A4IBAQCdUIVTPBgTWG+w5uAKWZjH+6RKuaMNxFDn2MBggjFJWvyY2uKqsqXuABY/
KRtXjl2jAFpudhdNhkPwmxaPb8NF/EP5FjhPWUQjamrrshpuj14em62zJZSn0i3V
eIYZCUzjHIaG70ruH2S4S1sLPE9c2kFq6v0o9BcOtoxm/iaUr8zt7B4UF6VC3T3e
OeJy3QCzzeBaRuOKbVLdBa0neX124fdWSKsOOebIf8mkE3Kqj8Jzn1WP79ZYHpGP
w6UC4jk4/DkJw11WNb9uaKUiWvtdauNqKQdAs9JqMdtw+xzNAMbXod58IM+cWn63
kMz4ArXyi75X9cCaIGYdKIhnhXBv
-----END CERTIFICATE-----
Generated at Sat May 4 03:15:33 2024 by rpki-client on console-fra.rpki-client.org