Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324215683EA211EF900E4C88762E951A.roa
File: 324215683EA211EF900E4C88762E951A.roa (raw, json)
Hash identifier: d6GBMKydmjF7Il4vBSJv7VBZAn2tWJdrUOvMSKeZ4oE=
Subject key identifier: 24:05:81:98:FD:9B:36:24:F7:81:BA:9E:1C:DA:AD:8E:B7:A8:B7:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324215683EA211EF900E4C88762E951A.roa
Signing time: Wed 10 Jul 2024 09:53:02 +0000
ROA not before: Wed 10 Jul 2024 09:52:59 +0000
ROA not after: Fri 02 Aug 2024 09:52:59 +0000
asID: 139646
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39688 (0x9b08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:52:59 2024 GMT
Not After : Aug 2 09:52:59 2024 GMT
Subject: CN=668e59fe-b2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:eb:87:30:06:3c:e0:53:79:cc:82:e4:20:
66:e3:c2:4b:49:a3:85:53:68:08:d7:e4:de:72:92:
c0:d6:7d:fe:65:3a:cf:5c:fc:f9:d5:42:57:71:99:
c8:08:02:3d:3c:02:bd:a1:89:11:f4:4d:77:eb:43:
ad:57:19:df:87:63:0a:c2:28:26:b6:4f:93:6e:03:
a8:66:5f:26:41:63:39:f4:59:8d:51:f0:dd:93:c7:
a5:9b:6d:10:cb:b2:76:f5:10:53:32:fd:63:d5:9f:
ae:fd:29:e1:f0:b2:77:1c:12:dc:7a:9e:64:6b:38:
80:c7:e8:6f:13:56:15:e1:c4:c6:7b:09:5b:ea:4d:
a7:a4:fc:18:d1:85:78:54:4d:f9:5f:bc:a5:14:82:
73:13:fa:b8:88:78:be:02:e7:aa:5f:ce:fe:0d:4a:
d9:20:37:13:44:04:5d:f4:6d:5a:4b:52:d6:20:02:
eb:a6:e6:49:53:33:f4:45:23:99:51:96:b3:ec:28:
52:87:82:69:c4:2d:34:c0:f9:0c:3f:a6:e0:6c:1e:
37:42:e6:de:9d:02:23:68:cd:78:bf:11:82:c8:3a:
c5:72:b0:8e:40:df:c8:fd:c1:b5:56:04:95:c3:85:
0a:70:1d:f4:e6:74:5b:39:62:eb:07:c0:a2:bb:76:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:81:98:FD:9B:36:24:F7:81:BA:9E:1C:DA:AD:8E:B7:A8:B7:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324215683EA211EF900E4C88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:1d:ae:25:fa:57:bc:70:68:86:af:b8:36:a1:12:f3:bc:d8:
be:c4:b3:21:6a:62:7e:f4:61:93:96:9e:ef:a0:38:d1:28:18:
72:07:97:eb:01:eb:50:89:ac:b6:c4:60:f0:74:0b:2a:9f:60:
61:59:78:56:eb:92:e1:37:c3:31:73:7f:1a:c3:8a:6b:b4:82:
c6:71:66:ab:d9:12:4f:18:22:66:c9:14:c7:81:bd:6f:2a:8a:
11:68:8b:43:c8:f8:47:09:d8:49:d1:fa:9b:5f:f7:11:11:96:
6f:74:16:aa:a5:26:48:4f:0a:98:55:9d:e1:4f:aa:b7:7b:c0:
16:1b:2f:9d:42:dc:65:3d:f7:59:1d:5e:f8:fd:a1:76:84:08:
33:fe:5e:12:b2:6c:62:fd:9c:41:a4:71:4b:10:62:4e:38:2e:
af:63:aa:d4:78:9d:45:31:d3:f0:cc:0a:8b:1c:74:b2:d2:c8:
de:b8:a1:ea:25:20:95:26:97:1a:e2:80:22:1a:47:6c:7e:ee:
fa:8d:f9:be:ce:28:40:e4:e3:c0:de:32:1a:d2:0c:83:c0:e4:
25:59:ec:2b:11:f5:45:02:7a:06:92:ea:cd:40:ed:d8:db:48:
45:ff:46:02:07:76:0c:c0:4f:6d:73:85:0d:15:3b:d7:81:57:
bf:ca:d6:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJsIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEwMDk1MjU5WhcNMjQwODAyMDk1MjU5WjAYMRYw
FAYDVQQDEw02NjhlNTlmZS1iMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XjrhzAGPOBTecyC5CBm48JLSaOFU2gI1+TecpLA1n3+ZTrPXPz51UJX
cZnICAI9PAK9oYkR9E1360OtVxnfh2MKwigmtk+TbgOoZl8mQWM59FmNUfDdk8el
m20Qy7J29RBTMv1j1Z+u/Snh8LJ3HBLcep5kaziAx+hvE1YV4cTGewlb6k2npPwY
0YV4VE35X7ylFIJzE/q4iHi+AueqX87+DUrZIDcTRARd9G1aS1LWIALrpuZJUzP0
RSOZUZaz7ChSh4JpxC00wPkMP6bgbB43QubenQIjaM14vxGCyDrFcrCOQN/I/cG1
VgSVw4UKcB305nRbOWLrB8Ciu3ZgIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCQF
gZj9mzYk94G6nhzarY63qLd1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjQyMTU2ODNFQTIxMUVGOTAwRTRDODg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcnwMA0GCSqGSIb3DQEBCwUA
A4IBAQCKHa4l+le8cGiGr7g2oRLzvNi+xLMhamJ+9GGTlp7voDjRKBhyB5frAetQ
iay2xGDwdAsqn2BhWXhW65LhN8Mxc38aw4prtILGcWar2RJPGCJmyRTHgb1vKooR
aItDyPhHCdhJ0fqbX/cREZZvdBaqpSZITwqYVZ3hT6q3e8AWGy+dQtxlPfdZHV74
/aF2hAgz/l4Ssmxi/ZxBpHFLEGJOOC6vY6rUeJ1FMdPwzAqLHHSy0sjeuKHqJSCV
Jpca4oAiGkdsfu76jfm+zihA5OPA3jIa0gyDwOQlWewrEfVFAnoGkurNQO3Y20hF
/0YCB3YMwE9tc4UNFTvXgVe/ytZa
-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:24 2024 by rpki-client on console-ams.rpki-client.org