Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4603F222039411EFB1595113017001B1.roa
File: 4603F222039411EFB1595113017001B1.roa (raw, json)
Hash identifier: Rgos954JIS3xASJnUasSS+oNJHlcYLPdiG8ATConVbc=
Subject key identifier: 6C:63:8F:4A:7E:66:A5:5A:A3:76:86:D9:51:5A:ED:B8:62:1F:68:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 864C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4603F222039411EFB1595113017001B1.roa
Signing time: Fri 26 Apr 2024 06:14:44 +0000
ROA not before: Fri 26 Apr 2024 06:14:40 +0000
ROA not after: Sun 05 May 2024 06:14:40 +0000
asID: 139646
IP address blocks: 45.201.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34380 (0x864c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:14:40 2024 GMT
Not After : May 5 06:14:40 2024 GMT
Subject: CN=662b4654-a8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:09:00:23:4a:ca:39:0d:1a:16:88:53:ba:
e2:d9:d4:49:9b:eb:8e:1a:14:21:a6:1a:80:dc:12:
38:b8:59:52:71:69:fe:9f:67:31:f0:da:48:0a:e4:
03:cf:2c:18:87:29:bb:87:f4:31:82:60:e7:88:0a:
a2:37:e9:0f:57:ce:04:cc:73:56:f5:cf:a6:ba:c8:
99:a1:f7:28:be:a6:5e:aa:2b:36:a1:14:7d:3b:8e:
d0:38:a1:ff:58:33:bd:73:34:4e:a2:03:f9:16:2e:
6f:49:ff:3b:eb:e9:61:f0:b7:d9:35:88:20:b4:e7:
62:22:98:d8:08:f7:ef:82:9a:28:95:a1:e9:10:ea:
6c:e5:c7:e5:20:09:27:29:ad:1d:ff:10:af:dd:54:
f8:42:50:c5:ae:dc:57:47:83:c0:91:34:71:b9:b9:
18:24:4a:57:1a:67:e4:bd:d6:32:b4:bf:e7:b7:a7:
96:3c:22:68:61:7a:6b:79:6d:e3:07:40:4a:d7:f3:
57:1f:62:81:7d:d7:4c:41:47:54:9d:d4:93:3b:0a:
32:11:69:6c:b3:00:92:af:61:e4:b0:7b:ea:98:94:
d5:0f:c7:26:98:ae:e4:47:3b:f1:8d:07:28:0f:41:
5d:b7:95:ed:b8:43:7d:f9:a5:f0:86:d5:02:86:86:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:8F:4A:7E:66:A5:5A:A3:76:86:D9:51:5A:ED:B8:62:1F:68:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4603F222039411EFB1595113017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.246.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:af:85:c2:49:39:c6:ce:24:c7:cf:af:81:c8:42:35:e7:f3:
13:07:c1:cd:1a:53:27:5e:0d:93:0c:b6:d1:46:ad:bb:ef:e7:
af:51:58:8a:6a:ae:bc:0e:fe:8a:00:97:dc:80:35:af:1d:9e:
a1:ab:64:83:fa:f2:d5:23:48:be:be:67:9c:cb:e4:02:89:b3:
96:57:a3:43:f9:81:f6:41:30:f9:d2:15:75:ab:07:7c:64:9b:
9f:72:8e:a0:02:f9:31:1b:96:cf:1e:6d:20:ae:87:a3:63:70:
ed:6a:c4:f4:92:12:ef:de:6f:02:57:6a:63:cb:d4:0b:b5:64:
ee:86:68:78:f3:5f:d8:e2:60:77:a9:d9:84:bb:15:a0:2b:8c:
ba:fe:d6:02:52:9e:d4:80:85:23:26:63:41:3f:ac:00:2d:46:
3e:58:21:ae:3d:0f:fb:55:ed:73:25:e6:86:6f:de:71:bc:9a:
f6:1a:80:49:71:17:c1:f9:39:10:16:14:f0:7a:7c:f2:81:6b:
4e:33:75:be:52:36:05:28:1a:cf:1d:b2:70:ea:e5:c9:6f:25:
25:4b:d3:ef:9c:c2:42:e0:eb:be:c9:f9:c8:b7:3c:6c:ec:f7:
54:16:17:a6:b0:8d:f2:5d:23:d2:4e:4c:7f:74:1c:6f:d0:1d:
54:c3:8a:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIZMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDYxNDQwWhcNMjQwNTA1MDYxNDQwWjAYMRYw
FAYDVQQDEw02NjJiNDY1NC1hOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqA0JACNKyjkNGhaIU7ri2dRJm+uOGhQhphqA3BI4uFlScWn+n2cx8NpI
CuQDzywYhym7h/QxgmDniAqiN+kPV84EzHNW9c+musiZofcovqZeqis2oRR9O47Q
OKH/WDO9czROogP5Fi5vSf876+lh8LfZNYggtOdiIpjYCPfvgpoolaHpEOps5cfl
IAknKa0d/xCv3VT4QlDFrtxXR4PAkTRxubkYJEpXGmfkvdYytL/nt6eWPCJoYXpr
eW3jB0BK1/NXH2KBfddMQUdUndSTOwoyEWlsswCSr2HksHvqmJTVD8cmmK7kRzvx
jQcoD0Fdt5XtuEN9+aXwhtUChoaTcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGxj
j0p+ZqVao3aG2VFa7bhiH2jfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NjAzRjIyMjAzOTQxMUVGQjE1OTUxMTMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcn2MA0GCSqGSIb3DQEBCwUA
A4IBAQAtr4XCSTnGziTHz6+ByEI15/MTB8HNGlMnXg2TDLbRRq277+evUViKaq68
Dv6KAJfcgDWvHZ6hq2SD+vLVI0i+vmecy+QCibOWV6ND+YH2QTD50hV1qwd8ZJuf
co6gAvkxG5bPHm0groejY3DtasT0khLv3m8CV2pjy9QLtWTuhmh481/Y4mB3qdmE
uxWgK4y6/tYCUp7UgIUjJmNBP6wALUY+WCGuPQ/7Ve1zJeaGb95xvJr2GoBJcRfB
+TkQFhTwenzygWtOM3W+UjYFKBrPHbJw6uXJbyUlS9PvnMJC4Ou+yfnItzxs7PdU
FhemsI3yXSPSTkx/dBxv0B1Uw4pT
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org