Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A702BCC038A11EFBFC3B141017001B1.roa
File: 5A702BCC038A11EFBFC3B141017001B1.roa (raw, json)
Hash identifier: vBlRfYAuQmT+ejpHOyVjZYJ50DI9tCBx4YilhaUbfqs=
Subject key identifier: 0A:B9:47:99:2F:9D:26:D8:53:31:07:5F:7F:87:46:AF:9D:C3:A9:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A702BCC038A11EFBFC3B141017001B1.roa
Signing time: Fri 26 Apr 2024 05:03:43 +0000
ROA not before: Fri 26 Apr 2024 05:03:39 +0000
ROA not after: Sun 05 May 2024 05:03:39 +0000
asID: 141883
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34246 (0x85c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:03:39 2024 GMT
Not After : May 5 05:03:39 2024 GMT
Subject: CN=662b35af-4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:61:8b:e5:3a:3c:36:eb:7a:ca:db:55:19:
3b:a6:1e:43:86:f1:7e:ca:80:2e:4f:1f:cb:dd:e9:
b4:f9:4f:fb:f8:dc:cf:06:69:1b:9d:11:58:55:6a:
74:6c:61:d8:fa:4a:ea:ac:85:7e:0c:1c:a6:1e:03:
7b:8d:fb:70:6f:7c:96:a8:55:63:e5:f9:e0:7f:fb:
9f:13:25:cb:0a:56:f5:4a:89:b3:ce:a1:4c:74:4d:
62:a4:2f:29:16:f3:21:44:a4:c2:9a:e5:5c:c7:70:
fb:a2:e6:cd:97:05:bc:71:d6:f1:6b:c2:4f:f6:30:
aa:a7:2c:a4:52:37:e5:a5:43:85:5b:01:99:9c:d9:
96:d9:93:6b:89:9d:2f:1d:56:4d:ae:fe:45:84:bc:
06:d3:b9:24:1f:f2:ce:b4:42:45:43:c2:c8:ff:58:
86:53:37:75:10:ac:c7:47:25:68:bc:e3:9e:93:cc:
11:5c:36:16:af:33:52:ae:cf:a6:e2:8c:e1:21:e1:
77:0a:f2:e9:35:0b:db:b1:f9:fa:31:15:03:21:ea:
5d:73:8a:b1:6a:cb:20:f3:a2:41:4b:c1:8d:7c:c7:
07:42:e6:35:4a:3d:95:40:30:5f:90:cc:ff:2b:cf:
dc:c2:be:31:c4:20:00:e3:b2:a7:43:ae:71:d4:3c:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:47:99:2F:9D:26:D8:53:31:07:5F:7F:87:46:AF:9D:C3:A9:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A702BCC038A11EFBFC3B141017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:57:9c:42:a9:19:dd:f3:e2:45:72:7c:17:da:7f:3d:42:41:
be:5e:6d:2d:e9:bf:b2:4e:19:e9:09:b4:ef:38:4f:5d:a6:54:
c7:56:74:7a:15:ff:72:05:c9:bc:ce:64:e6:82:20:74:04:fc:
ea:5e:e7:70:cf:40:36:76:70:ce:bb:1d:4c:2f:be:da:47:54:
aa:8e:77:ed:ff:69:82:43:84:dc:96:71:2f:80:b6:87:6e:1f:
bc:ab:d3:96:77:65:e4:20:69:01:c7:3c:c8:f8:3b:14:e3:c6:
b4:5c:89:af:b3:05:27:62:6d:89:49:6e:29:b1:bb:88:13:e9:
da:2c:ba:89:d1:50:9a:b2:f7:d0:ec:8a:5e:18:e1:a5:a7:d5:
60:e9:c5:1a:64:0a:e3:15:28:6b:3d:52:57:7e:74:f4:52:45:
f1:a8:19:06:18:8d:1c:fe:a3:bf:9d:af:65:b9:ca:3a:52:22:
ab:04:b7:43:de:50:59:11:7f:2c:c8:cb:d0:f2:d8:b0:da:31:
da:bf:5e:30:65:f3:66:6b:f7:df:d0:29:a5:dc:0c:4f:17:27:
d9:9a:30:5f:49:9d:2e:cf:6e:38:2b:c0:27:8d:a0:49:37:81:
7d:5c:d2:42:85:9b:90:03:6d:bd:dc:a3:e5:c2:2d:f7:a6:50:
c7:1a:5e:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIXGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDUwMzM5WhcNMjQwNTA1MDUwMzM5WjAYMRYw
FAYDVQQDEw02NjJiMzVhZi00OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8phi+U6PDbresrbVRk7ph5DhvF+yoAuTx/L3em0+U/7+NzPBmkbnRFY
VWp0bGHY+krqrIV+DBymHgN7jftwb3yWqFVj5fngf/ufEyXLClb1SomzzqFMdE1i
pC8pFvMhRKTCmuVcx3D7oubNlwW8cdbxa8JP9jCqpyykUjflpUOFWwGZnNmW2ZNr
iZ0vHVZNrv5FhLwG07kkH/LOtEJFQ8LI/1iGUzd1EKzHRyVovOOek8wRXDYWrzNS
rs+m4ozhIeF3CvLpNQvbsfn6MRUDIepdc4qxassg86JBS8GNfMcHQuY1Sj2VQDBf
kMz/K8/cwr4xxCAA47KnQ65x1Dx21QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAq5
R5kvnSbYUzEHX3+HRq+dw6lIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QTcwMkJDQzAzOEExMUVGQkZDM0IxNDEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcwAMA0GCSqGSIb3DQEBCwUA
A4IBAQChV5xCqRnd8+JFcnwX2n89QkG+Xm0t6b+yThnpCbTvOE9dplTHVnR6Ff9y
Bcm8zmTmgiB0BPzqXudwz0A2dnDOux1ML77aR1Sqjnft/2mCQ4TclnEvgLaHbh+8
q9OWd2XkIGkBxzzI+DsU48a0XImvswUnYm2JSW4psbuIE+naLLqJ0VCasvfQ7Ipe
GOGlp9Vg6cUaZArjFShrPVJXfnT0UkXxqBkGGI0c/qO/na9luco6UiKrBLdD3lBZ
EX8syMvQ8tiw2jHav14wZfNma/ff0Cml3AxPFyfZmjBfSZ0uz244K8AnjaBJN4F9
XNJChZuQA2293KPlwi33plDHGl5o
-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org