Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F661FC4BEB111EFA045715A762E951A.roa
File: 4F661FC4BEB111EFA045715A762E951A.roa (raw, json)
Hash identifier: HzViGzzviFSl2c33LPnsuZEzSU5+lU1ZvCJePw+yw6o=
Subject key identifier: 77:76:2A:BA:D5:20:E4:DF:07:CC:D6:09:09:6F:1C:12:35:31:6B:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E74F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F661FC4BEB111EFA045715A762E951A.roa
Signing time: Fri 20 Dec 2024 09:03:42 +0000
ROA not before: Fri 20 Dec 2024 09:03:38 +0000
ROA not after: Sat 25 Jan 2025 09:03:38 +0000
asID: 6079
IP address blocks: 45.205.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59215 (0xe74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:03:38 2024 GMT
Not After : Jan 25 09:03:38 2025 GMT
Subject: CN=676532ee-287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:12:fb:5c:2a:56:fd:69:90:75:96:ac:8c:
d6:48:32:c4:ea:8f:7d:84:67:17:96:e2:a6:54:9d:
1c:62:96:63:a0:73:8c:80:cf:b6:95:28:ab:28:17:
19:5a:c1:64:46:94:c7:f8:ef:98:85:e3:b8:1d:c1:
6b:67:b7:1d:3b:c6:d6:11:77:81:56:26:12:a0:4a:
bc:6c:08:f2:7f:94:99:4b:18:5f:88:24:d9:e3:ff:
c6:1c:e0:63:68:34:b1:74:72:58:65:b0:aa:d9:7d:
52:23:8a:b5:45:2f:51:1d:0f:00:d5:79:40:3b:3d:
70:d4:9f:e7:b3:ab:ce:5e:9a:26:2e:f5:43:db:e1:
ab:4d:4c:6d:53:3d:66:12:35:6a:12:da:8c:1f:e9:
56:2c:84:3e:47:6b:c1:5a:39:d7:69:8d:8e:6e:df:
fb:d9:27:f7:96:dc:a1:b2:bc:5b:42:f8:d1:fc:a7:
3a:7c:48:f4:89:9b:b5:c0:23:d0:4f:8b:4e:cf:10:
5d:4e:d7:07:58:79:95:94:11:6d:bb:2c:52:b7:11:
ae:12:37:45:06:77:41:5c:a8:90:08:1b:e2:4c:0d:
8f:18:67:a1:44:eb:45:64:59:82:73:b0:33:68:17:
d2:d6:35:74:d2:9b:94:21:ae:7e:23:ff:44:1a:2a:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:2A:BA:D5:20:E4:DF:07:CC:D6:09:09:6F:1C:12:35:31:6B:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F661FC4BEB111EFA045715A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:1e:5f:e5:4c:55:ed:3f:8e:62:39:b3:e8:66:55:ae:83:02:
df:9d:5e:49:e4:29:1e:f1:0a:6d:df:f5:3e:3f:f8:fb:b7:00:
df:e9:67:c9:3d:1e:d9:63:42:68:ac:64:df:69:aa:86:43:e1:
94:e3:6f:07:1f:57:86:58:f4:dc:df:65:82:9b:c9:14:c6:df:
86:e0:99:a6:05:65:5c:29:5c:1f:21:1b:7f:58:33:fa:29:79:
47:4d:5d:6c:3e:7c:63:d1:13:e9:6f:36:ec:a0:d1:dc:55:58:
50:3b:fe:ee:e8:b7:e0:f4:af:d0:c7:ca:85:76:74:b8:b4:11:
69:72:0a:10:3f:b6:a4:65:65:ab:2e:ff:ac:b3:a1:ce:80:c6:
37:86:92:a1:9e:f8:73:40:16:03:65:89:76:be:7d:5b:d4:b3:
6d:be:f3:9b:3f:9a:0a:46:b8:fa:a1:e2:44:d2:50:74:52:dd:
fd:a4:52:cf:a6:ef:68:e6:c2:9b:27:7e:4d:b6:1e:7b:fc:59:
8e:37:bc:65:c3:df:c2:a9:c6:63:34:4b:98:4c:74:24:24:eb:
c3:fe:8d:8f:ee:47:41:38:2c:a2:b9:fa:13:21:e7:e5:bc:59:
63:cb:86:d2:f6:45:bd:6c:d9:04:11:9b:cb:58:00:cc:fa:a1:
b1:11:af:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOdPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDkwMzM4WhcNMjUwMTI1MDkwMzM4WjAYMRYw
FAYDVQQDEw02NzY1MzJlZS0yODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAze4S+1wqVv1pkHWWrIzWSDLE6o99hGcXluKmVJ0cYpZjoHOMgM+2lSir
KBcZWsFkRpTH+O+YheO4HcFrZ7cdO8bWEXeBViYSoEq8bAjyf5SZSxhfiCTZ4//G
HOBjaDSxdHJYZbCq2X1SI4q1RS9RHQ8A1XlAOz1w1J/ns6vOXpomLvVD2+GrTUxt
Uz1mEjVqEtqMH+lWLIQ+R2vBWjnXaY2Obt/72Sf3ltyhsrxbQvjR/Kc6fEj0iZu1
wCPQT4tOzxBdTtcHWHmVlBFtuyxStxGuEjdFBndBXKiQCBviTA2PGGehROtFZFmC
c7AzaBfS1jV00puUIa5+I/9EGiqFOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHd2
KrrVIOTfB8zWCQlvHBI1MWsOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RjY2MUZDNEJFQjExMUVGQTA0NTcxNUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc1uMA0GCSqGSIb3DQEBCwUA
A4IBAQChHl/lTFXtP45iObPoZlWugwLfnV5J5Cke8Qpt3/U+P/j7twDf6WfJPR7Z
Y0JorGTfaaqGQ+GU428HH1eGWPTc32WCm8kUxt+G4JmmBWVcKVwfIRt/WDP6KXlH
TV1sPnxj0RPpbzbsoNHcVVhQO/7u6Lfg9K/Qx8qFdnS4tBFpcgoQP7akZWWrLv+s
s6HOgMY3hpKhnvhzQBYDZYl2vn1b1LNtvvObP5oKRrj6oeJE0lB0Ut39pFLPpu9o
5sKbJ35Nth57/FmON7xlw9/CqcZjNEuYTHQkJOvD/o2P7kdBOCyiufoTIeflvFlj
y4bS9kW9bNkEEZvLWADM+qGxEa/a
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:45 2025 by rpki-client