Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7DA0CCC9A511EF9F409566762E951A.roa
File: 4B7DA0CCC9A511EF9F409566762E951A.roa (raw, json)
Hash identifier: hYyaQ5nkCo34jCsVge1NFoW4dR09mRYJoopW7YJJIgI=
Subject key identifier: 32:2F:27:B0:79:7A:78:40:ED:93:BF:F3:BF:39:82:79:CF:DA:50:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7DA0CCC9A511EF9F409566762E951A.roa
Signing time: Fri 03 Jan 2025 07:35:24 +0000
ROA not before: Fri 03 Jan 2025 07:35:21 +0000
ROA not after: Sat 18 Jan 2025 07:35:21 +0000
asID: 54801
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63107 (0xf683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:35:21 2025 GMT
Not After : Jan 18 07:35:21 2025 GMT
Subject: CN=6777933c-38e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:b7:50:cc:52:e5:a4:cb:30:ed:82:68:75:
48:b8:22:d1:5c:14:ba:2f:71:84:59:81:db:7f:73:
4b:4f:0f:db:a1:c0:f9:1a:14:d2:f4:f5:c8:65:5b:
92:89:8d:7e:e7:7c:63:ac:55:29:27:b1:1d:24:2f:
c8:84:3a:80:07:20:f8:66:f4:83:b5:e8:16:80:53:
69:29:a7:06:41:7b:d6:cd:02:66:30:80:3b:a1:65:
9f:60:e9:cf:54:9c:ec:ec:38:dd:d1:6a:11:de:93:
47:5e:34:4d:3d:0e:08:74:c2:33:e3:e3:aa:4b:76:
30:52:fc:08:02:a8:d2:9d:27:5b:93:10:5c:f1:88:
59:0d:e8:0f:03:5b:f5:22:4e:d4:3c:a1:31:62:da:
2d:68:ec:11:2d:c0:34:c0:b8:3c:41:7e:0e:f7:49:
07:79:2b:3f:a9:15:03:15:19:61:84:3a:c1:f3:43:
a7:3e:63:fa:06:25:cb:3f:3f:d6:82:7c:22:0a:44:
f4:d6:23:33:67:45:e5:a9:10:72:6c:8b:26:7f:41:
a3:c0:b9:13:ab:f8:c4:d8:40:31:83:42:08:73:c0:
11:7e:2a:45:97:20:ac:14:6e:b3:ea:a5:62:55:e1:
d6:7f:e1:ee:1a:d4:d9:8d:6f:d6:ef:57:a0:54:f3:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:27:B0:79:7A:78:40:ED:93:BF:F3:BF:39:82:79:CF:DA:50:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B7DA0CCC9A511EF9F409566762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:d9:1a:14:9c:56:b5:53:10:49:5a:5a:a1:a7:2e:a0:fc:92:
98:ec:44:bc:48:d6:02:a7:15:ce:f2:f9:d9:71:b6:0a:db:21:
b3:e4:46:9c:a5:71:01:3e:ab:45:29:b3:60:a1:19:ba:d5:88:
91:b4:6c:22:e0:03:5d:53:e2:7b:18:48:8b:df:f1:a3:d9:69:
96:48:4e:82:5e:51:69:62:cd:05:26:50:51:3e:dd:5b:4e:44:
aa:c8:a5:81:9d:88:12:f6:3b:d2:ab:d1:13:05:be:00:b0:01:
97:ab:55:fd:62:57:13:6c:8f:2a:37:bd:e2:fe:a4:cf:04:18:
1a:76:4b:f3:68:26:06:5f:e8:b5:14:5b:90:b7:52:4e:20:e0:
68:07:61:00:30:68:c3:d4:e2:a8:8d:29:4a:59:cb:97:76:bf:
34:c7:b3:26:e4:b1:ff:6c:e1:1e:0f:44:52:25:20:86:4d:e5:
8a:0e:76:cc:33:0f:11:33:c9:31:92:d1:ef:66:84:fd:f2:b3:
58:15:f9:d1:b2:55:26:15:b6:ac:50:1a:10:7d:8b:29:46:9a:
2e:8d:58:0f:70:26:19:2f:6c:a2:a5:f7:7f:d7:bd:d3:33:5e:
74:d5:d8:e6:01:75:75:24:61:47:2d:c8:0c:f6:b3:11:b7:f8:
63:87:d7:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPaDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDczNTIxWhcNMjUwMTE4MDczNTIxWjAYMRYw
FAYDVQQDEw02Nzc3OTMzYy0zOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzeW3UMxS5aTLMO2CaHVIuCLRXBS6L3GEWYHbf3NLTw/bocD5GhTS9PXI
ZVuSiY1+53xjrFUpJ7EdJC/IhDqAByD4ZvSDtegWgFNpKacGQXvWzQJmMIA7oWWf
YOnPVJzs7Djd0WoR3pNHXjRNPQ4IdMIz4+OqS3YwUvwIAqjSnSdbkxBc8YhZDegP
A1v1Ik7UPKExYtotaOwRLcA0wLg8QX4O90kHeSs/qRUDFRlhhDrB80OnPmP6BiXL
Pz/WgnwiCkT01iMzZ0XlqRBybIsmf0GjwLkTq/jE2EAxg0IIc8ARfipFlyCsFG6z
6qViVeHWf+HuGtTZjW/W71egVPPvAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDIv
J7B5enhA7ZO/8785gnnP2lByMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QjdEQTBDQ0M5QTUxMUVGOUY0MDk1NjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcnwMA0GCSqGSIb3DQEBCwUA
A4IBAQAq2RoUnFa1UxBJWlqhpy6g/JKY7ES8SNYCpxXO8vnZcbYK2yGz5EacpXEB
PqtFKbNgoRm61YiRtGwi4ANdU+J7GEiL3/Gj2WmWSE6CXlFpYs0FJlBRPt1bTkSq
yKWBnYgS9jvSq9ETBb4AsAGXq1X9YlcTbI8qN73i/qTPBBgadkvzaCYGX+i1FFuQ
t1JOIOBoB2EAMGjD1OKojSlKWcuXdr80x7Mm5LH/bOEeD0RSJSCGTeWKDnbMMw8R
M8kxktHvZoT98rNYFfnRslUmFbasUBoQfYspRpoujVgPcCYZL2yipfd/173TM150
1djmAXV1JGFHLcgM9rMRt/hjh9c3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:08 2025 by rpki-client