Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D08187047DC11EF913B9775762E951A.roa
File: 2D08187047DC11EF913B9775762E951A.roa (raw, json)
Hash identifier: dKJDgfZp8o9mD0gK86VZlaLad2Kz74pLdf0TZmAXA4c=
Subject key identifier: 57:84:48:06:89:F9:CE:5A:E1:BD:2F:79:D7:0E:03:DB:C4:04:9A:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D08187047DC11EF913B9775762E951A.roa
Signing time: Mon 22 Jul 2024 03:40:45 +0000
ROA not before: Mon 22 Jul 2024 03:40:41 +0000
ROA not after: Fri 23 Aug 2024 03:40:41 +0000
asID: 48031
IP address blocks: 45.200.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40443 (0x9dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:40:41 2024 GMT
Not After : Aug 23 03:40:41 2024 GMT
Subject: CN=669dd4bc-5b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:72:06:2f:09:c2:67:46:52:61:5a:c8:a4:
d4:f3:99:a0:cb:de:13:f7:4a:a9:f4:b9:ed:97:eb:
e9:92:22:41:be:d2:11:33:27:19:fb:87:01:be:86:
30:f9:9a:a5:ae:0c:6e:05:c4:07:42:e2:b0:df:d7:
9c:f5:48:43:77:69:83:bc:90:eb:c2:93:10:bb:64:
d0:d9:26:e3:34:74:be:d6:da:00:5b:a7:60:49:75:
81:63:e3:06:22:22:8b:96:b2:be:29:8b:27:ef:52:
44:43:78:25:bd:8c:e7:e2:4a:75:54:68:90:b1:5d:
97:84:ce:63:c8:95:b0:66:58:4d:b9:70:56:18:e5:
30:b2:70:1b:4c:9c:5f:3d:95:41:c7:08:1f:b8:97:
cd:ae:db:8f:61:78:79:e5:5a:ec:44:1c:1f:9e:78:
5b:c0:92:50:64:6e:86:bc:dd:22:b8:5e:43:fe:57:
9f:60:a7:14:3b:66:50:40:74:6b:ad:6f:1f:ea:c7:
cf:6d:2a:f1:11:a7:8a:84:61:2b:58:c8:0c:bf:0c:
fe:9c:05:90:e0:8a:f7:af:e6:be:11:a3:de:24:3a:
a9:11:87:61:31:b4:f2:be:56:dd:0f:16:6b:d9:1e:
ec:01:27:5a:88:dc:cc:9a:c0:a8:04:66:cf:95:2c:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:48:06:89:F9:CE:5A:E1:BD:2F:79:D7:0E:03:DB:C4:04:9A:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D08187047DC11EF913B9775762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:d0:7e:62:31:d4:4f:13:3f:60:63:8e:0a:e7:e9:32:ee:
05:90:e9:e9:4c:b7:1b:f8:6e:d6:ff:86:dd:93:dc:a3:f1:57:
0f:fb:66:7b:0a:77:ae:c8:2b:45:fe:07:7d:fe:09:cf:e0:2d:
ce:b7:0e:c5:73:0c:26:07:c3:ca:f4:87:26:c0:34:34:a1:3a:
c7:d3:3c:81:8c:b6:87:1f:61:0e:8c:5d:91:c5:b8:a7:d1:60:
0c:fd:6e:fa:76:a7:23:4d:7a:d6:51:ec:fd:8d:d1:16:d2:a6:
25:24:14:9e:8e:c4:d6:5b:25:ad:80:8d:2e:70:1d:33:2f:4e:
47:98:75:79:51:62:c9:12:1d:7b:1d:54:70:ea:86:91:ec:ca:
9f:df:90:6d:b0:75:15:d2:72:a0:a7:42:64:35:73:ec:ad:5c:
80:4f:24:2c:83:80:58:c6:55:c8:04:6f:40:34:f2:0f:be:60:
f4:2f:3f:03:8c:11:cd:5c:a6:35:3d:f7:fe:8f:2f:8b:d0:3a:
ba:e5:99:57:c1:35:b6:c9:14:d9:94:8f:b1:a9:6d:2e:0e:32:
29:c3:20:12:df:b3:0f:42:12:50:36:08:dc:ad:51:90:15:e3:
cd:c9:44:d5:3c:25:4e:0e:dc:5f:e4:73:58:66:50:9f:57:65:
a8:54:dd:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ37MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDM0MDQxWhcNMjQwODIzMDM0MDQxWjAYMRYw
FAYDVQQDEw02NjlkZDRiYy01YjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv81yBi8JwmdGUmFayKTU85mgy94T90qp9Lntl+vpkiJBvtIRMycZ+4cB
voYw+ZqlrgxuBcQHQuKw39ec9UhDd2mDvJDrwpMQu2TQ2SbjNHS+1toAW6dgSXWB
Y+MGIiKLlrK+KYsn71JEQ3glvYzn4kp1VGiQsV2XhM5jyJWwZlhNuXBWGOUwsnAb
TJxfPZVBxwgfuJfNrtuPYXh55VrsRBwfnnhbwJJQZG6GvN0iuF5D/lefYKcUO2ZQ
QHRrrW8f6sfPbSrxEaeKhGErWMgMvwz+nAWQ4Ir3r+a+EaPeJDqpEYdhMbTyvlbd
DxZr2R7sASdaiNzMmsCoBGbPlSzlRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFeE
SAaJ+c5a4b0vedcOA9vEBJpNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRDA4MTg3MDQ3REMxMUVGOTEzQjk3NzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALci6MA0GCSqGSIb3DQEBCwUA
A4IBAQBOgNB+YjHUTxM/YGOOCufpMu4FkOnpTLcb+G7W/4bdk9yj8VcP+2Z7Cneu
yCtF/gd9/gnP4C3Otw7FcwwmB8PK9IcmwDQ0oTrH0zyBjLaHH2EOjF2Rxbin0WAM
/W76dqcjTXrWUez9jdEW0qYlJBSejsTWWyWtgI0ucB0zL05HmHV5UWLJEh17HVRw
6oaR7Mqf35BtsHUV0nKgp0JkNXPsrVyATyQsg4BYxlXIBG9ANPIPvmD0Lz8DjBHN
XKY1Pff+jy+L0Dq65ZlXwTW2yRTZlI+xqW0uDjIpwyAS37MPQhJQNgjcrVGQFePN
yUTVPCVODtxf5HNYZlCfV2WoVN3r
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org