Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337D5F1AFD9611EF936A49B6762E951A.roa
File: 337D5F1AFD9611EF936A49B6762E951A.roa (raw, json)
Hash identifier: 9rUTif3u2fwRT/zosAfovNGbbTHgs6l45ehk4AtAI2U=
Subject key identifier: 54:A1:26:59:81:5E:F9:7B:DA:97:1D:20:80:FC:0A:D4:73:A1:E6:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337D5F1AFD9611EF936A49B6762E951A.roa
Signing time: Mon 10 Mar 2025 09:58:22 +0000
ROA not before: Mon 10 Mar 2025 09:58:18 +0000
ROA not after: Thu 03 Apr 2025 09:58:18 +0000
asID: 39600
IP address blocks: 45.194.64.0/22 maxlen: 24
45.197.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83106 (0x144a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 09:58:18 2025 GMT
Not After : Apr 3 09:58:18 2025 GMT
Subject: CN=67ceb7be-1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f9:fd:ce:61:4c:c3:13:b4:fd:ef:c3:0d:
70:eb:a5:10:50:0a:97:46:ae:a6:d5:ec:06:49:f8:
ce:9b:67:ab:1c:20:93:57:73:12:47:17:9f:43:0a:
2c:17:6c:15:82:d8:40:e6:c1:10:0d:52:a4:83:be:
21:7c:5d:66:17:93:c9:03:25:87:8e:c2:34:e8:5e:
4c:63:68:7f:ec:36:37:e9:cc:ca:09:ca:a7:0f:16:
31:06:23:6a:bf:a8:76:00:35:a3:33:1b:bc:80:b8:
9a:60:5a:b0:e4:fb:b3:64:a8:6b:c7:a9:71:27:96:
db:b4:46:21:46:d5:a6:84:0c:12:8e:55:11:51:f6:
9c:6d:3b:02:e0:6c:af:3f:9a:eb:0b:06:c5:47:ed:
3c:9d:f0:9c:e3:8c:77:ce:27:78:fd:ff:50:66:5b:
d7:37:29:8b:38:9c:b1:0b:6f:b5:e3:6b:13:8a:90:
66:27:40:38:27:ce:be:6b:98:ba:36:e2:b7:1a:37:
8a:f9:d4:71:c6:95:d2:0d:b9:53:ab:1b:e3:42:98:
ff:f7:3e:fc:94:1a:f2:34:c3:c3:04:8b:ac:26:91:
26:d8:14:08:76:bf:69:0a:32:6c:65:3b:27:74:9e:
74:6b:84:1e:72:d6:68:b7:6c:40:2b:09:7e:82:c9:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:26:59:81:5E:F9:7B:DA:97:1D:20:80:FC:0A:D4:73:A1:E6:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337D5F1AFD9611EF936A49B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.64.0/22
45.197.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:bb:a8:ba:4a:3b:88:30:fe:82:64:a6:27:1c:14:d8:e5:ed:
5f:ee:cd:38:aa:7e:2d:ba:fa:60:ea:f2:18:b5:52:9d:39:a5:
2b:7a:59:17:59:f7:bc:a3:64:c4:95:23:ee:0b:2e:84:44:56:
3e:2f:87:9c:42:c0:6b:8b:56:ef:19:ef:2a:b9:2f:0a:8f:0c:
0c:3f:39:a6:1b:b2:2f:85:53:cd:2e:ac:91:4f:26:18:68:6a:
d7:65:4b:73:54:3f:93:1f:d6:07:00:fa:ec:b8:cb:74:ab:59:
19:00:4d:51:f8:b4:ab:c1:04:24:85:ac:95:34:c2:3d:1d:ba:
3c:5c:ad:0d:1b:a9:af:a1:b6:8f:5b:4a:f3:8e:88:7c:ac:cc:
6e:8b:27:65:ca:e4:16:95:b9:86:45:36:61:7a:86:d5:8a:3f:
07:23:8e:db:4c:e3:4c:c5:d6:db:46:a0:19:fc:e1:ee:00:ce:
96:ec:fc:a1:dd:82:81:4b:26:1c:8a:06:f0:ff:10:48:36:5e:
5b:8a:11:35:2b:1b:a2:49:d7:ea:e1:f8:b2:dc:8d:0e:5e:33:
fd:6d:5e:18:45:ed:91:5e:82:d9:f0:94:97:da:2b:17:e6:57:
94:b3:30:f4:ca:1f:b6:7b:43:12:e0:d0:5b:ab:81:c7:dc:53:
2f:40:27:e8
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUSiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEwMDk1ODE4WhcNMjUwNDAzMDk1ODE4WjAYMRYw
FAYDVQQDEw02N2NlYjdiZS0xYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz975/c5hTMMTtP3vww1w66UQUAqXRq6m1ewGSfjOm2erHCCTV3MSRxef
QwosF2wVgthA5sEQDVKkg74hfF1mF5PJAyWHjsI06F5MY2h/7DY36czKCcqnDxYx
BiNqv6h2ADWjMxu8gLiaYFqw5PuzZKhrx6lxJ5bbtEYhRtWmhAwSjlURUfacbTsC
4GyvP5rrCwbFR+08nfCc44x3zid4/f9QZlvXNymLOJyxC2+142sTipBmJ0A4J86+
a5i6NuK3GjeK+dRxxpXSDblTqxvjQpj/9z78lBryNMPDBIusJpEm2BQIdr9pCjJs
ZTsndJ50a4QectZot2xAKwl+gsmIpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSh
JlmBXvl72pcdIID8CtRzoeZeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzdENUYxQUZEOTYxMUVGOTM2QTQ5QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLcJAAwQCLcXkMA0GCSqGSIb3
DQEBCwUAA4IBAQB+u6i6SjuIMP6CZKYnHBTY5e1f7s04qn4tuvpg6vIYtVKdOaUr
elkXWfe8o2TElSPuCy6ERFY+L4ecQsBri1bvGe8quS8KjwwMPzmmG7IvhVPNLqyR
TyYYaGrXZUtzVD+TH9YHAPrsuMt0q1kZAE1R+LSrwQQkhayVNMI9Hbo8XK0NG6mv
obaPW0rzjoh8rMxuiydlyuQWlbmGRTZheobVij8HI47bTONMxdbbRqAZ/OHuAM6W
7Pyh3YKBSyYcigbw/xBINl5bihE1KxuiSdfq4fiy3I0OXjP9bV4YRe2RXoLZ8JSX
2isX5leUszD0yh+2e0MS4NBbq4HH3FMvQCfo
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:26 2025 by rpki-client