Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E4DD3CE156011EEA871A2534AD9E6FC.roa
File: 1E4DD3CE156011EEA871A2534AD9E6FC.roa (raw, json)
Hash identifier: tV7JAQdJyaISOpmradvP515o//c+CVgYZTdEf0limds=
Subject key identifier: 04:19:8C:23:73:53:E8:CE:43:8E:E4:C3:1B:A7:38:76:DB:3B:AD:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E4DD3CE156011EEA871A2534AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:01:47 +0000
ROA not before: Wed 28 Jun 2023 03:01:43 +0000
ROA not after: Wed 01 May 2024 03:01:43 +0000
asID: 140227
IP address blocks: 45.207.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11638 (0x2d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:01:43 2023 GMT
Not After : May 1 03:01:43 2024 GMT
Subject: CN=649ba29a-3330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:b6:f0:61:7e:58:aa:4c:0c:ec:f1:0d:78:
99:cc:8f:03:27:8d:95:81:63:0f:e3:91:c1:7f:9d:
03:5a:bd:12:01:e8:82:66:76:57:bc:5e:93:5e:62:
2a:fe:26:d0:b8:44:5d:72:8a:ca:1e:fa:98:d5:c0:
c6:87:6f:b1:7b:38:3e:21:d1:ea:e2:43:9c:8d:53:
5d:3c:9c:6f:01:76:ef:f1:b7:bb:5d:84:bd:f4:95:
24:75:2c:7b:b9:d0:32:2f:68:4f:e1:d4:d5:56:90:
85:e8:0e:01:a0:26:84:bf:98:74:eb:e5:5f:cb:59:
e2:63:46:e3:6c:b7:66:19:61:6f:ef:ab:b7:a9:71:
88:3d:86:b9:cc:88:e9:89:96:00:6d:b3:c0:ff:20:
ee:9a:30:71:00:4b:81:1c:9f:db:de:77:d0:31:0e:
8e:a0:e7:70:3e:f4:59:d0:d3:40:b3:f9:09:d3:5e:
e5:19:ee:e9:fa:ea:eb:25:81:35:50:58:56:66:5b:
ab:ff:f7:70:86:79:96:0d:2d:d7:f7:7f:b2:69:ad:
e7:93:92:e3:21:04:18:0f:2d:92:36:f5:e6:2b:07:
68:64:f4:03:18:38:8c:0c:3b:f0:ef:a2:41:c9:2c:
3f:98:c1:33:6d:4e:fd:c9:c0:75:4d:24:6c:7c:05:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:8C:23:73:53:E8:CE:43:8E:E4:C3:1B:A7:38:76:DB:3B:AD:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E4DD3CE156011EEA871A2534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f9:9a:7f:9d:74:00:14:6a:f8:fb:98:a1:bc:db:a6:c9:d9:
f8:fa:56:b1:e2:75:49:96:0b:3b:65:09:f3:e4:bc:ff:2f:52:
64:6d:23:d6:73:dd:08:6e:8e:4b:44:65:0a:f7:35:8e:27:66:
a0:98:5d:40:53:e9:91:10:4f:37:41:a2:97:d7:ae:15:ad:6e:
2f:1d:89:8f:c7:c5:06:5a:32:ec:64:54:6b:ee:41:1d:60:d8:
e8:5d:29:14:76:5d:12:0d:df:71:ff:51:71:6a:57:c4:cd:05:
d5:d8:51:46:f1:c6:e3:c0:a5:70:8f:eb:86:ca:21:28:6b:e5:
a8:c8:93:d2:a3:eb:fd:08:d2:20:e0:ac:d2:b9:03:70:16:37:
ac:4a:25:1a:66:35:09:d4:34:df:09:f7:2d:39:0a:19:fe:0e:
76:88:49:6e:62:a9:d0:94:e5:cf:67:96:84:03:4e:33:f4:72:
ea:63:7a:e3:65:2c:21:3c:8d:d2:22:f3:49:46:7a:99:ad:ce:
d2:b9:94:ae:6c:c5:2e:2a:3c:17:ca:39:51:47:a3:96:c1:db:
c4:3d:32:67:04:4a:d1:51:73:3e:2c:b5:cc:42:44:cf:9f:a9:
88:0d:c0:af:86:e9:6f:6d:26:a9:06:db:ab:af:80:11:55:1d:
4b:aa:2b:16
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLXYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MjgwMzAxNDNaFw0yNDA1MDEwMzAxNDNaMBgxFjAU
BgNVBAMTDTY0OWJhMjlhLTMzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyhbbwYX5YqkwM7PENeJnMjwMnjZWBYw/jkcF/nQNavRIB6IJmdle8XpNe
Yir+JtC4RF1yisoe+pjVwMaHb7F7OD4h0eriQ5yNU108nG8Bdu/xt7tdhL30lSR1
LHu50DIvaE/h1NVWkIXoDgGgJoS/mHTr5V/LWeJjRuNst2YZYW/vq7epcYg9hrnM
iOmJlgBts8D/IO6aMHEAS4Ecn9ved9AxDo6g53A+9FnQ00Cz+QnTXuUZ7un66usl
gTVQWFZmW6v/93CGeZYNLdf3f7JpreeTkuMhBBgPLZI29eYrB2hk9AMYOIwMO/Dv
okHJLD+YwTNtTv3JwHVNJGx8BTnbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUBBmM
I3NT6M5DjuTDG6c4dts7rcswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFFNEREM0NFMTU2MDExRUVBODcxQTI1MzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzw4wDQYJKoZIhvcNAQELBQAD
ggEBAJ/5mn+ddAAUavj7mKG826bJ2fj6VrHidUmWCztlCfPkvP8vUmRtI9Zz3Qhu
jktEZQr3NY4nZqCYXUBT6ZEQTzdBopfXrhWtbi8diY/HxQZaMuxkVGvuQR1g2Ohd
KRR2XRIN33H/UXFqV8TNBdXYUUbxxuPApXCP64bKIShr5ajIk9Kj6/0I0iDgrNK5
A3AWN6xKJRpmNQnUNN8J9y05Chn+DnaISW5iqdCU5c9nloQDTjP0cupjeuNlLCE8
jdIi80lGepmtztK5lK5sxS4qPBfKOVFHo5bB28Q9MmcEStFRcz4stcxCRM+fqYgN
wK+G6W9tJqkG26uvgBFVHUuqKxY=
-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org