Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F6DE04B92711EF865E5D86762E951A.roa
File: 36F6DE04B92711EF865E5D86762E951A.roa (raw, json)
Hash identifier: Gc1jQ3RPcmy55IXAaBde0t+QUc/zGU5h2ELN3DSlv9M=
Subject key identifier: 90:09:30:7D:1D:56:5E:9B:98:31:CB:07:27:15:53:5F:63:33:23:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E315
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F6DE04B92711EF865E5D86762E951A.roa
Signing time: Fri 13 Dec 2024 07:52:35 +0000
ROA not before: Fri 13 Dec 2024 07:52:31 +0000
ROA not after: Sat 25 Jan 2025 07:52:31 +0000
asID: 62240
IP address blocks: 45.192.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58133 (0xe315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:52:31 2024 GMT
Not After : Jan 25 07:52:31 2025 GMT
Subject: CN=675be7c3-143d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:c9:49:39:45:f4:4d:80:f5:1d:bd:a6:46:
03:33:2f:22:3e:cd:31:9c:83:9d:2f:b9:c7:00:c2:
d0:16:c2:c9:47:57:a5:ad:77:a9:2b:40:c9:6d:3e:
f7:a2:02:f8:03:51:85:6d:7e:ba:c7:72:a8:4a:96:
67:38:23:3e:5d:20:91:fd:47:d3:28:bf:75:6e:41:
e6:78:89:45:65:62:64:00:3c:84:37:51:ea:dd:6a:
76:d7:ca:b3:5e:73:07:48:fd:6f:3e:c0:ac:a2:1e:
d7:2c:fb:55:8f:fa:ca:4f:9e:2a:55:96:38:9d:f3:
32:35:e7:e5:1b:f2:ef:3e:f1:90:29:26:0e:76:6e:
17:53:15:b5:95:51:60:ed:6f:79:ad:fc:cb:1d:eb:
f2:c8:2c:5e:59:f3:a1:09:3f:ea:e9:1d:81:b7:56:
19:22:05:c8:96:b0:a1:2c:f6:49:fc:4e:52:39:21:
02:50:66:63:74:07:f4:d5:e5:57:47:f2:12:fd:a8:
7f:02:92:7d:81:db:61:4e:b2:62:c9:93:e6:74:6f:
f7:f1:61:03:94:17:19:f1:47:06:72:61:a0:28:ce:
65:87:14:49:2a:a4:d3:55:86:67:a5:a3:bf:23:26:
a8:1e:6e:47:8e:6c:e3:9a:d6:a1:5e:43:0d:a6:e9:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:30:7D:1D:56:5E:9B:98:31:CB:07:27:15:53:5F:63:33:23:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36F6DE04B92711EF865E5D86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
51:40:71:27:9d:97:d4:37:1b:b5:99:06:26:85:5e:27:ef:05:
4d:6a:0c:f8:63:ff:be:44:92:cb:a3:7a:b2:94:74:9a:8a:1c:
55:34:97:47:ec:08:0e:ec:5e:62:da:f9:9a:0b:26:4b:86:72:
87:ff:58:e9:5b:a8:a8:50:0d:e6:80:19:6d:6c:e0:ef:8d:7d:
f9:da:f0:09:0a:2b:22:e3:33:3b:39:d3:bc:fc:ba:92:e6:81:
1a:d9:43:5b:3b:5f:22:69:89:66:e1:01:01:1d:63:4f:98:6f:
32:ca:b2:a7:51:a3:1b:2c:1b:05:17:5a:1d:54:07:b1:be:36:
16:86:cf:a4:7f:8a:98:83:5e:7f:82:b2:51:c4:d3:6c:48:88:
62:f3:9c:d5:59:0c:9d:27:bb:34:de:33:3f:dc:b8:5d:9a:5b:
ef:63:ae:7f:d1:89:5e:10:b6:67:73:55:e8:ec:67:98:2d:07:
f7:cd:d7:bf:03:fd:5f:fe:0f:3a:f4:54:fb:35:d5:85:c2:47:
67:06:62:5a:57:c6:dc:c4:68:5b:01:61:43:d7:d8:c7:fd:a9:
70:2b:46:12:a3:00:2b:fa:c0:d8:68:8b:57:f4:e3:1f:24:70:
c3:e9:34:d4:c1:19:e3:03:6e:b3:87:da:31:41:1c:80:23:f0:
87:38:b5:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOMVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDc1MjMxWhcNMjUwMTI1MDc1MjMxWjAYMRYw
FAYDVQQDEw02NzViZTdjMy0xNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx9vJSTlF9E2A9R29pkYDMy8iPs0xnIOdL7nHAMLQFsLJR1elrXepK0DJ
bT73ogL4A1GFbX66x3KoSpZnOCM+XSCR/UfTKL91bkHmeIlFZWJkADyEN1Hq3Wp2
18qzXnMHSP1vPsCsoh7XLPtVj/rKT54qVZY4nfMyNeflG/LvPvGQKSYOdm4XUxW1
lVFg7W95rfzLHevyyCxeWfOhCT/q6R2Bt1YZIgXIlrChLPZJ/E5SOSECUGZjdAf0
1eVXR/IS/ah/ApJ9gdthTrJiyZPmdG/38WEDlBcZ8UcGcmGgKM5lhxRJKqTTVYZn
paO/IyaoHm5HjmzjmtahXkMNpulHlwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJAJ
MH0dVl6bmDHLBycVU19jMyMSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNkY2REUwNEI5MjcxMUVGODY1RTVEODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcAgMA0GCSqGSIb3DQEBCwUA
A4IBAQBRQHEnnZfUNxu1mQYmhV4n7wVNagz4Y/++RJLLo3qylHSaihxVNJdH7AgO
7F5i2vmaCyZLhnKH/1jpW6ioUA3mgBltbODvjX352vAJCisi4zM7OdO8/LqS5oEa
2UNbO18iaYlm4QEBHWNPmG8yyrKnUaMbLBsFF1odVAexvjYWhs+kf4qYg15/grJR
xNNsSIhi85zVWQydJ7s03jM/3LhdmlvvY65/0YleELZnc1Xo7GeYLQf3zde/A/1f
/g869FT7NdWFwkdnBmJaV8bcxGhbAWFD19jH/alwK0YSowAr+sDYaItX9OMfJHDD
6TTUwRnjA26zh9oxQRyAI/CHOLWI
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:30 2025 by rpki-client