Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BED8690018811EF9DEB8F5C017001B1.roa
File: 2BED8690018811EF9DEB8F5C017001B1.roa (raw, json)
Hash identifier: aERPygmkr1MVOP4vxI+BWpaPsRi05zjce2Hb5AgK/n4=
Subject key identifier: 6A:4C:03:92:75:58:53:2C:33:C6:65:77:28:DC:1E:DE:D9:F5:95:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8497
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BED8690018811EF9DEB8F5C017001B1.roa
Signing time: Tue 23 Apr 2024 15:43:04 +0000
ROA not before: Tue 23 Apr 2024 15:43:00 +0000
ROA not after: Wed 01 May 2024 15:43:00 +0000
asID: 136950
IP address blocks: 45.195.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33943 (0x8497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:43:00 2024 GMT
Not After : May 1 15:43:00 2024 GMT
Subject: CN=6627d708-322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:ce:f0:ed:9a:dc:69:a2:6c:bd:bb:8e:9b:
47:66:c1:e1:f8:5a:bb:75:a1:e4:2b:07:75:4d:fa:
b7:62:57:53:9c:d8:8b:f3:4b:3a:48:d3:ac:c3:68:
5c:6e:2b:e6:ec:44:aa:f1:7f:71:eb:30:18:47:d0:
0f:ce:8f:d9:0e:3f:fd:c9:57:2b:07:a2:f0:c4:16:
0a:45:f0:35:8f:24:54:88:91:fa:8a:2e:38:78:a9:
a4:23:21:b0:45:e5:17:2c:1e:af:a1:d7:ac:00:d7:
16:dc:95:69:95:1c:8e:06:d1:96:8a:09:0b:10:3b:
b7:ee:c0:50:4c:ea:4f:19:da:59:52:1a:80:58:27:
9f:b8:ec:ed:fa:8d:ec:e3:e6:fe:71:ba:48:78:59:
f5:c8:d0:20:c3:5b:21:3c:8f:c5:6d:11:d7:b8:77:
0c:f8:b4:73:3c:7e:c7:89:6a:ce:c3:af:c6:89:3f:
20:24:5a:11:0f:3e:8b:f2:50:5a:e7:10:2a:ba:c5:
a4:06:32:60:20:fc:07:e6:de:a8:03:2e:23:38:f1:
69:86:17:6f:dc:6b:9b:bb:81:18:e4:9a:fb:c0:f4:
36:84:c3:af:7a:a4:eb:f7:ef:6d:b4:93:e4:e7:de:
c2:aa:d2:43:e3:05:61:07:af:f7:95:9d:8f:07:f9:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:03:92:75:58:53:2C:33:C6:65:77:28:DC:1E:DE:D9:F5:95:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BED8690018811EF9DEB8F5C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c7:7a:f5:86:3d:25:74:c8:ea:2e:0c:f9:26:e1:d2:98:40:
7a:e2:fb:05:86:c6:75:41:36:e2:6a:ff:84:a9:52:95:16:0e:
7f:8f:62:e1:f8:9f:20:47:38:2d:d6:87:33:0d:f8:d7:a8:f1:
69:0f:6b:10:70:3e:01:71:90:18:b7:7d:2e:f9:3d:5b:ef:fa:
75:b0:81:46:64:9b:72:b0:81:7a:b6:2e:44:12:7b:23:4e:d7:
9c:a1:25:dd:b2:7e:74:d2:c1:ee:04:9b:8c:7a:af:35:ca:e4:
dd:f1:29:a2:2a:bf:35:f4:c0:62:ad:b3:f8:78:4b:5d:10:31:
a8:bf:5d:a4:42:82:d9:3f:de:5c:88:dc:e7:54:b7:2d:2d:9c:
13:24:9d:42:33:02:2c:93:b2:67:02:28:ff:d5:9a:6d:89:28:
69:d9:af:1a:f9:6c:7f:e1:6f:9e:c6:a0:23:48:91:57:04:2f:
1c:8b:e9:b9:bc:be:60:34:c8:fd:c7:00:a9:58:e5:55:66:8c:
bb:65:4a:54:a6:cd:24:64:cc:f7:0f:31:6d:ec:1c:41:8e:f8:
10:c1:dc:a7:ba:4f:bc:39:27:31:dc:2d:e6:b6:87:e0:33:f9:
4f:f7:5a:c7:c8:41:b2:dd:54:5d:5e:17:9d:04:c2:99:68:52:
be:6b:ae:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAISXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMTU0MzAwWhcNMjQwNTAxMTU0MzAwWjAYMRYw
FAYDVQQDEw02NjI3ZDcwOC0zMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoH/O8O2a3GmibL27jptHZsHh+Fq7daHkKwd1Tfq3YldTnNiL80s6SNOs
w2hcbivm7ESq8X9x6zAYR9APzo/ZDj/9yVcrB6LwxBYKRfA1jyRUiJH6ii44eKmk
IyGwReUXLB6vodesANcW3JVplRyOBtGWigkLEDu37sBQTOpPGdpZUhqAWCefuOzt
+o3s4+b+cbpIeFn1yNAgw1shPI/FbRHXuHcM+LRzPH7HiWrOw6/GiT8gJFoRDz6L
8lBa5xAqusWkBjJgIPwH5t6oAy4jOPFphhdv3Gubu4EY5Jr7wPQ2hMOveqTr9+9t
tJPk597CqtJD4wVhB6/3lZ2PB/mSLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGpM
A5J1WFMsM8ZldyjcHt7Z9ZXlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQkVEODY5MDAxODgxMUVGOURFQjhGNUMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOUMA0GCSqGSIb3DQEBCwUA
A4IBAQBCx3r1hj0ldMjqLgz5JuHSmEB64vsFhsZ1QTbiav+EqVKVFg5/j2Lh+J8g
Rzgt1oczDfjXqPFpD2sQcD4BcZAYt30u+T1b7/p1sIFGZJtysIF6ti5EEnsjTtec
oSXdsn500sHuBJuMeq81yuTd8SmiKr819MBirbP4eEtdEDGov12kQoLZP95ciNzn
VLctLZwTJJ1CMwIsk7JnAij/1ZptiShp2a8a+Wx/4W+exqAjSJFXBC8ci+m5vL5g
NMj9xwCpWOVVZoy7ZUpUps0kZMz3DzFt7BxBjvgQwdynuk+8OScx3C3mtofgM/lP
91rHyEGy3VRdXhedBMKZaFK+a653
-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org