Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDD6ECCBEB011EF941F4454762E951A.roa
File: 6DDD6ECCBEB011EF941F4454762E951A.roa (raw, json)
Hash identifier: L6gXDEoOWb81PCMTVAtu0k2XoEUkcuW0CYwTGHKqb2U=
Subject key identifier: 37:4A:3C:4F:AD:D9:13:30:6D:D8:45:0F:47:7D:04:E4:53:1E:17:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDD6ECCBEB011EF941F4454762E951A.roa
Signing time: Fri 20 Dec 2024 08:57:24 +0000
ROA not before: Fri 20 Dec 2024 08:57:20 +0000
ROA not after: Sat 25 Jan 2025 08:57:20 +0000
asID: 6079
IP address blocks: 45.203.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59205 (0xe745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:57:20 2024 GMT
Not After : Jan 25 08:57:20 2025 GMT
Subject: CN=67653174-ef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:db:47:a8:04:5d:47:90:db:9e:6f:83:e8:
76:25:51:4f:36:a0:25:ef:96:fb:d8:55:49:b3:0a:
e3:8a:61:27:dd:f3:72:18:c1:93:af:b5:a9:9d:11:
f3:dc:d0:36:ce:d0:36:9f:4c:41:79:17:ce:c0:9a:
7f:dc:00:63:27:5d:f8:0b:6a:96:24:10:cc:09:6d:
61:bb:6e:d7:0f:d7:b5:9c:5d:cf:8e:d8:ca:96:48:
30:3a:8a:e6:42:a4:eb:2c:80:4f:8c:fd:0a:48:fe:
da:ba:54:c5:07:66:bf:b4:0d:b6:fa:42:3f:7c:d9:
40:56:d0:09:fe:45:d6:03:1e:75:3a:aa:00:38:5b:
08:c8:cb:4d:9a:19:89:e3:4d:14:1b:9f:1b:a0:a7:
ac:28:c0:ab:ac:dc:73:45:b4:a4:d2:65:b8:43:63:
02:3f:01:0d:10:0d:ee:9d:ae:e5:87:1e:13:89:d6:
f1:92:86:e6:db:d6:78:ce:8e:c1:e3:6a:7c:75:4a:
6c:bb:55:05:a5:00:e4:c3:7d:c1:a1:50:88:f4:74:
19:e0:d5:67:76:3e:ae:d3:c1:ff:80:61:e5:a9:b0:
be:23:7c:fc:6f:4e:cf:db:8b:5a:28:df:2e:38:c6:
6c:81:5f:73:07:86:e4:a6:72:98:31:e0:bf:d6:15:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:3C:4F:AD:D9:13:30:6D:D8:45:0F:47:7D:04:E4:53:1E:17:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDD6ECCBEB011EF941F4454762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.222.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:27:aa:ad:9d:c0:5d:8a:01:57:ac:0b:cb:69:ac:0f:d6:e4:
f7:9e:5e:2d:d1:78:8c:ab:ea:a3:f0:b4:e6:db:22:6e:bf:a5:
9e:0d:9a:70:04:d8:b5:fb:48:ca:3b:5d:8a:83:77:59:76:3f:
38:f3:6c:52:3c:57:47:de:a1:60:3d:6e:67:55:3e:54:52:05:
c3:51:5c:be:9d:5c:74:83:f6:45:c2:54:60:60:3b:50:08:61:
72:dd:3e:f0:5a:31:e2:f1:86:a5:0c:3c:2a:54:fb:4a:1f:4f:
0f:7f:7d:f9:c4:05:68:de:59:1c:3d:13:23:3f:33:39:e9:49:
95:79:bc:68:ae:ac:ec:95:2b:17:5a:90:99:c1:52:0c:0a:0e:
59:b3:0b:d6:42:67:1d:1d:fb:55:25:66:e0:a8:2c:5f:5d:2a:
0e:b1:7e:c1:ea:15:d2:5c:25:89:4c:02:0a:a6:f8:01:d4:7a:
30:7e:78:4d:ef:71:b4:a7:b9:30:5d:40:47:06:35:fc:11:a2:
c1:5d:d2:c8:c7:2c:bb:c6:ad:a2:e8:dd:89:5c:19:88:38:de:
b6:68:96:6a:b1:12:1e:c6:52:e4:68:60:78:5c:5b:85:9f:f3:
22:06:c6:2d:a6:51:f1:57:b9:7d:53:96:cd:4b:e7:ec:ee:ec:
f8:0e:6f:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOdFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDg1NzIwWhcNMjUwMTI1MDg1NzIwWjAYMRYw
FAYDVQQDEw02NzY1MzE3NC1lZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnkTbR6gEXUeQ255vg+h2JVFPNqAl75b72FVJswrjimEn3fNyGMGTr7Wp
nRHz3NA2ztA2n0xBeRfOwJp/3ABjJ134C2qWJBDMCW1hu27XD9e1nF3PjtjKlkgw
OormQqTrLIBPjP0KSP7aulTFB2a/tA22+kI/fNlAVtAJ/kXWAx51OqoAOFsIyMtN
mhmJ400UG58boKesKMCrrNxzRbSk0mW4Q2MCPwENEA3una7lhx4Tidbxkobm29Z4
zo7B42p8dUpsu1UFpQDkw33BoVCI9HQZ4NVndj6u08H/gGHlqbC+I3z8b07P24ta
KN8uOMZsgV9zB4bkpnKYMeC/1hXkTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDdK
PE+t2RMwbdhFD0d9BORTHhcZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RERENkVDQ0JFQjAxMUVGOTQxRjQ0NTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcveMA0GCSqGSIb3DQEBCwUA
A4IBAQCqJ6qtncBdigFXrAvLaawP1uT3nl4t0XiMq+qj8LTm2yJuv6WeDZpwBNi1
+0jKO12Kg3dZdj8482xSPFdH3qFgPW5nVT5UUgXDUVy+nVx0g/ZFwlRgYDtQCGFy
3T7wWjHi8YalDDwqVPtKH08Pf335xAVo3lkcPRMjPzM56UmVebxorqzslSsXWpCZ
wVIMCg5ZswvWQmcdHftVJWbgqCxfXSoOsX7B6hXSXCWJTAIKpvgB1HowfnhN73G0
p7kwXUBHBjX8EaLBXdLIxyy7xq2i6N2JXBmION62aJZqsRIexlLkaGB4XFuFn/Mi
BsYtplHxV7l9U5bNS+fs7uz4Dm9Q
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:19 2025 by rpki-client