Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAB73FACF6711EFB440F77F762E951A.roa
File: 5EAB73FACF6711EFB440F77F762E951A.roa (raw, json)
Hash identifier: 19VDO6BNn/S0110XuyOoGPrNcIqYaND7evmxlCNcnPU=
Subject key identifier: C2:3A:28:63:17:CA:3E:5A:B6:03:C4:BB:CE:E7:5C:A6:3A:F5:31:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010577
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAB73FACF6711EFB440F77F762E951A.roa
Signing time: Fri 10 Jan 2025 15:27:15 +0000
ROA not before: Fri 10 Jan 2025 15:27:11 +0000
ROA not after: Fri 24 Jan 2025 15:27:11 +0000
asID: 21859
IP address blocks: 45.204.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66935 (0x10577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 15:27:11 2025 GMT
Not After : Jan 24 15:27:11 2025 GMT
Subject: CN=67813c53-b1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:9d:f3:06:30:e5:6b:17:5c:75:25:ae:74:
a8:0f:1b:89:4a:73:a6:fb:8b:d0:f0:3c:08:63:f0:
1b:8a:9d:04:da:82:f3:55:07:fb:95:ae:20:cb:e7:
94:80:e0:69:05:99:8f:49:e3:bd:6a:64:fe:be:06:
30:30:0c:4b:39:38:b3:70:c3:e3:36:36:4d:95:3c:
f8:0b:27:97:05:e3:77:6a:5b:36:13:60:f6:18:88:
34:a0:3c:31:81:60:e3:85:50:58:72:ed:ff:35:f2:
b8:4b:af:16:c2:0c:46:bd:6f:26:dd:83:34:78:49:
46:d3:3c:8e:f2:42:d6:02:62:fe:3d:b9:f2:93:af:
08:6a:73:11:c1:c9:0d:a3:d1:06:c6:1e:54:e9:e6:
d6:21:5e:c4:92:d5:ec:24:d6:a8:a0:3a:a8:b8:af:
42:1d:06:17:0a:ee:60:94:61:a1:aa:0d:55:36:36:
70:fc:a3:de:96:23:01:49:37:24:43:02:38:ae:e2:
31:42:35:bb:4a:1d:3b:0c:bb:e6:ed:c3:0a:57:63:
12:79:d5:13:d1:1f:e2:9a:e5:06:bf:94:4e:b2:e1:
4e:46:f4:47:8f:a7:e5:46:6b:e6:ca:3b:62:00:6b:
c4:52:e7:cc:8d:1a:52:df:11:bc:16:75:cb:46:a3:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:28:63:17:CA:3E:5A:B6:03:C4:BB:CE:E7:5C:A6:3A:F5:31:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EAB73FACF6711EFB440F77F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
54:31:18:fc:da:91:8a:8d:58:f1:a9:ae:d0:49:d6:e4:d9:a1:
40:c6:2b:ce:ec:c6:f8:59:62:df:53:45:d0:26:f4:32:90:c6:
8b:04:d2:07:50:f1:82:80:5f:d6:78:29:7c:ba:88:6f:66:86:
fc:c1:86:f7:73:4c:47:e1:66:95:70:a9:53:93:a7:73:07:33:
3b:2a:a1:74:7a:ad:78:80:7c:1b:12:03:10:1d:4a:2c:79:94:
c2:52:1f:bf:ae:63:1d:1e:be:37:df:71:a2:d3:cd:a4:b8:b2:
14:4d:ab:ea:46:47:8a:56:cc:a4:73:4f:f6:de:23:07:d3:4b:
82:ef:d4:83:74:40:8e:a2:8e:41:6e:54:18:4b:5b:56:2e:0e:
44:09:fa:99:ed:e8:c9:56:23:fc:f8:6f:bb:e3:6f:76:aa:fc:
d3:5a:1c:b3:26:89:02:12:c8:59:62:e7:72:00:dd:60:4e:23:
51:03:12:4a:f2:67:9a:43:5f:10:cd:c3:2c:06:01:8e:16:49:
ca:30:bf:61:12:1a:9d:42:2b:a6:96:f2:23:d6:be:b8:9a:c7:
50:88:bd:c5:9b:7e:7c:ab:ff:71:e2:75:b9:11:39:02:0b:e8:
a1:46:54:67:72:eb:b7:72:71:c4:94:fb:3f:49:96:92:f4:87:
dc:e6:4f:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQV3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMTUyNzExWhcNMjUwMTI0MTUyNzExWjAYMRYw
FAYDVQQDEw02NzgxM2M1My1iMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3hOd8wYw5WsXXHUlrnSoDxuJSnOm+4vQ8DwIY/Abip0E2oLzVQf7la4g
y+eUgOBpBZmPSeO9amT+vgYwMAxLOTizcMPjNjZNlTz4CyeXBeN3als2E2D2GIg0
oDwxgWDjhVBYcu3/NfK4S68WwgxGvW8m3YM0eElG0zyO8kLWAmL+Pbnyk68IanMR
wckNo9EGxh5U6ebWIV7EktXsJNaooDqouK9CHQYXCu5glGGhqg1VNjZw/KPeliMB
STckQwI4ruIxQjW7Sh07DLvm7cMKV2MSedUT0R/imuUGv5ROsuFORvRHj6flRmvm
yjtiAGvEUufMjRpS3xG8FnXLRqMvCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMI6
KGMXyj5atgPEu87nXKY69TF+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RUFCNzNGQUNGNjcxMUVGQjQ0MEY3N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxNMA0GCSqGSIb3DQEBCwUA
A4IBAQBUMRj82pGKjVjxqa7QSdbk2aFAxivO7Mb4WWLfU0XQJvQykMaLBNIHUPGC
gF/WeCl8uohvZob8wYb3c0xH4WaVcKlTk6dzBzM7KqF0eq14gHwbEgMQHUoseZTC
Uh+/rmMdHr4333Gi082kuLIUTavqRkeKVsykc0/23iMH00uC79SDdECOoo5BblQY
S1tWLg5ECfqZ7ejJViP8+G+74292qvzTWhyzJokCEshZYudyAN1gTiNRAxJK8mea
Q18QzcMsBgGOFknKML9hEhqdQiumlvIj1r64msdQiL3Fm358q/9x4nW5ETkCC+ih
RlRncuu3cnHElPs/SZaS9Ifc5k99
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:23 2025 by rpki-client