Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAD894ACACD11EF9BEBC5AC762E951A.roa
File: 3BAD894ACACD11EF9BEBC5AC762E951A.roa (raw, json)
Hash identifier: BJ1X5vqWHJejCUq3ou5mo/5qdUPSWE9G5uBxfDoREmY=
Subject key identifier: D9:FD:BE:2C:6A:4B:95:4B:ED:5B:0B:68:98:B3:78:CA:DD:F0:BA:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F762
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAD894ACACD11EF9BEBC5AC762E951A.roa
Signing time: Sat 04 Jan 2025 18:53:49 +0000
ROA not before: Sun 05 Jan 2025 18:53:45 +0000
ROA not after: Fri 17 Jan 2025 18:53:45 +0000
asID: 21859
IP address blocks: 45.204.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63330 (0xf762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:53:45 2025 GMT
Not After : Jan 17 18:53:45 2025 GMT
Subject: CN=677983bd-3142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:6e:0d:bd:19:40:6c:e0:d6:c3:f1:b9:49:
49:f5:69:47:20:8b:29:df:a5:24:fa:c4:39:c6:f3:
3b:4c:71:9c:e3:9b:07:65:fc:6d:38:b2:ef:ce:cb:
b3:1f:85:eb:93:c3:fd:e8:a1:e2:92:f1:2b:af:b2:
d0:be:eb:0e:df:1c:ed:52:27:bb:4d:27:30:fe:4d:
46:67:52:cd:3a:80:5d:04:49:7a:08:05:c1:f7:9e:
cc:f7:b2:1a:7b:7d:5a:86:e1:af:3b:44:81:f0:2f:
a2:7d:1b:ea:34:c8:cd:ce:f3:6e:50:db:78:a4:81:
b8:4c:e0:1a:33:77:5c:33:a0:05:ed:ff:c1:de:69:
c4:83:a2:67:43:2c:e6:e3:db:f8:2e:ed:a2:34:3e:
47:35:aa:71:c2:af:11:ed:63:12:d5:c5:b1:f2:8f:
5d:86:74:1a:ed:6c:68:03:ac:36:c0:10:ee:74:e2:
21:78:2e:b1:c6:95:f7:40:c7:b3:bb:71:f9:e9:c5:
01:07:5f:a8:b2:b9:56:ab:f7:1b:79:f1:46:2d:e9:
02:d2:f9:4d:3c:38:09:89:1e:55:ea:ae:21:c0:c7:
50:15:f9:bc:09:4e:f3:28:73:93:6c:63:48:35:92:
84:78:ec:11:0b:83:8c:0e:c1:f6:bb:de:64:81:33:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:BE:2C:6A:4B:95:4B:ED:5B:0B:68:98:B3:78:CA:DD:F0:BA:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BAD894ACACD11EF9BEBC5AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b0:10:67:77:86:71:cc:3b:ba:82:03:cc:43:1c:7d:b0:4c:
c3:99:99:ca:61:74:87:c5:1e:7d:26:c5:37:61:dd:e3:88:fb:
11:79:24:af:53:77:27:a3:0e:6b:1a:bf:1e:47:16:3e:ca:5d:
45:1e:b2:bd:9f:13:3e:75:d6:97:0f:c7:d0:4d:2a:19:fd:c2:
8d:67:f8:5c:3a:6c:78:66:e2:1f:80:8c:59:b2:99:83:d3:54:
c2:9e:3f:1f:e8:92:37:87:31:94:97:de:6c:d2:e0:c7:60:e8:
bb:1e:19:58:67:ce:9a:f0:43:89:e9:a9:5d:3d:22:3e:22:b9:
63:ec:ab:56:a0:bb:c1:40:c4:14:6e:2f:8f:93:dc:8f:e9:e7:
97:ad:05:6f:01:b9:ba:81:4e:87:75:a5:dc:7d:84:1d:f0:ea:
eb:51:0c:1f:7b:2e:f1:90:4a:d5:25:e5:bc:9e:a5:fa:7e:7f:
b8:9f:2f:72:15:e3:1c:a1:01:46:82:51:8b:4b:b6:d5:ea:03:
45:53:94:4b:f8:e0:86:4a:aa:70:2c:89:9e:4a:ab:d2:5a:24:
26:7f:06:99:a8:e9:c5:19:b1:1c:00:d3:e9:83:3a:74:20:cb:
cc:e0:82:5d:9e:70:cf:33:34:aa:6a:68:39:05:ec:21:42:a6:
a3:5a:71:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPdiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTg1MzQ1WhcNMjUwMTE3MTg1MzQ1WjAYMRYw
FAYDVQQDEw02Nzc5ODNiZC0zMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAviluDb0ZQGzg1sPxuUlJ9WlHIIsp36Uk+sQ5xvM7THGc45sHZfxtOLLv
zsuzH4Xrk8P96KHikvErr7LQvusO3xztUie7TScw/k1GZ1LNOoBdBEl6CAXB957M
97Iae31ahuGvO0SB8C+ifRvqNMjNzvNuUNt4pIG4TOAaM3dcM6AF7f/B3mnEg6Jn
Qyzm49v4Lu2iND5HNapxwq8R7WMS1cWx8o9dhnQa7WxoA6w2wBDudOIheC6xxpX3
QMezu3H56cUBB1+osrlWq/cbefFGLekC0vlNPDgJiR5V6q4hwMdQFfm8CU7zKHOT
bGNINZKEeOwRC4OMDsH2u95kgTOirwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNn9
vixqS5VL7VsLaJizeMrd8LqIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQkFEODk0QUNBQ0QxMUVGOUJFQkM1QUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxNMA0GCSqGSIb3DQEBCwUA
A4IBAQAHsBBnd4ZxzDu6ggPMQxx9sEzDmZnKYXSHxR59JsU3Yd3jiPsReSSvU3cn
ow5rGr8eRxY+yl1FHrK9nxM+ddaXD8fQTSoZ/cKNZ/hcOmx4ZuIfgIxZspmD01TC
nj8f6JI3hzGUl95s0uDHYOi7HhlYZ86a8EOJ6aldPSI+Irlj7KtWoLvBQMQUbi+P
k9yP6eeXrQVvAbm6gU6HdaXcfYQd8OrrUQwfey7xkErVJeW8nqX6fn+4ny9yFeMc
oQFGglGLS7bV6gNFU5RL+OCGSqpwLImeSqvSWiQmfwaZqOnFGbEcANPpgzp0IMvM
4IJdnnDPMzSqamg5BewhQqajWnG0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:00 2025 by rpki-client