Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30119992C6CB11EFA6F46DAE762E951A.roa
File: 30119992C6CB11EFA6F46DAE762E951A.roa (raw, json)
Hash identifier: vPXzvwOHszOf/0S3STKNCXumBke2+xlExnV7ZHeOwRU=
Subject key identifier: B5:7F:6F:DF:23:CC:00:32:2B:11:FC:51:DD:CB:8C:3F:3C:9A:B4:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F279
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30119992C6CB11EFA6F46DAE762E951A.roa
Signing time: Mon 30 Dec 2024 16:29:06 +0000
ROA not before: Mon 30 Dec 2024 16:29:02 +0000
ROA not after: Sun 02 Feb 2025 16:29:02 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62073 (0xf279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:29:02 2024 GMT
Not After : Feb 2 16:29:02 2025 GMT
Subject: CN=6772ca52-2f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3c:22:d5:e4:7e:bf:7b:85:20:22:ea:fa:5c:
c4:b0:b8:ef:51:44:b8:fd:2c:d3:e8:24:08:6d:b9:
44:22:ae:39:ff:9b:df:d4:d0:58:1d:13:35:8c:02:
4b:9d:43:bb:b1:33:56:93:47:7c:d7:0e:5c:3d:09:
3e:c4:74:d2:1e:f9:80:01:b2:96:34:0b:06:04:8c:
d1:84:85:06:b0:c3:e8:5b:7b:71:8b:e5:78:f6:95:
76:28:d6:e0:1c:a9:ce:13:0e:c8:c4:5b:81:05:bb:
6a:06:19:57:cc:c1:1c:f2:88:4b:7b:ae:15:5c:53:
ca:3b:90:b1:b0:6e:87:99:30:35:47:e2:72:ec:e1:
68:6f:da:23:21:8e:12:3b:da:ab:38:cd:d3:27:d7:
89:99:3a:70:2e:02:9e:30:ab:ef:b0:16:2d:e7:4a:
f9:29:84:6c:be:a9:03:1e:12:8c:f1:f1:f5:fc:a0:
4d:fd:78:8f:af:dd:b7:5f:f8:0c:dc:02:ed:e5:26:
5e:d5:b9:fb:e3:da:bc:ab:cd:c0:36:54:a2:8f:b6:
e8:b9:d2:44:dd:21:a1:86:05:ee:a1:42:a1:46:ed:
85:57:fa:13:6a:84:be:22:0e:0e:08:04:7e:9d:82:
63:95:da:51:c7:66:fb:48:35:7f:16:28:ca:40:e3:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:6F:DF:23:CC:00:32:2B:11:FC:51:DD:CB:8C:3F:3C:9A:B4:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30119992C6CB11EFA6F46DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:16:5f:e7:6f:36:f6:7b:b8:c8:41:83:0f:cf:f9:e8:b3:b8:
9c:2e:4b:dc:3b:bc:03:fc:5f:f5:5f:2f:44:fe:0b:b6:02:de:
cb:f2:1e:18:12:41:35:f6:f8:39:fe:d9:6d:35:e4:2d:36:c9:
20:ad:4b:26:d4:b3:a1:c1:71:8b:6e:da:16:61:45:ad:8b:ed:
8b:bb:fc:42:cc:8c:79:44:37:9e:9b:d5:b9:9b:29:f1:da:66:
eb:05:dd:ec:f5:e9:3b:96:41:6e:14:6c:e8:79:4f:6f:6f:ff:
f9:86:13:39:7e:01:64:a3:77:37:96:4a:33:93:bc:1a:ab:ce:
95:20:dd:5f:31:68:5e:d1:c3:47:18:60:6d:d0:21:fd:b3:23:
20:ab:02:e1:1f:76:0c:03:1b:bd:9e:07:57:f8:77:58:09:9a:
e3:c9:0a:db:f8:f3:fa:3d:b5:0e:67:c9:38:4d:04:99:63:4d:
a2:20:43:00:68:1b:5a:e8:30:77:3e:be:e4:1d:49:5a:66:70:
da:d3:e5:ae:8f:11:c5:2a:cb:96:9c:b0:c7:06:0e:7d:e2:f4:
b2:37:68:4a:b5:65:bb:ff:fd:c7:58:69:47:e8:47:c7:61:f8:
d8:a6:24:8b:fa:79:f7:23:6a:5a:34:e5:7e:35:5c:49:2f:f6:
08:50:49:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPJ5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjMwMTYyOTAyWhcNMjUwMjAyMTYyOTAyWjAYMRYw
FAYDVQQDEw02NzcyY2E1Mi0yZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9zwi1eR+v3uFICLq+lzEsLjvUUS4/SzT6CQIbblEIq45/5vf1NBYHRM1
jAJLnUO7sTNWk0d81w5cPQk+xHTSHvmAAbKWNAsGBIzRhIUGsMPoW3txi+V49pV2
KNbgHKnOEw7IxFuBBbtqBhlXzMEc8ohLe64VXFPKO5CxsG6HmTA1R+Jy7OFob9oj
IY4SO9qrOM3TJ9eJmTpwLgKeMKvvsBYt50r5KYRsvqkDHhKM8fH1/KBN/XiPr923
X/gM3ALt5SZe1bn749q8q83ANlSij7boudJE3SGhhgXuoUKhRu2FV/oTaoS+Ig4O
CAR+nYJjldpRx2b7SDV/FijKQOPfhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLV/
b98jzAAyKxH8Ud3LjD88mrQEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMDExOTk5MkM2Q0IxMUVGQTZGNDZEQUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIwMA0GCSqGSIb3DQEBCwUA
A4IBAQCfFl/nbzb2e7jIQYMPz/nos7icLkvcO7wD/F/1Xy9E/gu2At7L8h4YEkE1
9vg5/tltNeQtNskgrUsm1LOhwXGLbtoWYUWti+2Lu/xCzIx5RDeem9W5mynx2mbr
Bd3s9ek7lkFuFGzoeU9vb//5hhM5fgFko3c3lkozk7waq86VIN1fMWhe0cNHGGBt
0CH9syMgqwLhH3YMAxu9ngdX+HdYCZrjyQrb+PP6PbUOZ8k4TQSZY02iIEMAaBta
6DB3Pr7kHUlaZnDa0+WujxHFKsuWnLDHBg594vSyN2hKtWW7//3HWGlH6EfHYfjY
piSL+nn3I2paNOV+NVxJL/YIUEm3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:58 2025 by rpki-client