Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67817266CE9711EF88029858762E951A.roa
File: 67817266CE9711EF88029858762E951A.roa (raw, json)
Hash identifier: KMbUhEomXvNXYhQJuH4fl7aUqyalG0mzIv7li75ADMo=
Subject key identifier: 47:15:E1:DB:3A:67:07:BF:48:9F:E9:64:6B:04:C2:84:5B:1D:32:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010404
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67817266CE9711EF88029858762E951A.roa
Signing time: Thu 09 Jan 2025 14:38:34 +0000
ROA not before: Thu 09 Jan 2025 14:38:30 +0000
ROA not after: Thu 23 Jan 2025 14:38:30 +0000
asID: 5065
IP address blocks: 45.207.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66564 (0x10404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 14:38:30 2025 GMT
Not After : Jan 23 14:38:30 2025 GMT
Subject: CN=677fdf6a-9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:2e:bc:bc:55:a3:bf:f0:84:77:22:af:66:
47:ad:f0:43:a6:05:ca:d9:94:80:ff:fb:1f:08:05:
af:35:f4:ea:a1:f0:99:49:2b:8c:31:15:13:61:2b:
ce:5d:b0:d8:22:9b:a1:da:e0:73:2a:5d:5c:e3:34:
25:5d:75:25:bf:8f:cd:77:0a:b8:ca:9c:11:00:46:
9f:a0:83:85:cd:bb:73:56:35:20:60:b2:6e:0e:fb:
e9:dc:ca:b8:90:9f:a6:c5:59:09:cb:f9:c3:0b:a6:
a0:02:9c:58:1e:bb:71:ef:53:24:d1:f4:b0:c8:5b:
c3:d1:ac:6f:04:f0:e7:d9:32:5e:88:55:ce:d9:22:
b6:99:72:d8:a5:93:81:d0:ee:2e:56:dd:d0:63:96:
ee:ed:0c:6e:42:19:74:4d:e9:51:3e:62:59:4a:d6:
f7:39:9e:0c:da:b3:82:56:02:fb:10:7f:42:ec:4a:
d2:61:48:64:62:e4:a5:fa:e4:33:62:e1:e3:62:36:
1f:66:a0:ae:00:72:b7:5a:d4:91:67:40:7b:72:08:
2d:24:83:af:2a:de:08:c2:0c:b9:e3:e4:66:90:41:
03:f1:0b:8e:aa:ea:a0:7d:9d:59:8f:9f:a3:b8:83:
a0:85:02:eb:71:a1:31:72:6a:bd:95:af:67:05:f4:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:E1:DB:3A:67:07:BF:48:9F:E9:64:6B:04:C2:84:5B:1D:32:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67817266CE9711EF88029858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.24.0/21
Signature Algorithm: sha256WithRSAEncryption
43:a9:22:59:69:7d:e5:6c:5c:98:5e:bc:e2:d5:5a:d1:ac:a4:
94:09:a5:c0:a1:c7:ef:cf:fd:5c:5e:c9:0d:60:77:fa:12:54:
ca:8e:bc:15:70:e5:3a:3e:fd:1e:61:9a:0c:ba:ad:65:d4:b7:
f3:e5:76:38:33:21:d8:44:77:92:03:24:00:55:48:98:3d:2a:
bf:5c:5b:3c:3f:1e:a0:ab:bc:78:a9:6d:95:bd:86:cf:1f:db:
a0:6a:1f:72:14:e6:4d:6d:c4:3c:a4:b6:d7:d6:df:4b:97:9d:
04:3c:19:a5:5c:61:a8:0d:76:63:41:e5:23:32:7e:15:f3:08:
81:d4:f2:a2:a8:4f:b8:c4:48:ce:56:4b:f9:85:df:96:3b:e3:
eb:98:a1:c7:91:a8:03:23:05:1e:43:68:61:96:2b:72:eb:ee:
87:97:a3:0d:9b:a8:c9:fe:60:9e:14:18:1d:9e:a8:c5:51:ac:
e7:fd:0d:00:85:42:94:be:cc:a7:17:7b:6a:c7:b0:eb:26:47:
55:c3:b0:4e:ea:67:9f:b9:f3:f2:99:80:67:c2:c4:9e:85:45:
23:c3:57:93:42:db:1c:04:72:c5:2e:7d:c5:54:5b:d2:4f:d9:
07:c8:71:65:74:c2:9e:25:23:db:e6:1a:74:73:d2:36:08:db:
b2:43:07:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQQEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTQzODMwWhcNMjUwMTIzMTQzODMwWjAYMRYw
FAYDVQQDEw02NzdmZGY2YS05YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4UAuvLxVo7/whHcir2ZHrfBDpgXK2ZSA//sfCAWvNfTqofCZSSuMMRUT
YSvOXbDYIpuh2uBzKl1c4zQlXXUlv4/Ndwq4ypwRAEafoIOFzbtzVjUgYLJuDvvp
3Mq4kJ+mxVkJy/nDC6agApxYHrtx71Mk0fSwyFvD0axvBPDn2TJeiFXO2SK2mXLY
pZOB0O4uVt3QY5bu7QxuQhl0TelRPmJZStb3OZ4M2rOCVgL7EH9C7ErSYUhkYuSl
+uQzYuHjYjYfZqCuAHK3WtSRZ0B7cggtJIOvKt4Iwgy54+RmkEED8QuOquqgfZ1Z
j5+juIOghQLrcaExcmq9la9nBfSSiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEcV
4ds6Zwe/SJ/pZGsEwoRbHTKtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzgxNzI2NkNFOTcxMUVGODgwMjk4NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc8YMA0GCSqGSIb3DQEBCwUA
A4IBAQBDqSJZaX3lbFyYXrzi1VrRrKSUCaXAocfvz/1cXskNYHf6ElTKjrwVcOU6
Pv0eYZoMuq1l1Lfz5XY4MyHYRHeSAyQAVUiYPSq/XFs8Px6gq7x4qW2VvYbPH9ug
ah9yFOZNbcQ8pLbX1t9Ll50EPBmlXGGoDXZjQeUjMn4V8wiB1PKiqE+4xEjOVkv5
hd+WO+PrmKHHkagDIwUeQ2hhlity6+6Hl6MNm6jJ/mCeFBgdnqjFUazn/Q0AhUKU
vsynF3tqx7DrJkdVw7BO6mefufPymYBnwsSehUUjw1eTQtscBHLFLn3FVFvST9kH
yHFldMKeJSPb5hp0c9I2CNuyQwc3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:31 2025 by rpki-client