Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B554DE45A811EF8E78C67C762E951A.roa
File: 51B554DE45A811EF8E78C67C762E951A.roa (raw, json)
Hash identifier: ujyGLYDwPYzv4dNLnrZVBHTlOyAUNcdpSsAyr5dxcAk=
Subject key identifier: 5A:F6:50:5E:D0:10:29:D3:08:85:C8:7E:BA:2C:AB:39:F9:32:59:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B554DE45A811EF8E78C67C762E951A.roa
Signing time: Fri 19 Jul 2024 08:24:30 +0000
ROA not before: Fri 19 Jul 2024 08:24:27 +0000
ROA not after: Mon 29 Jul 2024 08:24:27 +0000
asID: 138630
IP address blocks: 45.204.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40356 (0x9da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:24:27 2024 GMT
Not After : Jul 29 08:24:27 2024 GMT
Subject: CN=669a22be-6819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:01:50:a3:45:67:f9:02:16:c9:ce:49:46:
29:75:b3:b1:7d:43:40:e2:f3:ed:3f:58:49:a0:69:
4e:d6:df:05:05:02:1e:38:30:e4:7f:83:dc:ba:c5:
b8:84:2a:72:b1:13:28:9d:82:35:ab:ba:82:3c:eb:
f4:53:f2:74:cb:08:c6:c6:86:d2:92:1a:0f:3a:0e:
3a:d8:29:80:5e:e9:fb:ba:c9:72:26:83:b2:5a:b3:
ee:28:0c:25:67:bb:c1:a4:54:75:d1:89:1d:a6:da:
0b:2d:6d:98:9a:c9:46:49:7c:71:07:c5:2a:22:a1:
fb:de:2a:5e:90:c8:5b:2c:df:cc:eb:7b:89:51:c0:
6d:ce:f8:ac:1e:26:31:7e:b1:5c:0a:b6:01:d3:0d:
9f:78:1d:bd:8c:00:cb:94:a9:ee:28:0e:b0:1d:7c:
41:e6:5f:0b:45:1d:6c:e9:6c:bd:7f:10:b5:27:b9:
cc:95:22:92:02:85:64:5c:c2:2d:f4:fb:64:e8:28:
b6:44:8c:dd:43:1a:67:c5:e7:e1:e7:22:bb:09:1b:
ad:95:24:fe:60:4b:57:4b:a3:36:f5:13:a6:d6:19:
60:3f:f7:6c:71:f2:b3:26:52:53:4a:0c:81:ca:9a:
4e:9c:79:aa:52:60:e1:86:5f:de:a7:68:b2:58:0d:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:50:5E:D0:10:29:D3:08:85:C8:7E:BA:2C:AB:39:F9:32:59:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51B554DE45A811EF8E78C67C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.86.0/24
Signature Algorithm: sha256WithRSAEncryption
31:22:98:4e:f7:b5:9a:d6:2b:13:2e:2a:b4:04:35:a6:34:f9:
21:72:f8:65:5b:46:5e:88:fe:14:f8:b2:f5:5e:b4:46:64:1f:
e5:6d:83:16:b7:02:f0:c6:c1:c7:86:75:98:88:2a:88:25:33:
24:16:d8:0e:02:ed:92:96:1b:3c:90:8c:61:ac:85:f1:16:e4:
36:97:e1:97:5a:b0:41:5d:23:45:c9:72:be:65:20:96:9a:8f:
b2:8b:dc:73:c1:d3:90:50:e3:8e:7a:3c:5f:f2:bb:47:71:9c:
0d:e9:70:11:bc:01:59:6e:72:cf:c3:1d:b8:75:8a:a9:95:af:
40:69:15:0e:6c:ac:e0:96:aa:f6:b1:d9:57:a8:0c:e0:e8:2e:
dd:42:38:fa:5b:55:8e:01:0f:ab:c1:ea:c1:59:bc:51:66:29:
d6:d8:d5:7c:26:d6:18:44:13:d1:ad:36:72:00:8c:33:95:0f:
2d:bd:91:22:e8:12:38:c1:b4:7b:55:8c:6f:db:09:59:75:30:
2c:4f:8d:36:5f:61:72:c4:2f:72:56:2d:db:a5:8f:1c:cf:8e:
aa:0b:05:a0:34:4d:7c:18:95:9d:2c:3c:86:80:a2:79:c6:dd:
79:bc:a1:4f:10:5d:c5:4b:66:6e:ed:26:4f:20:74:fd:72:ae:
19:ef:74:63
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ2kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE5MDgyNDI3WhcNMjQwNzI5MDgyNDI3WjAYMRYw
FAYDVQQDEw02NjlhMjJiZS02ODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvWUBUKNFZ/kCFsnOSUYpdbOxfUNA4vPtP1hJoGlO1t8FBQIeODDkf4Pc
usW4hCpysRMonYI1q7qCPOv0U/J0ywjGxobSkhoPOg462CmAXun7uslyJoOyWrPu
KAwlZ7vBpFR10YkdptoLLW2YmslGSXxxB8UqIqH73ipekMhbLN/M63uJUcBtzvis
HiYxfrFcCrYB0w2feB29jADLlKnuKA6wHXxB5l8LRR1s6Wy9fxC1J7nMlSKSAoVk
XMIt9Ptk6Ci2RIzdQxpnxefh5yK7CRutlST+YEtXS6M29ROm1hlgP/dscfKzJlJT
SgyByppOnHmqUmDhhl/ep2iyWA1I9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFr2
UF7QECnTCIXIfrosqzn5MlndMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MUI1NTRERTQ1QTgxMUVGOEU3OEM2N0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxWMA0GCSqGSIb3DQEBCwUA
A4IBAQAxIphO97Wa1isTLiq0BDWmNPkhcvhlW0ZeiP4U+LL1XrRGZB/lbYMWtwLw
xsHHhnWYiCqIJTMkFtgOAu2Slhs8kIxhrIXxFuQ2l+GXWrBBXSNFyXK+ZSCWmo+y
i9xzwdOQUOOOejxf8rtHcZwN6XARvAFZbnLPwx24dYqpla9AaRUObKzglqr2sdlX
qAzg6C7dQjj6W1WOAQ+rwerBWbxRZinW2NV8JtYYRBPRrTZyAIwzlQ8tvZEi6BI4
wbR7VYxv2wlZdTAsT402X2FyxC9yVi3bpY8cz46qCwWgNE18GJWdLDyGgKJ5xt15
vKFPEF3FS2Zu7SZPIHT9cq4Z73Rj
-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org