Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBC4D20F5BD11EFBA9B5C8E762E951A.roa
File: 1DBC4D20F5BD11EFBA9B5C8E762E951A.roa (raw, json)
Hash identifier: ArkceORaoq3W7axGHeUX9JhwWhGn21u0BAs0Zw0oiWE=
Subject key identifier: 45:4B:D0:6A:A1:D7:88:EA:C6:DF:F5:9F:3B:B5:34:DB:41:45:E1:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBC4D20F5BD11EFBA9B5C8E762E951A.roa
Signing time: Fri 28 Feb 2025 10:16:47 +0000
ROA not before: Fri 28 Feb 2025 10:16:43 +0000
ROA not after: Sun 30 Mar 2025 10:16:43 +0000
asID: 138995
IP address blocks: 45.192.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81159 (0x13d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:16:43 2025 GMT
Not After : Mar 30 10:16:43 2025 GMT
Subject: CN=67c18d0f-e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:9b:b4:54:f3:a2:f9:47:ad:21:89:d3:2a:
81:3c:cc:99:94:5c:ad:62:ee:bc:3a:e6:69:fb:cd:
ea:ce:77:dd:46:b2:ac:26:55:a9:af:b9:43:bd:f2:
96:f4:61:b1:d0:aa:9b:58:ca:da:96:29:59:23:d9:
04:16:34:9d:86:e4:86:7a:c6:2c:e2:10:04:68:cf:
f4:ff:77:37:67:67:8d:16:23:41:17:67:d4:27:04:
31:eb:91:f0:27:a8:f7:15:3f:53:50:59:e4:33:d6:
29:f8:d9:ae:29:50:49:4a:10:6e:3d:8e:e8:cd:05:
a8:45:ef:f7:8c:3e:18:da:76:44:4c:23:17:b7:29:
03:c0:7d:64:1b:7c:d4:e1:19:9e:f0:e9:e9:e8:f1:
14:d0:38:67:b6:48:d9:5f:98:b4:19:04:d8:25:ef:
0c:2b:00:6c:d9:fa:f0:da:34:92:37:00:16:ca:1c:
1b:44:54:17:5a:9e:70:06:83:b9:27:8f:6c:b7:c5:
44:b6:35:24:fa:cf:9f:13:b3:55:31:6d:05:fd:c2:
65:c8:c8:87:cf:ea:39:88:bf:e5:c4:d2:fd:3e:39:
f2:25:2f:6c:87:48:54:00:25:10:a4:e3:01:41:76:
32:c3:df:96:0c:92:d9:87:64:b4:87:30:e8:62:45:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:D0:6A:A1:D7:88:EA:C6:DF:F5:9F:3B:B5:34:DB:41:45:E1:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DBC4D20F5BD11EFBA9B5C8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:dc:b4:17:7e:9c:d1:4d:6b:37:68:ea:d1:db:e1:11:ac:35:
9d:a1:00:57:78:d4:17:62:a7:5c:a6:9f:a3:f9:3f:f9:10:92:
9f:45:25:49:72:40:6f:3e:f8:8d:26:b1:a7:bf:f1:d0:8c:b4:
aa:39:af:49:ef:68:d0:ad:a1:2a:29:06:25:c1:11:00:9c:cb:
9f:a4:6e:29:5a:04:37:ae:f8:61:08:2e:5d:77:04:cc:20:17:
b3:1a:cf:76:07:60:56:c0:20:fe:db:a1:c1:0b:d7:a5:69:d8:
b0:f6:38:9b:b6:0c:12:e4:54:ac:09:fe:9f:0e:3c:49:5f:a8:
65:03:ac:26:81:47:5e:2d:e6:d8:09:c0:c9:b0:28:03:35:b0:
1f:b7:93:5b:9f:3d:00:4a:ee:cf:73:59:08:a1:a9:a0:90:52:
87:eb:eb:53:52:d0:bb:28:fc:d0:4c:c6:01:d7:c4:82:3b:32:
a1:00:bb:ed:c9:4b:f6:0c:c2:00:f0:8a:a4:3c:46:46:a3:69:
2c:9b:8a:7c:41:a0:67:8f:1e:f7:e3:12:98:05:8e:cd:25:b7:
7e:0c:2b:ac:3f:67:ba:24:39:ef:b5:ed:7a:24:ce:29:fc:96:
b1:0b:f7:84:a2:3d:c5:da:7f:2c:16:43:9a:37:f2:1b:54:eb:
8d:1b:61:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT0HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MTAxNjQzWhcNMjUwMzMwMTAxNjQzWjAYMRYw
FAYDVQQDEw02N2MxOGQwZi1lMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApwWbtFTzovlHrSGJ0yqBPMyZlFytYu68OuZp+83qznfdRrKsJlWpr7lD
vfKW9GGx0KqbWMralilZI9kEFjSdhuSGesYs4hAEaM/0/3c3Z2eNFiNBF2fUJwQx
65HwJ6j3FT9TUFnkM9Yp+NmuKVBJShBuPY7ozQWoRe/3jD4Y2nZETCMXtykDwH1k
G3zU4Rme8Onp6PEU0DhntkjZX5i0GQTYJe8MKwBs2frw2jSSNwAWyhwbRFQXWp5w
BoO5J49st8VEtjUk+s+fE7NVMW0F/cJlyMiHz+o5iL/lxNL9PjnyJS9sh0hUACUQ
pOMBQXYyw9+WDJLZh2S0hzDoYkU9awIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEVL
0Gqh14jqxt/1nzu1NNtBReHdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xREJDNEQyMEY1QkQxMUVGQkE5QjVDOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDiMA0GCSqGSIb3DQEBCwUA
A4IBAQC63LQXfpzRTWs3aOrR2+ERrDWdoQBXeNQXYqdcpp+j+T/5EJKfRSVJckBv
PviNJrGnv/HQjLSqOa9J72jQraEqKQYlwREAnMufpG4pWgQ3rvhhCC5ddwTMIBez
Gs92B2BWwCD+26HBC9eladiw9jibtgwS5FSsCf6fDjxJX6hlA6wmgUdeLebYCcDJ
sCgDNbAft5Nbnz0ASu7Pc1kIoamgkFKH6+tTUtC7KPzQTMYB18SCOzKhALvtyUv2
DMIA8IqkPEZGo2ksm4p8QaBnjx734xKYBY7NJbd+DCusP2e6JDnvte16JM4p/Jax
C/eEoj3F2n8sFkOaN/IbVOuNG2FA
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:24 2025 by rpki-client