Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC96932128611EF90C13E62017001B1.roa
File: 2FC96932128611EF90C13E62017001B1.roa (raw, json)
Hash identifier: RgxwiQtg5cQLnSEJ7dxB1fNBjaD81f2X+yazAZYKsA8=
Subject key identifier: 79:F7:B8:83:2D:47:54:F4:BD:17:F5:3B:92:50:9F:11:7F:94:D7:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC96932128611EF90C13E62017001B1.roa
Signing time: Wed 15 May 2024 06:41:41 +0000
ROA not before: Wed 15 May 2024 06:41:37 +0000
ROA not after: Sun 26 May 2024 06:41:37 +0000
asID: 142062
IP address blocks: 45.204.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35415 (0x8a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:41:37 2024 GMT
Not After : May 26 06:41:37 2024 GMT
Subject: CN=66445925-f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:ba:7e:8a:d7:ff:d7:e8:7b:79:9e:07:eb:
3c:9b:e6:67:6c:a5:59:2a:51:72:ab:f7:6f:82:09:
bc:c2:1f:5a:31:e3:c0:62:0a:ad:95:61:9f:9c:16:
2d:cd:68:8f:08:80:13:28:2c:88:17:9c:1c:56:c0:
e2:be:60:4f:3a:2e:e7:4e:63:6d:ad:b8:46:91:15:
f1:54:73:f2:b9:f8:3f:52:25:d9:18:91:ef:e0:8e:
fb:11:fd:b9:b8:d9:b3:2c:13:8e:12:89:0c:f0:7d:
54:72:a6:44:e6:fd:dc:74:e8:71:4f:2d:18:5b:8f:
a5:f7:1a:ad:26:8c:ec:d9:e0:5e:54:78:33:f8:bc:
8e:6a:53:48:41:fe:0f:d7:29:73:da:e8:53:8c:c9:
6a:41:40:ff:d0:de:d4:23:ad:b2:26:d3:45:d2:ab:
48:60:9e:03:9a:65:1b:d5:08:a3:48:c7:55:05:66:
74:d3:2a:50:e5:ce:64:23:d2:59:30:9f:fc:36:97:
e0:cd:71:59:94:69:7d:23:b8:83:c8:3e:1a:65:94:
cc:f8:b8:b0:f3:eb:f6:f9:57:fa:fb:a1:26:4a:7f:
d3:62:64:ee:b2:01:de:98:26:a2:5d:ab:62:fb:d6:
27:3a:84:04:d2:7e:58:9e:9c:24:24:73:7b:2f:1f:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:B8:83:2D:47:54:F4:BD:17:F5:3B:92:50:9F:11:7F:94:D7:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FC96932128611EF90C13E62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3e:44:61:ae:df:e2:4b:14:f0:fb:15:a7:c2:0f:41:e9:6c:
31:d8:f8:c2:12:f3:a4:da:cb:ae:8d:d9:5e:45:0f:f5:de:74:
23:75:d7:ca:9b:5e:00:78:b8:80:40:d1:dd:6e:de:e7:54:41:
cf:81:7e:82:48:3a:71:1d:fa:b2:d9:f0:b1:61:f6:1f:fa:c5:
8b:d4:f6:2e:30:98:a9:7d:bb:64:25:0f:f2:cb:cc:3e:40:de:
71:10:0c:d4:08:d2:ad:ef:57:af:87:d4:40:98:28:24:7d:af:
64:5b:c7:42:91:3a:8a:f0:c7:be:39:a7:31:af:e3:eb:90:d1:
bc:ad:15:2f:32:2a:3f:fa:19:eb:a9:ad:fe:94:1d:cb:36:b0:
84:5e:40:b5:2b:97:6a:8d:b7:99:6d:86:40:51:f4:10:85:0a:
98:31:f3:d6:bc:2d:11:98:c5:2d:82:5c:97:03:b1:a3:24:95:
9f:86:7b:90:51:d6:05:60:eb:67:bd:4a:a6:25:13:1d:b7:92:
3e:50:3c:49:73:3e:ea:3a:d8:48:fe:71:f7:e4:21:92:ae:d8:
37:48:da:84:0b:9e:66:c9:a3:46:d2:e0:4c:b0:3f:30:72:bc:
1e:6d:07:81:e5:fd:fa:a9:9a:d5:5f:a0:85:ee:81:d7:f4:0c:
19:8a:82:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIpXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTE1MDY0MTM3WhcNMjQwNTI2MDY0MTM3WjAYMRYw
FAYDVQQDEw02NjQ0NTkyNS1mMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApPO6forX/9foe3meB+s8m+ZnbKVZKlFyq/dvggm8wh9aMePAYgqtlWGf
nBYtzWiPCIATKCyIF5wcVsDivmBPOi7nTmNtrbhGkRXxVHPyufg/UiXZGJHv4I77
Ef25uNmzLBOOEokM8H1UcqZE5v3cdOhxTy0YW4+l9xqtJozs2eBeVHgz+LyOalNI
Qf4P1ylz2uhTjMlqQUD/0N7UI62yJtNF0qtIYJ4DmmUb1QijSMdVBWZ00ypQ5c5k
I9JZMJ/8NpfgzXFZlGl9I7iDyD4aZZTM+Liw8+v2+Vf6+6EmSn/TYmTusgHemCai
Xati+9YnOoQE0n5YnpwkJHN7Lx95EQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHn3
uIMtR1T0vRf1O5JQnxF/lNfhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRkM5NjkzMjEyODYxMUVGOTBDMTNFNjIwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxcMA0GCSqGSIb3DQEBCwUA
A4IBAQA/PkRhrt/iSxTw+xWnwg9B6Wwx2PjCEvOk2suujdleRQ/13nQjddfKm14A
eLiAQNHdbt7nVEHPgX6CSDpxHfqy2fCxYfYf+sWL1PYuMJipfbtkJQ/yy8w+QN5x
EAzUCNKt71evh9RAmCgkfa9kW8dCkTqK8Me+Oacxr+PrkNG8rRUvMio/+hnrqa3+
lB3LNrCEXkC1K5dqjbeZbYZAUfQQhQqYMfPWvC0RmMUtglyXA7GjJJWfhnuQUdYF
YOtnvUqmJRMdt5I+UDxJcz7qOthI/nH35CGSrtg3SNqEC55myaNG0uBMsD8wcrwe
bQeB5f36qZrVX6CF7oHX9AwZioIz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:02 2024 by rpki-client on console-ams.rpki-client.org