Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD8B8E4C9A211EF95012C55762E951A.roa
File: 6DD8B8E4C9A211EF95012C55762E951A.roa (raw, json)
Hash identifier: 9w9wjqqEmBSoWCP849lqZSoUtCYLUX10lzEFVaiBZfE=
Subject key identifier: DD:FA:8F:16:2C:D3:29:B1:32:4C:C2:EC:0B:C8:38:34:CF:42:8C:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F66F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD8B8E4C9A211EF95012C55762E951A.roa
Signing time: Fri 03 Jan 2025 07:14:54 +0000
ROA not before: Fri 03 Jan 2025 07:14:50 +0000
ROA not after: Sat 18 Jan 2025 07:14:50 +0000
asID: 54801
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63087 (0xf66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:14:50 2025 GMT
Not After : Jan 18 07:14:50 2025 GMT
Subject: CN=67778e6e-ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:c0:64:69:c5:3a:c5:67:11:ad:e5:02:76:
e5:93:1f:83:1b:3f:48:83:3c:21:12:b2:2b:6c:3b:
8e:42:81:f7:42:09:9e:3d:be:1b:7d:8e:19:94:f5:
61:a9:58:f9:a5:07:75:4d:37:80:2b:bb:cc:8f:01:
61:7b:3b:c7:0a:21:81:f1:ad:e3:79:2a:4a:cc:72:
89:61:1a:1d:d8:8f:02:d2:10:c5:d4:81:4c:b8:45:
5b:1d:65:d9:86:fd:bb:98:bc:c7:95:3d:5d:ca:80:
40:d9:e6:28:61:59:cc:f6:81:8b:e6:b3:65:17:07:
52:0a:9f:ed:f7:a2:cd:a0:ab:a6:76:2e:8c:2d:b3:
1d:3e:f9:7c:9f:a8:46:ea:7f:0c:c2:b9:2a:6c:35:
83:45:0f:59:40:cb:59:6a:80:08:eb:a3:3f:ca:24:
f6:be:e2:99:41:bc:39:fe:a7:1b:9e:be:6f:73:c3:
7c:d9:61:b8:47:0f:ea:cd:18:d3:81:b5:9a:3a:f6:
b7:2d:69:7f:17:e3:28:9c:1c:7e:be:5d:66:59:f6:
36:cc:8b:92:8a:51:97:1a:e1:f8:e6:70:89:68:df:
58:5a:21:81:54:ce:ac:e3:24:04:19:84:47:22:a6:
e5:48:86:00:97:52:46:72:9a:fb:59:06:98:14:b8:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:8F:16:2C:D3:29:B1:32:4C:C2:EC:0B:C8:38:34:CF:42:8C:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD8B8E4C9A211EF95012C55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:e9:fb:1b:41:09:5b:a8:25:4f:5b:ad:0f:90:77:88:64:b4:
3a:c5:88:e0:94:83:7b:e4:4c:d2:9d:25:89:28:f2:b5:ea:75:
22:fd:03:d4:08:3f:19:ed:ee:da:a1:08:06:9f:b9:fc:e5:ec:
fc:3f:10:fe:6a:88:53:2b:e9:a9:fa:d0:fd:a4:26:5a:30:c6:
25:5f:f8:d3:e6:44:20:66:a5:09:61:ef:0d:14:c1:c3:cb:43:
5f:95:cd:18:29:ae:ad:be:a7:b9:18:f0:cb:7f:ef:bd:a3:ae:
e6:04:18:96:40:92:0b:be:0c:26:35:83:4b:d0:5c:3f:b5:18:
72:65:0f:1f:c6:4b:c0:89:50:a7:a6:70:7f:e5:11:65:2f:3e:
86:ed:43:e2:25:a5:77:60:6d:a8:82:c8:43:2f:73:3c:a0:0e:
c7:f4:b9:05:8e:c2:dd:0c:f1:fd:34:b1:8b:83:85:44:f2:cb:
ea:26:33:36:65:12:ae:13:7c:fb:32:42:46:43:df:07:c2:78:
8f:31:28:ab:b5:d5:b7:52:50:5a:69:f3:d8:60:61:2d:ed:1e:
78:3f:3c:c3:37:33:73:57:21:26:be:04:1c:65:0b:c3:2e:79:
e2:4e:52:26:1f:f6:07:79:0f:d9:32:a6:64:8b:05:61:40:3f:
34:5d:9a:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPZvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDcxNDUwWhcNMjUwMTE4MDcxNDUwWjAYMRYw
FAYDVQQDEw02Nzc3OGU2ZS1jYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyf7AZGnFOsVnEa3lAnblkx+DGz9IgzwhErIrbDuOQoH3QgmePb4bfY4Z
lPVhqVj5pQd1TTeAK7vMjwFhezvHCiGB8a3jeSpKzHKJYRod2I8C0hDF1IFMuEVb
HWXZhv27mLzHlT1dyoBA2eYoYVnM9oGL5rNlFwdSCp/t96LNoKumdi6MLbMdPvl8
n6hG6n8MwrkqbDWDRQ9ZQMtZaoAI66M/yiT2vuKZQbw5/qcbnr5vc8N82WG4Rw/q
zRjTgbWaOva3LWl/F+MonBx+vl1mWfY2zIuSilGXGuH45nCJaN9YWiGBVM6s4yQE
GYRHIqblSIYAl1JGcpr7WQaYFLiBswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN36
jxYs0ymxMkzC7AvIODTPQoyzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82REQ4QjhFNEM5QTIxMUVGOTUwMTJDNTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcgQMA0GCSqGSIb3DQEBCwUA
A4IBAQCj6fsbQQlbqCVPW60PkHeIZLQ6xYjglIN75EzSnSWJKPK16nUi/QPUCD8Z
7e7aoQgGn7n85ez8PxD+aohTK+mp+tD9pCZaMMYlX/jT5kQgZqUJYe8NFMHDy0Nf
lc0YKa6tvqe5GPDLf++9o67mBBiWQJILvgwmNYNL0Fw/tRhyZQ8fxkvAiVCnpnB/
5RFlLz6G7UPiJaV3YG2ogshDL3M8oA7H9LkFjsLdDPH9NLGLg4VE8svqJjM2ZRKu
E3z7MkJGQ98HwniPMSirtdW3UlBaafPYYGEt7R54PzzDNzNzVyEmvgQcZQvDLnni
TlImH/YHeQ/ZMqZkiwVhQD80XZrh
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:52 2025 by rpki-client