Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC42C8862C311EEB238392A4AD9E6FC.roa
File: 2AC42C8862C311EEB238392A4AD9E6FC.roa (raw, json)
Hash identifier: yAY1TWmoC7w0cXChDLcZFsX6b+eC0zySAdsWMPoMSFQ=
Subject key identifier: 51:C8:BC:B9:0F:DD:9F:06:E1:97:7F:FE:B3:F6:E3:DE:EF:F2:44:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3D6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC42C8862C311EEB238392A4AD9E6FC.roa
Signing time: Wed 04 Oct 2023 14:34:47 +0000
ROA not before: Wed 04 Oct 2023 14:34:44 +0000
ROA not after: Sat 14 Oct 2023 14:34:44 +0000
asID: 9009
IP address blocks: 45.192.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15725 (0x3d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 4 14:34:44 2023 GMT
Not After : Oct 14 14:34:44 2023 GMT
Subject: CN=651d7807-d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:43:80:2b:bd:20:dd:1b:e4:57:b4:1d:b5:
bd:01:fe:60:18:2e:a7:58:e3:a5:fe:cf:ee:35:91:
a0:dd:ac:ca:35:f9:5d:0f:08:98:2f:34:e8:59:97:
ee:4d:46:97:c8:23:8e:19:8e:42:44:13:0d:47:76:
6a:05:69:6c:35:f5:a1:9b:22:39:f4:99:33:c7:34:
4f:94:15:df:a6:90:aa:38:19:4c:7c:67:a5:4a:28:
76:53:53:3b:62:12:e3:73:40:ed:74:89:0f:47:6a:
57:1c:26:5b:e9:11:36:90:e7:66:0b:3e:2f:d1:95:
45:cc:db:6f:c0:1a:4a:f3:a5:e5:9a:b4:59:7b:16:
9b:c8:17:81:f9:85:d6:5d:ef:19:e5:78:2c:52:c4:
37:27:5b:48:7b:2c:75:80:08:a4:4a:2f:b6:e1:6a:
73:c7:55:85:01:a2:df:b6:ec:92:b5:8b:a3:ca:93:
b1:71:12:8c:e1:7a:83:39:c2:00:24:23:b0:1e:54:
bb:a0:d2:f5:bf:05:48:12:36:81:04:c1:11:c0:7f:
62:63:66:85:f3:09:b2:54:72:c3:18:1a:b4:d2:7b:
cf:a2:45:4c:48:dc:f9:8b:be:bb:4b:a6:33:68:9f:
fd:f9:d1:b2:02:ee:91:34:4b:b0:58:ba:38:8f:f7:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C8:BC:B9:0F:DD:9F:06:E1:97:7F:FE:B3:F6:E3:DE:EF:F2:44:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AC42C8862C311EEB238392A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.142.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e0:c9:cf:ef:14:6b:31:a5:cc:dd:26:e2:d4:4c:27:24:ed:
81:ab:94:0e:09:77:37:8c:79:3e:86:ff:24:d9:78:c7:31:be:
9b:d7:ba:ca:ae:fd:f4:f4:77:71:4e:08:c4:e3:17:4a:26:cd:
d0:86:9c:4d:4c:2c:fd:33:03:3d:3d:ac:89:24:c2:e3:b9:5c:
72:e7:39:cd:e3:88:18:df:51:14:12:8c:7f:f0:a1:3e:aa:2a:
81:12:4f:0c:dc:08:73:f5:43:ff:cb:5a:a9:13:d9:4b:b4:29:
83:c7:19:4f:60:fd:83:68:3f:45:9a:47:b8:9e:8b:62:d8:05:
85:d2:40:e9:e2:23:1a:f6:1b:55:0e:d7:8e:21:66:2e:07:d1:
54:e3:be:b2:e1:2e:61:c2:bf:66:f6:52:8f:5a:e9:e9:3c:d4:
59:2b:cb:62:a8:1b:23:c3:89:2f:b5:35:76:d3:12:1f:0f:6c:
70:6b:ef:7e:92:62:1d:68:84:35:d2:55:eb:d1:4f:50:69:75:
63:92:05:5c:8e:10:e1:23:80:e2:a3:5e:50:21:f8:d8:ce:78:
35:36:cf:48:8d:20:de:34:b7:e3:46:00:9d:2a:1d:c4:de:df:
8b:2b:eb:d6:db:cc:cf:c9:48:f6:b2:f6:3a:0e:13:3a:fa:09:
9e:5f:ab:81
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICPW0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMDQxNDM0NDRaFw0yMzEwMTQxNDM0NDRaMBgxFjAU
BgNVBAMTDTY1MWQ3ODA3LWQxYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKzUOAK70g3RvkV7Qdtb0B/mAYLqdY46X+z+41kaDdrMo1+V0PCJgvNOhZ
l+5NRpfII44ZjkJEEw1HdmoFaWw19aGbIjn0mTPHNE+UFd+mkKo4GUx8Z6VKKHZT
UztiEuNzQO10iQ9HalccJlvpETaQ52YLPi/RlUXM22/AGkrzpeWatFl7FpvIF4H5
hdZd7xnleCxSxDcnW0h7LHWACKRKL7bhanPHVYUBot+27JK1i6PKk7FxEozheoM5
wgAkI7AeVLug0vW/BUgSNoEEwRHAf2JjZoXzCbJUcsMYGrTSe8+iRUxI3PmLvrtL
pjNon/350bIC7pE0S7BYujiP9wDHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUci8
uQ/dnwbhl3/+s/bj3u/yRB0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzJBQzQyQzg4NjJDMzExRUVCMjM4MzkyQTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwI4wDQYJKoZIhvcNAQELBQAD
ggEBABDgyc/vFGsxpczdJuLUTCck7YGrlA4JdzeMeT6G/yTZeMcxvpvXusqu/fT0
d3FOCMTjF0omzdCGnE1MLP0zAz09rIkkwuO5XHLnOc3jiBjfURQSjH/woT6qKoES
TwzcCHP1Q//LWqkT2Uu0KYPHGU9g/YNoP0WaR7iei2LYBYXSQOniIxr2G1UO144h
Zi4H0VTjvrLhLmHCv2b2Uo9a6ek81Fkry2KoGyPDiS+1NXbTEh8PbHBr736SYh1o
hDXSVevRT1BpdWOSBVyOEOEjgOKjXlAh+NjOeDU2z0iNIN40t+NGAJ0qHcTe34sr
69bbzM/JSPay9joOEzr6CZ5fq4E=
-----END CERTIFICATE-----
Generated at Fri May 9 12:22:59 2025 by rpki-client