Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F995BCCBDD711EF8E1E717D762E951A.roa
File: 3F995BCCBDD711EF8E1E717D762E951A.roa (raw, json)
Hash identifier: d2UkdUoyTZARF48oEqoelXE5z5jqFk35AnXVNaXTA8o=
Subject key identifier: 1E:FF:1B:2A:EE:0D:21:E7:FE:7F:1C:13:C6:9A:68:BC:CE:6D:B2:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F995BCCBDD711EF8E1E717D762E951A.roa
Signing time: Thu 19 Dec 2024 07:02:45 +0000
ROA not before: Thu 19 Dec 2024 07:02:42 +0000
ROA not after: Thu 23 Jan 2025 07:02:42 +0000
asID: 395793
IP address blocks: 45.192.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58793 (0xe5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:02:42 2024 GMT
Not After : Jan 23 07:02:42 2025 GMT
Subject: CN=6763c515-8d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:b6:8a:b4:66:39:78:f8:54:29:55:0f:52:
e5:1f:43:8e:f9:c3:d7:e3:08:24:ca:4b:a6:36:9a:
83:ee:34:cb:da:89:b2:be:fd:f4:c0:da:04:5e:82:
f5:a4:6e:32:ba:55:05:6b:b6:f1:90:3c:82:7f:99:
83:b5:12:82:9f:f7:ba:fd:cb:57:33:af:6a:82:c0:
90:60:8b:e0:75:b8:4e:2a:88:99:c5:40:84:27:57:
b5:87:87:f6:73:6f:3b:29:a5:66:5a:df:c1:a8:d4:
15:e1:9e:49:49:8d:4f:78:7b:a8:bd:dd:03:e0:89:
04:4e:bf:bf:de:5d:af:3f:d5:c7:e3:16:b6:7a:7a:
23:44:8d:f6:73:67:ca:25:16:06:83:38:51:57:f7:
0b:4b:dc:39:38:fc:49:6c:9d:aa:b6:c6:bc:c5:d4:
81:65:a7:dc:02:a3:d3:ca:bd:48:99:8a:6e:d3:f1:
5a:c1:e6:9f:3c:7d:25:1a:04:b9:2b:ad:ea:59:16:
a6:da:7c:eb:86:3e:21:5c:b5:c5:30:1b:bc:5a:bf:
76:6c:96:d9:d1:2e:3f:f8:66:58:6f:89:7e:23:e8:
da:f0:1a:08:d1:14:6d:46:00:8e:bb:cc:e7:32:b1:
68:5c:3b:48:43:4a:71:d5:14:8a:ca:fe:88:a1:a7:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:1B:2A:EE:0D:21:E7:FE:7F:1C:13:C6:9A:68:BC:CE:6D:B2:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F995BCCBDD711EF8E1E717D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
Signature Algorithm: sha256WithRSAEncryption
60:32:1d:8d:e8:89:9c:28:a1:4b:dd:33:c0:b2:72:1d:d4:17:
dc:d3:7d:ef:e9:02:c3:fb:2c:20:41:1d:cb:e1:32:8c:94:2a:
2b:70:4c:2e:14:df:21:ee:4a:fc:03:46:33:2c:52:be:a4:4a:
53:b4:5f:a5:dc:e4:28:c2:19:e5:a8:e9:02:d3:4b:ae:98:c5:
11:13:1c:41:28:e1:20:bc:1b:97:71:e8:15:ab:ca:27:e8:9f:
bc:60:d3:c4:63:3a:40:81:da:53:5c:1c:22:01:51:bf:b4:3e:
36:5f:b9:63:29:ad:f1:e0:77:79:28:bb:5b:bc:c0:25:bc:92:
4c:ab:80:6e:d5:9c:9a:50:21:e8:03:28:67:40:79:49:90:69:
81:de:69:08:93:2e:7c:9b:5f:1b:46:7c:9a:b6:bb:19:ab:d9:
35:4e:99:e9:9b:0e:46:6c:b2:7f:e4:ac:63:e5:1b:67:c0:46:
7f:6f:69:84:c5:1e:59:d2:9d:d6:05:3b:fd:07:d2:2c:72:68:
77:51:f4:6b:04:18:13:59:c9:a9:6b:03:41:70:d4:fa:a1:be:
c3:6a:06:22:a7:11:d3:da:34:65:da:ad:df:c3:68:9d:57:68:
0d:3b:25:7c:fe:35:22:a3:27:be:a1:f0:36:f4:42:22:9c:16:
d9:a9:46:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDcwMjQyWhcNMjUwMTIzMDcwMjQyWjAYMRYw
FAYDVQQDEw02NzYzYzUxNS04ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0a2irRmOXj4VClVD1LlH0OO+cPX4wgkykumNpqD7jTL2omyvv30wNoE
XoL1pG4yulUFa7bxkDyCf5mDtRKCn/e6/ctXM69qgsCQYIvgdbhOKoiZxUCEJ1e1
h4f2c287KaVmWt/BqNQV4Z5JSY1PeHuovd0D4IkETr+/3l2vP9XH4xa2enojRI32
c2fKJRYGgzhRV/cLS9w5OPxJbJ2qtsa8xdSBZafcAqPTyr1ImYpu0/FaweafPH0l
GgS5K63qWRam2nzrhj4hXLXFMBu8Wr92bJbZ0S4/+GZYb4l+I+ja8BoI0RRtRgCO
u8znMrFoXDtIQ0px1RSKyv6IoacUTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB7/
GyruDSHn/n8cE8aaaLzObbKvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRjk5NUJDQ0JERDcxMUVGOEUxRTcxN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcBzMA0GCSqGSIb3DQEBCwUA
A4IBAQBgMh2N6ImcKKFL3TPAsnId1Bfc033v6QLD+ywgQR3L4TKMlCorcEwuFN8h
7kr8A0YzLFK+pEpTtF+l3OQowhnlqOkC00uumMURExxBKOEgvBuXcegVq8on6J+8
YNPEYzpAgdpTXBwiAVG/tD42X7ljKa3x4Hd5KLtbvMAlvJJMq4Bu1ZyaUCHoAyhn
QHlJkGmB3mkIky58m18bRnyatrsZq9k1Tpnpmw5GbLJ/5Kxj5RtnwEZ/b2mExR5Z
0p3WBTv9B9Iscmh3UfRrBBgTWcmpawNBcNT6ob7DagYipxHT2jRl2q3fw2idV2gN
OyV8/jUioye+ofA29EIinBbZqUYM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:37 2025 by rpki-client