Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3364D3DEC47811EF8FD66F73762E951A.roa
File: 3364D3DEC47811EF8FD66F73762E951A.roa (raw, json)
Hash identifier: SBgcAeVUJruqrOdVKgVhi44HFmdP6AWQ9JKmzuFFITM=
Subject key identifier: A8:9B:75:AC:EA:C4:79:1B:75:CB:14:E1:8C:EC:F7:63:33:DC:55:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3364D3DEC47811EF8FD66F73762E951A.roa
Signing time: Fri 27 Dec 2024 17:30:01 +0000
ROA not before: Fri 27 Dec 2024 17:29:57 +0000
ROA not after: Sat 01 Feb 2025 17:29:57 +0000
asID: 138995
IP address blocks: 45.192.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61676 (0xf0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:29:57 2024 GMT
Not After : Feb 1 17:29:57 2025 GMT
Subject: CN=676ee419-83d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:44:f4:d5:38:23:da:92:53:59:9a:ca:fe:
1d:00:6f:a8:7e:4f:72:2c:3b:61:d2:64:83:fa:c2:
c0:5d:41:f4:f8:4a:79:cf:c6:fa:bb:ff:29:e9:74:
6c:e3:a3:64:34:85:ee:24:57:b0:75:ff:d4:ba:03:
58:bc:70:41:05:b0:31:b3:e8:4d:16:83:83:f0:01:
35:95:ef:ce:51:e2:19:2f:2a:c5:dd:0b:f9:62:93:
df:71:e5:80:f3:59:b9:77:4f:40:5f:02:1d:e5:3c:
6d:5a:7a:6a:47:83:ba:ef:87:fa:43:86:04:53:5d:
b7:2c:0d:c3:a3:8f:e4:6a:15:8d:fd:5b:9a:49:1c:
ba:f6:1c:e4:17:b3:00:d7:68:4e:ea:1d:81:c1:c5:
2d:85:26:b6:5d:a5:45:28:63:0e:1b:d2:df:b1:b7:
1a:7f:7c:fa:b0:c7:07:7a:73:47:e2:78:b6:ab:86:
ff:a7:97:f3:d0:76:a4:b0:85:1a:a9:06:cd:95:36:
76:50:c8:f8:17:b5:0f:ce:7d:90:1c:2d:73:44:15:
b6:b0:95:c4:22:e1:8f:63:e5:9e:2f:51:54:4f:f3:
37:7f:59:61:ae:1c:aa:96:28:57:25:53:7e:47:8a:
6f:28:c6:15:99:61:e1:31:ac:2a:e9:e0:15:fb:fb:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:75:AC:EA:C4:79:1B:75:CB:14:E1:8C:EC:F7:63:33:DC:55:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3364D3DEC47811EF8FD66F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8c:14:c3:5c:fe:f7:ab:c5:0b:80:34:40:b1:63:87:e7:38:
aa:21:9f:9f:1c:14:bb:8d:79:6b:5a:d5:59:71:19:61:f2:91:
03:f9:6b:96:25:7a:52:7f:00:4b:96:ce:4a:2f:2d:15:86:b1:
79:bc:67:de:e5:3c:ec:60:1a:2c:53:fc:96:76:8d:d8:8a:15:
81:67:d1:03:02:70:d5:18:64:18:f4:89:88:29:76:21:73:0a:
7c:6e:f7:ea:57:cd:04:c5:4d:b5:ea:7c:ac:af:6b:35:8d:0d:
d2:1f:5b:20:1b:d8:a2:fa:08:59:59:7e:fb:6f:d0:2f:55:33:
3c:fe:2a:77:e4:a5:7f:80:fd:1d:1a:42:cc:b0:c6:9b:b5:de:
af:17:d7:55:d7:0a:03:61:5f:e3:e2:6e:6c:76:d0:86:4a:b6:
9b:1e:6f:81:62:4c:cf:13:8f:36:68:3b:c6:f4:d9:e2:ab:ca:
62:22:f8:dc:b1:a2:a1:b9:d7:43:3d:35:66:a4:1e:c3:d5:8e:
72:0b:24:c0:83:8b:5b:30:d3:54:01:a0:f0:1a:55:e1:72:13:
32:e1:bd:c5:e5:dc:1c:36:a3:19:04:ce:73:6c:3c:e4:5a:12:
1b:a1:8d:1c:a5:0f:51:79:b5:4b:58:26:1a:6b:a2:c2:5b:99:
a5:66:b2:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPDsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MTcyOTU3WhcNMjUwMjAxMTcyOTU3WjAYMRYw
FAYDVQQDEw02NzZlZTQxOS04M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvp5E9NU4I9qSU1mayv4dAG+ofk9yLDth0mSD+sLAXUH0+Ep5z8b6u/8p
6XRs46NkNIXuJFewdf/UugNYvHBBBbAxs+hNFoOD8AE1le/OUeIZLyrF3Qv5YpPf
ceWA81m5d09AXwId5TxtWnpqR4O674f6Q4YEU123LA3Do4/kahWN/VuaSRy69hzk
F7MA12hO6h2BwcUthSa2XaVFKGMOG9Lfsbcaf3z6sMcHenNH4ni2q4b/p5fz0Hak
sIUaqQbNlTZ2UMj4F7UPzn2QHC1zRBW2sJXEIuGPY+WeL1FUT/M3f1lhrhyqlihX
JVN+R4pvKMYVmWHhMawq6eAV+/s6UQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKib
dazqxHkbdcsU4Yzs92Mz3FVaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzY0RDNERUM0NzgxMUVGOEZENjZGNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDiMA0GCSqGSIb3DQEBCwUA
A4IBAQA5jBTDXP73q8ULgDRAsWOH5ziqIZ+fHBS7jXlrWtVZcRlh8pED+WuWJXpS
fwBLls5KLy0VhrF5vGfe5TzsYBosU/yWdo3YihWBZ9EDAnDVGGQY9ImIKXYhcwp8
bvfqV80ExU216nysr2s1jQ3SH1sgG9ii+ghZWX77b9AvVTM8/ip35KV/gP0dGkLM
sMabtd6vF9dV1woDYV/j4m5sdtCGSrabHm+BYkzPE482aDvG9Nniq8piIvjcsaKh
uddDPTVmpB7D1Y5yCyTAg4tbMNNUAaDwGlXhchMy4b3F5dwcNqMZBM5zbDzkWhIb
oY0cpQ9RebVLWCYaa6LCW5mlZrLS
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:34 2025 by rpki-client