Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F5914B2BEAC11EFADA6A8BA762E951A.roa
File: 6F5914B2BEAC11EFADA6A8BA762E951A.roa (raw, json)
Hash identifier: ZomtN84mAb/1Bh/q2Yz+QJ+m60v4tscWRq4GotP9ljQ=
Subject key identifier: 53:9F:40:86:44:5C:1B:70:CF:03:5C:EF:3C:2B:82:CC:A8:A5:2D:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E727
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F5914B2BEAC11EFADA6A8BA762E951A.roa
Signing time: Fri 20 Dec 2024 08:28:48 +0000
ROA not before: Fri 20 Dec 2024 08:28:45 +0000
ROA not after: Fri 24 Jan 2025 08:28:45 +0000
asID: 395793
IP address blocks: 45.198.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59175 (0xe727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:28:45 2024 GMT
Not After : Jan 24 08:28:45 2025 GMT
Subject: CN=67652ac0-39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:ad:7a:18:f8:b7:6c:e4:a7:56:6e:ae:52:
f0:3f:82:8a:0e:94:4f:ca:3b:17:62:18:08:95:f6:
39:cd:8e:20:ae:18:d1:8b:b5:0c:20:b0:7d:c8:33:
5b:4b:ee:0e:0e:3f:d7:d4:8c:d0:61:86:b7:85:29:
91:fe:27:bd:f4:cd:5c:ab:38:5b:f2:9b:dc:0f:a7:
ce:7f:32:bf:06:94:fb:20:c3:75:36:52:68:f0:e0:
5e:4f:e7:21:c0:9b:a4:b1:98:c4:12:54:86:2a:7d:
82:b2:eb:38:4a:f7:df:34:6e:cb:53:66:4d:87:02:
c5:ee:5d:2a:09:df:15:e5:6a:35:df:e4:4b:dd:9f:
7e:db:ad:e9:7e:3b:77:87:e8:f9:26:0d:07:c2:97:
b9:b0:73:bc:3a:67:0e:90:b5:79:9f:04:a2:4a:7a:
be:d7:4b:4b:64:8d:dd:1a:9f:4c:0d:db:a6:f1:da:
fe:2e:66:4c:fe:a6:25:9e:60:d7:f2:f6:41:09:22:
47:5d:5f:e5:f3:87:24:f5:28:fd:3d:33:1e:f6:37:
fb:cb:72:7a:74:f2:08:16:ba:cf:0e:ff:6b:ac:78:
12:d4:ac:c7:bf:e4:c1:45:6b:2d:d1:76:93:13:75:
54:fc:2c:dd:2d:1d:17:dd:1b:2b:9d:88:b9:4e:d9:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:40:86:44:5C:1B:70:CF:03:5C:EF:3C:2B:82:CC:A8:A5:2D:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F5914B2BEAC11EFADA6A8BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.184.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a7:3f:f5:3c:a1:07:86:41:0a:4d:d3:87:84:76:d2:5d:39:
c6:d3:da:35:37:ca:20:cc:33:e1:66:00:af:45:ec:0d:46:1f:
14:c5:e7:25:99:c4:db:aa:10:45:2a:ef:e3:10:6e:9e:0e:1b:
71:60:8e:4e:2a:59:cd:6f:2a:ac:1a:47:4f:31:d5:02:99:a0:
0a:ba:b9:fa:f1:a1:f6:42:e5:c6:b8:e9:59:65:b9:df:b1:f0:
7a:96:ec:61:63:2e:f2:50:06:81:86:da:d1:59:57:72:e7:fc:
d5:83:cd:8f:b5:92:8d:bc:d3:74:6d:c4:4e:35:f2:23:d8:fe:
49:7a:33:c8:4b:91:09:7d:1c:ff:e5:28:6d:97:e2:a5:9f:78:
f7:93:fe:c7:fd:c4:36:f1:9c:05:03:ec:31:95:bb:11:74:f5:
e4:6b:b5:e2:88:6b:fa:c5:3c:a7:b7:77:e7:56:26:04:19:9c:
c5:2c:5f:7a:82:1c:d4:53:92:fe:8d:0c:ce:1a:82:ad:fc:27:
a7:1b:6a:62:2c:e1:53:31:3b:2e:28:34:ee:71:79:ce:da:b2:
cb:f5:ac:da:85:c8:16:c2:7c:4c:93:eb:63:d5:d2:17:b3:9d:
04:57:17:e0:75:3e:87:83:04:9c:7e:ea:5a:78:29:a1:3b:bd:
6d:fd:32:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOcnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDgyODQ1WhcNMjUwMTI0MDgyODQ1WjAYMRYw
FAYDVQQDEw02NzY1MmFjMC0zOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZKtehj4t2zkp1ZurlLwP4KKDpRPyjsXYhgIlfY5zY4grhjRi7UMILB9
yDNbS+4ODj/X1IzQYYa3hSmR/ie99M1cqzhb8pvcD6fOfzK/BpT7IMN1NlJo8OBe
T+chwJuksZjEElSGKn2Csus4SvffNG7LU2ZNhwLF7l0qCd8V5Wo13+RL3Z9+263p
fjt3h+j5Jg0Hwpe5sHO8OmcOkLV5nwSiSnq+10tLZI3dGp9MDdum8dr+LmZM/qYl
nmDX8vZBCSJHXV/l84ck9Sj9PTMe9jf7y3J6dPIIFrrPDv9rrHgS1KzHv+TBRWst
0XaTE3VU/CzdLR0X3RsrnYi5TtmDvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFOf
QIZEXBtwzwNc7zwrgsyopS2sMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RjU5MTRCMkJFQUMxMUVGQURBNkE4QkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALca4MA0GCSqGSIb3DQEBCwUA
A4IBAQAVpz/1PKEHhkEKTdOHhHbSXTnG09o1N8ogzDPhZgCvRewNRh8UxeclmcTb
qhBFKu/jEG6eDhtxYI5OKlnNbyqsGkdPMdUCmaAKurn68aH2QuXGuOlZZbnfsfB6
luxhYy7yUAaBhtrRWVdy5/zVg82PtZKNvNN0bcRONfIj2P5JejPIS5EJfRz/5Sht
l+Kln3j3k/7H/cQ28ZwFA+wxlbsRdPXka7XiiGv6xTynt3fnViYEGZzFLF96ghzU
U5L+jQzOGoKt/CenG2piLOFTMTsuKDTucXnO2rLL9azahcgWwnxMk+tj1dIXs50E
VxfgdT6HgwScfupaeCmhO71t/TJ3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:46 2025 by rpki-client