Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFB769CCE8A11EFA41F4984762E951A.roa
File: 1FFB769CCE8A11EFA41F4984762E951A.roa (raw, json)
Hash identifier: v2MhxzpDbTJLI/DG0dD/InPMeuxMIh20kC5YpkkbpRk=
Subject key identifier: D1:45:36:FE:04:91:80:81:41:8E:4C:D6:CA:4E:39:69:A5:62:92:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFB769CCE8A11EFA41F4984762E951A.roa
Signing time: Thu 09 Jan 2025 13:03:31 +0000
ROA not before: Thu 09 Jan 2025 13:03:27 +0000
ROA not after: Tue 21 Jan 2025 13:03:27 +0000
asID: 142032
IP address blocks: 45.192.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66534 (0x103e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 13:03:27 2025 GMT
Not After : Jan 21 13:03:27 2025 GMT
Subject: CN=677fc923-45dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:38:52:a6:e7:42:e0:56:16:f8:74:93:01:
9e:38:62:78:09:4c:7c:d0:8c:19:8d:47:90:e5:1b:
87:61:b8:26:fb:f3:3e:d3:2a:ef:97:8a:fa:16:59:
9a:51:ea:7b:2f:1a:86:f7:d9:39:48:b9:fb:17:d3:
89:24:45:61:be:16:3c:3f:4d:bb:2a:b9:0d:fa:9a:
a3:7a:c4:5f:f8:f4:94:42:d3:e9:cf:71:2e:f6:1b:
24:72:bd:e9:09:fa:91:e7:c4:c7:f1:a2:74:65:68:
7a:0e:8f:59:bb:62:28:15:71:92:86:ab:98:24:9f:
77:e3:27:37:f5:8e:ba:98:3a:36:d2:23:c4:bf:d1:
1e:8d:62:39:32:ff:99:e3:f2:0c:8f:07:2a:4b:44:
54:0f:f1:cc:d9:15:ad:38:80:d4:9d:01:d5:66:e0:
1c:7a:07:c0:6b:d0:31:49:14:ae:64:88:34:ef:73:
d4:d3:34:1a:0e:e9:2c:13:e4:3a:17:30:81:dd:52:
97:ab:13:91:86:0a:89:87:f1:6f:7a:e4:04:2c:b0:
5a:65:22:7e:03:5a:1e:f0:73:13:4c:4f:37:63:61:
b7:41:1c:2d:0b:3b:4c:88:84:4a:dd:a1:b0:1e:16:
8b:c3:7f:d5:41:80:29:fb:9f:48:7b:d9:f4:9c:99:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:36:FE:04:91:80:81:41:8E:4C:D6:CA:4E:39:69:A5:62:92:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFB769CCE8A11EFA41F4984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:12:bd:77:87:89:19:d8:f8:19:69:e4:fe:b7:4c:3d:6f:66:
62:74:88:97:82:76:6c:38:6b:71:87:a7:78:ef:2d:2a:b4:4a:
64:34:b4:7e:0d:cf:02:0d:72:8d:45:3e:2c:7e:5b:68:04:28:
6b:6a:bd:0e:55:97:58:00:9d:05:20:f3:ba:ab:3d:45:39:1d:
c7:0c:71:2b:e3:0d:88:51:9d:dc:69:e6:d0:dd:57:e9:34:72:
ec:ed:8b:81:2c:dc:a3:55:f6:46:48:d7:36:12:9e:58:41:82:
bd:88:d5:d9:3a:04:75:83:ef:df:d4:42:82:08:57:2e:a6:48:
6a:b2:f1:3a:93:5d:b7:ee:62:96:65:9f:ab:f1:8f:15:82:5b:
80:de:11:cd:1d:ba:53:63:7b:cb:83:5d:e9:46:6e:d4:75:b3:
91:f5:d6:ab:dd:98:38:81:9b:ce:5a:1b:15:c2:bd:69:95:97:
b9:27:00:21:0f:90:f8:5e:2c:d7:eb:f6:06:14:57:12:15:3a:
d1:13:48:9d:da:5f:ca:67:16:b7:87:2e:2d:23:a7:e6:ab:a5:
db:8a:3f:04:cb:cb:e0:9a:83:92:ab:83:ac:16:4f:17:8b:d6:
8a:fa:9f:c9:d1:90:4a:81:5e:c0:8d:35:97:0e:c3:4d:2f:5e:
43:f5:e8:ef
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQPmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTMwMzI3WhcNMjUwMTIxMTMwMzI3WjAYMRYw
FAYDVQQDEw02NzdmYzkyMy00NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx4M4UqbnQuBWFvh0kwGeOGJ4CUx80IwZjUeQ5RuHYbgm+/M+0yrvl4r6
FlmaUep7LxqG99k5SLn7F9OJJEVhvhY8P027KrkN+pqjesRf+PSUQtPpz3Eu9hsk
cr3pCfqR58TH8aJ0ZWh6Do9Zu2IoFXGShquYJJ934yc39Y66mDo20iPEv9EejWI5
Mv+Z4/IMjwcqS0RUD/HM2RWtOIDUnQHVZuAcegfAa9AxSRSuZIg073PU0zQaDuks
E+Q6FzCB3VKXqxORhgqJh/FveuQELLBaZSJ+A1oe8HMTTE83Y2G3QRwtCztMiIRK
3aGwHhaLw3/VQYAp+59Ie9n0nJl7ewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNFF
Nv4EkYCBQY5M1spOOWmlYpI2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRkZCNzY5Q0NFOEExMUVGQTQxRjQ5ODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcBkMA0GCSqGSIb3DQEBCwUA
A4IBAQCtEr13h4kZ2PgZaeT+t0w9b2ZidIiXgnZsOGtxh6d47y0qtEpkNLR+Dc8C
DXKNRT4sfltoBChrar0OVZdYAJ0FIPO6qz1FOR3HDHEr4w2IUZ3caebQ3VfpNHLs
7YuBLNyjVfZGSNc2Ep5YQYK9iNXZOgR1g+/f1EKCCFcupkhqsvE6k1237mKWZZ+r
8Y8VgluA3hHNHbpTY3vLg13pRm7UdbOR9dar3Zg4gZvOWhsVwr1plZe5JwAhD5D4
XizX6/YGFFcSFTrRE0id2l/KZxa3hy4tI6fmq6Xbij8Ey8vgmoOSq4OsFk8Xi9aK
+p/J0ZBKgV7AjTWXDsNNL15D9ejv
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:46 2025 by rpki-client