Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B9945EFCF811EFBCE8258A762E951A.roa
File: 21B9945EFCF811EFBCE8258A762E951A.roa (raw, json)
Hash identifier: JBRKwHw/QXMzN2aebR49P49UQ7qNGJ5yiD4IOrW3/J0=
Subject key identifier: 9A:ED:A5:85:A3:E3:DE:35:AD:06:28:E4:63:70:D2:6B:6F:F0:ED:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01448D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B9945EFCF811EFBCE8258A762E951A.roa
Signing time: Sun 09 Mar 2025 15:06:52 +0000
ROA not before: Sun 09 Mar 2025 15:06:48 +0000
ROA not after: Sat 29 Mar 2025 15:06:48 +0000
asID: 202662
IP address blocks: 45.196.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83085 (0x1448d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 15:06:48 2025 GMT
Not After : Mar 29 15:06:48 2025 GMT
Subject: CN=67cdae8c-843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:64:a3:af:91:a2:7a:f0:67:91:52:e4:cb:
eb:c5:8e:6f:c3:d3:50:11:91:82:4b:4f:de:b1:09:
7b:12:d0:f7:43:0f:16:6a:9b:ea:47:81:54:15:13:
70:d6:6d:66:6e:06:46:70:3b:db:a1:d1:af:a8:53:
36:39:ee:ac:3e:7e:2c:2c:7c:37:1a:be:cc:f0:a6:
19:4a:43:37:42:a3:13:31:0c:8b:cc:9b:80:43:e8:
81:c6:3e:22:49:26:98:c4:71:71:d8:fe:c8:4c:25:
77:8e:7e:a6:43:97:31:68:36:e3:12:cd:85:ee:2e:
5e:d5:7e:c3:c0:72:ac:d5:7a:8d:c0:41:c8:86:48:
f9:36:f3:7f:c6:27:b2:55:65:fe:20:8b:d5:95:d1:
2f:8f:b5:46:4f:34:93:11:22:73:05:01:8a:fa:d0:
55:31:3e:ac:b6:ef:bc:d0:66:93:0e:14:85:a1:f5:
a8:4a:4c:71:cd:cd:53:51:dd:5f:9b:3a:df:b0:d8:
91:ee:2a:a5:46:89:1f:1b:ca:6b:8e:44:3f:75:79:
3c:a5:e0:8d:3d:13:a4:94:1c:30:3d:ac:e0:84:50:
e8:65:07:ae:6d:71:b8:eb:18:ce:2f:61:75:f6:84:
55:6f:6d:32:f6:be:60:91:73:dc:0a:95:34:99:d4:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:A5:85:A3:E3:DE:35:AD:06:28:E4:63:70:D2:6B:6F:F0:ED:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21B9945EFCF811EFBCE8258A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:74:88:71:13:6f:3a:91:08:1d:f0:64:98:44:92:c7:10:
30:4a:b8:8b:45:02:52:42:df:91:e4:93:b4:54:4c:04:f2:64:
01:5a:52:e5:ca:04:62:68:ad:79:82:25:ff:a9:19:78:62:1b:
ed:5a:b0:c4:56:f6:c5:d5:28:22:5a:4a:27:7f:9d:50:2f:35:
7b:a1:e9:9e:10:d3:89:ae:1e:74:44:2b:3d:28:ff:1e:de:26:
29:98:be:c4:6c:b2:8c:56:9b:bb:ba:9f:f6:92:4e:5c:c4:b1:
3b:53:87:4b:2e:24:6f:c4:13:7a:df:db:67:98:18:d9:bf:b9:
d5:33:98:2d:8a:03:f9:ed:af:3f:95:61:98:ae:90:8a:b1:e5:
fa:0b:14:7f:4f:25:ae:ce:5b:eb:28:df:83:10:52:5a:09:df:
2e:76:d5:5f:89:53:43:f6:3a:15:d8:cc:41:23:af:a2:49:44:
7c:01:29:02:96:9d:4c:57:0e:97:53:9d:80:b5:c6:82:cd:1e:
d0:18:b5:32:8c:1b:5d:0a:94:92:b4:ed:29:ad:8b:53:ec:98:
24:5d:59:47:f7:7d:8e:55:91:34:e3:d3:d2:82:73:39:4e:6e:
15:f8:6a:df:c3:bd:ec:5b:94:34:36:eb:a3:b3:a4:9f:00:42:
5e:35:49:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUSNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA5MTUwNjQ4WhcNMjUwMzI5MTUwNjQ4WjAYMRYw
FAYDVQQDEw02N2NkYWU4Yy04NDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnWxko6+RonrwZ5FS5MvrxY5vw9NQEZGCS0/esQl7EtD3Qw8WapvqR4FU
FRNw1m1mbgZGcDvbodGvqFM2Oe6sPn4sLHw3Gr7M8KYZSkM3QqMTMQyLzJuAQ+iB
xj4iSSaYxHFx2P7ITCV3jn6mQ5cxaDbjEs2F7i5e1X7DwHKs1XqNwEHIhkj5NvN/
xieyVWX+IIvVldEvj7VGTzSTESJzBQGK+tBVMT6stu+80GaTDhSFofWoSkxxzc1T
Ud1fmzrfsNiR7iqlRokfG8prjkQ/dXk8peCNPROklBwwPazghFDoZQeubXG46xjO
L2F19oRVb20y9r5gkXPcCpU0mdQUoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJrt
pYWj4941rQYo5GNw0mtv8O1AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMUI5OTQ1RUZDRjgxMUVGQkNFODI1OEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcT4MA0GCSqGSIb3DQEBCwUA
A4IBAQB+vnSIcRNvOpEIHfBkmESSxxAwSriLRQJSQt+R5JO0VEwE8mQBWlLlygRi
aK15giX/qRl4YhvtWrDEVvbF1SgiWkonf51QLzV7oemeENOJrh50RCs9KP8e3iYp
mL7EbLKMVpu7up/2kk5cxLE7U4dLLiRvxBN639tnmBjZv7nVM5gtigP57a8/lWGY
rpCKseX6CxR/TyWuzlvrKN+DEFJaCd8udtVfiVND9joV2MxBI6+iSUR8ASkClp1M
Vw6XU52AtcaCzR7QGLUyjBtdCpSStO0prYtT7JgkXVlH932OVZE049PSgnM5Tm4V
+Grfw73sW5Q0Nuujs6SfAEJeNUm2
-----END CERTIFICATE-----
Generated at Fri May 9 12:21:11 2025 by rpki-client