Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E93F87E3DC011EFA84C248E762E951A.roa
File: 2E93F87E3DC011EFA84C248E762E951A.roa (raw, json)
Hash identifier: 15/t0KW/MabePSA8g8LfzDA97fyiujrOjlUmyJ/Y3Ng=
Subject key identifier: FE:17:89:2C:1B:14:EB:66:A0:7A:7B:DC:C4:14:EF:6E:B0:04:EE:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 99EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E93F87E3DC011EFA84C248E762E951A.roa
Signing time: Tue 09 Jul 2024 06:55:10 +0000
ROA not before: Tue 09 Jul 2024 06:55:05 +0000
ROA not after: Thu 08 Aug 2024 06:55:05 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39403 (0x99eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 06:55:05 2024 GMT
Not After : Aug 8 06:55:05 2024 GMT
Subject: CN=668cdece-bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:c6:35:cf:ab:33:ba:a8:74:10:23:6d:fa:
c7:dd:0f:14:0f:27:fd:8d:89:9d:3e:38:ee:6b:da:
51:a7:7d:21:13:dd:9a:08:88:26:c9:f7:67:3c:90:
91:45:61:74:99:65:be:c7:5c:03:85:0b:8f:51:b2:
8f:75:d7:3e:2c:b5:58:c4:71:5a:5e:6b:6f:1f:97:
aa:a1:67:5d:5a:c2:5f:d2:d9:e8:b7:fd:9c:45:99:
aa:fb:cc:ed:9d:da:e6:0e:80:33:20:ad:53:58:50:
2c:97:c9:c7:db:20:91:f7:9a:7e:64:35:46:73:41:
c9:31:41:77:cd:18:26:f1:07:f1:a6:ba:cf:c9:0d:
0b:34:49:9c:83:11:b6:65:14:21:6c:67:9c:d7:2a:
27:8f:db:c5:85:ca:9f:83:4c:66:e9:53:64:c1:a0:
b9:7a:bd:77:8c:8f:b3:bd:7c:22:45:c0:f1:a1:05:
3c:c3:79:c3:cd:da:e0:90:6d:c3:c1:d4:21:d8:57:
91:d9:d9:7e:a4:cd:f0:8f:8b:b2:28:1d:da:3f:e9:
cd:d7:58:15:04:8a:8e:30:d1:08:d7:8a:9d:b3:b8:
2a:18:94:fa:2f:c7:1a:03:dd:75:e7:4f:68:4c:5a:
e8:dd:c3:9d:1d:09:b9:1c:f1:f9:b3:e4:1a:93:96:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:89:2C:1B:14:EB:66:A0:7A:7B:DC:C4:14:EF:6E:B0:04:EE:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E93F87E3DC011EFA84C248E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:82:f2:b3:09:d6:d9:80:86:42:f1:37:02:8c:4c:50:c4:e5:
2a:3e:b3:1e:b1:f0:a8:16:ee:9d:fd:b8:12:95:8d:fe:95:b1:
53:7c:fb:9b:7d:77:43:db:51:4b:1a:46:51:04:15:ab:c3:b8:
31:69:3d:e8:2f:a1:96:8d:bc:9e:0f:18:b2:18:8a:2a:86:7d:
f0:91:86:22:20:62:d6:65:bb:54:d9:6b:61:9f:82:ab:28:82:
d7:fd:b3:d1:aa:1d:ef:80:7d:41:32:27:a5:00:d1:cc:ca:c2:
53:4c:a6:26:40:15:ec:85:8d:2c:ac:86:e6:a9:78:1a:a4:36:
39:8d:82:d5:ab:10:64:f8:ca:e3:ba:45:a9:dd:ad:09:ff:5b:
88:cc:7f:a5:34:f3:1d:c9:cc:17:cf:51:17:40:0c:36:fa:f2:
aa:e4:6b:d7:d2:74:9f:67:08:f8:e7:ff:c8:1b:a8:a0:78:85:
92:5d:fc:35:d8:fb:07:52:dc:8b:6b:13:b8:5c:e2:7f:e3:1e:
d2:40:1f:b7:cb:7e:cd:3e:d4:1a:e6:84:36:6a:0b:5f:1d:4d:
32:e3:8f:28:5e:65:a5:75:af:87:39:74:85:a1:a8:71:e9:d3:
ec:3a:1b:32:9f:2d:49:ed:b5:cd:f0:92:b8:76:7a:ec:66:83:
aa:a1:be:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJnrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA5MDY1NTA1WhcNMjQwODA4MDY1NTA1WjAYMRYw
FAYDVQQDEw02NjhjZGVjZS1iZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyJfGNc+rM7qodBAjbfrH3Q8UDyf9jYmdPjjua9pRp30hE92aCIgmyfdn
PJCRRWF0mWW+x1wDhQuPUbKPddc+LLVYxHFaXmtvH5eqoWddWsJf0tnot/2cRZmq
+8ztndrmDoAzIK1TWFAsl8nH2yCR95p+ZDVGc0HJMUF3zRgm8QfxprrPyQ0LNEmc
gxG2ZRQhbGec1yonj9vFhcqfg0xm6VNkwaC5er13jI+zvXwiRcDxoQU8w3nDzdrg
kG3DwdQh2FeR2dl+pM3wj4uyKB3aP+nN11gVBIqOMNEI14qds7gqGJT6L8caA911
509oTFro3cOdHQm5HPH5s+Qak5ZAvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP4X
iSwbFOtmoHp73MQU726wBO48MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTkzRjg3RTNEQzAxMUVGQTg0QzI0OEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQCcgvKzCdbZgIZC8TcCjExQxOUqPrMesfCoFu6d/bgSlY3+lbFTfPubfXdD
21FLGkZRBBWrw7gxaT3oL6GWjbyeDxiyGIoqhn3wkYYiIGLWZbtU2Wthn4KrKILX
/bPRqh3vgH1BMielANHMysJTTKYmQBXshY0srIbmqXgapDY5jYLVqxBk+MrjukWp
3a0J/1uIzH+lNPMdycwXz1EXQAw2+vKq5GvX0nSfZwj45//IG6igeIWSXfw12PsH
UtyLaxO4XOJ/4x7SQB+3y37NPtQa5oQ2agtfHU0y448oXmWlda+HOXSFoahx6dPs
Ohsyny1J7bXN8JK4dnrsZoOqob4+
-----END CERTIFICATE-----
Generated at Thu Aug 8 09:11:22 2024 by rpki-client on console-fra.rpki-client.org