Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47BBEE4CCE8911EFBA0F1D7E762E951A.roa
File: 47BBEE4CCE8911EFBA0F1D7E762E951A.roa (raw, json)
Hash identifier: 2fzZhxVZA92qFkLZsUifbIHiw+PkebJ2J84dNwSeriE=
Subject key identifier: 55:7D:93:FE:04:41:28:72:D6:38:95:14:C6:A3:C1:B9:E5:7A:5C:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47BBEE4CCE8911EFBA0F1D7E762E951A.roa
Signing time: Thu 09 Jan 2025 12:57:28 +0000
ROA not before: Thu 09 Jan 2025 12:57:24 +0000
ROA not after: Tue 21 Jan 2025 12:57:24 +0000
asID: 142032
IP address blocks: 45.192.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66528 (0x103e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:57:24 2025 GMT
Not After : Jan 21 12:57:24 2025 GMT
Subject: CN=677fc7b8-1bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:a4:e9:b0:71:61:e3:0a:06:21:1c:68:ac:
ed:e9:54:69:19:e3:9d:46:d9:ac:9a:a4:4a:a1:72:
5b:d5:4c:bc:c7:9d:b2:ae:8d:88:a2:65:a4:c3:a7:
9c:2f:99:a5:d7:f3:15:d3:a1:11:5a:5d:ea:90:97:
67:f8:95:3f:45:12:80:ed:15:f1:ec:99:17:c4:2e:
84:6f:05:ff:64:60:79:27:4f:aa:c6:42:9f:9a:fc:
43:41:ab:f8:c2:34:5c:04:ed:82:a5:6a:43:98:8a:
7a:ce:f7:1d:d2:d5:38:c1:ae:00:d0:cc:f9:08:53:
a9:2d:64:b5:1c:a2:84:3c:af:7f:b8:29:b9:eb:18:
07:ba:a8:e4:36:c6:b1:91:07:1b:c7:e1:6d:ff:ee:
71:7d:52:ff:58:44:bd:22:9d:8a:fe:f8:15:d3:57:
5b:70:82:4f:2c:f8:d1:ad:85:7d:86:8c:3a:a3:c5:
9a:22:93:e2:b0:6f:b5:c8:65:1a:b8:ce:44:56:be:
17:ce:f7:d8:28:aa:3a:e7:5a:2e:60:c7:dd:8d:d4:
7b:a5:11:e2:94:b5:ef:11:de:e2:5f:d9:d8:e9:5d:
db:a3:49:6d:68:ee:da:46:84:81:a1:db:3a:db:cf:
80:d4:85:66:ac:9c:11:5f:b1:20:f9:20:a2:9c:d1:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:93:FE:04:41:28:72:D6:38:95:14:C6:A3:C1:B9:E5:7A:5C:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47BBEE4CCE8911EFBA0F1D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/21
Signature Algorithm: sha256WithRSAEncryption
27:e4:08:2f:78:8f:3c:a4:e0:42:af:84:7a:d9:f8:18:74:d2:
bb:06:ba:1c:a2:11:f1:61:ba:42:dc:30:46:f4:3a:7e:8f:59:
6e:51:36:c0:b5:5b:2f:48:50:c3:54:61:f0:de:90:f3:82:fb:
e0:7a:a1:12:80:c1:66:23:1f:d4:fa:70:9a:32:68:87:8e:cb:
d2:ea:7c:a5:5c:ca:93:7e:97:a0:7a:f5:ef:31:2d:01:64:8c:
7e:b7:86:74:f6:6a:08:49:a3:85:a1:c5:29:72:e7:2f:09:2c:
5a:a1:dd:af:a5:65:00:77:e8:29:a1:25:ee:4c:de:02:17:b9:
c9:e7:a4:05:1b:3b:00:14:b1:24:18:18:f2:a3:2b:8c:48:99:
a6:af:b3:1f:c5:b9:5d:af:d6:96:90:aa:b7:ea:0f:0b:da:59:
43:0f:e4:cf:e3:28:a3:96:61:90:fb:1a:38:18:51:be:c6:a7:
ad:e9:14:0c:8a:0e:04:d0:0b:18:a0:0d:6e:62:6e:f2:f6:9e:
bc:ff:3f:b0:35:87:5f:57:b7:52:ec:c4:56:72:62:ae:22:88:
e0:96:f6:0f:e2:e1:e0:3d:67:d4:03:c1:c1:bd:96:63:d3:c8:
b0:64:dd:65:7d:a9:c1:03:03:b7:70:3b:c5:19:8e:f0:b8:c4:
76:2c:85:11
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQPgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTI1NzI0WhcNMjUwMTIxMTI1NzI0WjAYMRYw
FAYDVQQDEw02NzdmYzdiOC0xYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSik6bBxYeMKBiEcaKzt6VRpGeOdRtmsmqRKoXJb1Uy8x52yro2IomWk
w6ecL5ml1/MV06ERWl3qkJdn+JU/RRKA7RXx7JkXxC6EbwX/ZGB5J0+qxkKfmvxD
Qav4wjRcBO2CpWpDmIp6zvcd0tU4wa4A0Mz5CFOpLWS1HKKEPK9/uCm56xgHuqjk
NsaxkQcbx+Ft/+5xfVL/WES9Ip2K/vgV01dbcIJPLPjRrYV9how6o8WaIpPisG+1
yGUauM5EVr4XzvfYKKo651ouYMfdjdR7pRHilLXvEd7iX9nY6V3bo0ltaO7aRoSB
ods628+A1IVmrJwRX7Eg+SCinNHdHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFV9
k/4EQShy1jiVFMajwbnlelwPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80N0JCRUU0Q0NFODkxMUVGQkEwRjFEN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcBgMA0GCSqGSIb3DQEBCwUA
A4IBAQAn5AgveI88pOBCr4R62fgYdNK7BrocohHxYbpC3DBG9Dp+j1luUTbAtVsv
SFDDVGHw3pDzgvvgeqESgMFmIx/U+nCaMmiHjsvS6nylXMqTfpegevXvMS0BZIx+
t4Z09moISaOFocUpcucvCSxaod2vpWUAd+gpoSXuTN4CF7nJ56QFGzsAFLEkGBjy
oyuMSJmmr7Mfxbldr9aWkKq36g8L2llDD+TP4yijlmGQ+xo4GFG+xqet6RQMig4E
0AsYoA1uYm7y9p68/z+wNYdfV7dS7MRWcmKuIojglvYP4uHgPWfUA8HBvZZj08iw
ZN1lfanBAwO3cDvFGY7wuMR2LIUR
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:34 2025 by rpki-client