Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7024FACA377311EF902D0E7E762E951A.roa
File: 7024FACA377311EF902D0E7E762E951A.roa (raw, json)
Hash identifier: lvDFVprAAavvgYakr984b+6wNzapfySjVSTvSg39hE4=
Subject key identifier: 9E:2F:87:3C:81:B0:30:20:49:9B:F3:D5:F8:45:7F:70:FC:FB:83:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7024FACA377311EF902D0E7E762E951A.roa
Signing time: Mon 01 Jul 2024 06:30:41 +0000
ROA not before: Mon 01 Jul 2024 06:30:38 +0000
ROA not after: Wed 31 Jul 2024 06:30:38 +0000
asID: 398823
IP address blocks: 45.205.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38608 (0x96d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:30:38 2024 GMT
Not After : Jul 31 06:30:38 2024 GMT
Subject: CN=66824d11-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:db:42:3a:02:33:df:74:75:a1:d9:96:e7:
c7:f5:59:be:a6:30:60:52:d2:ca:f3:2f:e2:96:fb:
1a:fd:9d:f0:93:66:ad:e4:ae:75:db:e7:bc:b1:50:
56:4d:81:59:a7:67:c6:ce:c0:bf:fd:0f:d6:70:80:
7c:da:13:47:92:ef:0a:c1:f7:c8:5e:fa:a0:32:c3:
71:d9:38:c8:8d:bb:37:92:21:97:3a:c3:f3:17:42:
47:c6:b4:73:2f:64:88:e9:f5:76:3e:d2:6c:fb:27:
3a:da:6b:a9:bb:b3:24:f7:99:93:fd:10:23:ca:b8:
a1:4c:fe:0a:02:91:34:57:ef:69:70:b4:fa:79:64:
ba:7c:17:43:2f:6e:69:a9:d9:b6:4a:cb:e6:d9:ac:
65:91:bd:e7:38:f8:bb:5e:b4:39:fa:8b:9e:43:2e:
1e:2d:e2:3d:5b:ce:fb:05:22:64:b4:ed:f6:c6:ab:
e6:bd:4a:43:c6:d9:f8:43:30:0c:12:17:8f:da:a1:
08:6d:b3:92:a0:f9:cb:63:c5:7c:a7:db:5d:95:64:
89:97:00:26:cf:59:c2:f8:03:fa:cd:20:e4:d8:84:
5f:b9:b2:83:16:91:6b:34:f6:42:bd:11:06:dc:34:
11:01:1c:4b:bb:f0:f8:ad:29:25:e5:9a:f0:81:6d:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:87:3C:81:B0:30:20:49:9B:F3:D5:F8:45:7F:70:FC:FB:83:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7024FACA377311EF902D0E7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:b9:22:b6:91:57:a7:e2:ee:21:80:4c:0d:2e:56:38:97:24:
9f:31:2f:a8:74:7f:cc:b7:54:b9:e1:b0:8b:19:7d:bb:ad:36:
a1:15:6c:40:de:5c:93:ad:a9:0e:c5:ae:37:48:68:e5:01:1a:
73:a8:13:91:41:63:7a:14:40:36:2a:da:8a:47:d7:dd:7e:74:
f0:46:bb:52:97:37:e2:df:9a:4d:c5:75:6c:0d:a3:f1:3e:3c:
71:4e:f3:76:e4:7a:8b:b1:02:fe:c5:ba:9f:a8:4d:5c:34:f5:
0a:02:77:01:15:57:67:ac:4b:81:71:e7:de:ec:c3:ff:13:33:
c6:9f:3f:17:e3:f1:8e:17:b3:8f:61:c3:28:f0:35:81:f3:71:
4c:26:87:fa:76:af:22:db:cd:58:92:9c:6c:3b:d5:d8:d4:c5:
13:0d:13:7d:af:f9:d5:e4:d7:20:26:de:3e:1b:56:83:86:24:
73:93:a7:da:b8:e1:7f:f7:61:e9:e9:e6:58:f7:75:6e:5b:09:
50:30:62:25:cf:e3:3b:36:25:fc:c6:7c:ef:08:78:e1:a1:ea:
f2:8f:16:4b:62:b2:55:9a:19:a8:f8:d1:e2:d1:12:11:89:e1:
a3:d4:c1:df:83:1c:6d:54:a8:07:4f:a3:39:d6:4f:a6:d1:ff:
42:93:8b:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJbQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAxMDYzMDM4WhcNMjQwNzMxMDYzMDM4WjAYMRYw
FAYDVQQDEw02NjgyNGQxMS04YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqm7bQjoCM990daHZlufH9Vm+pjBgUtLK8y/ilvsa/Z3wk2at5K512+e8
sVBWTYFZp2fGzsC//Q/WcIB82hNHku8KwffIXvqgMsNx2TjIjbs3kiGXOsPzF0JH
xrRzL2SI6fV2PtJs+yc62mupu7Mk95mT/RAjyrihTP4KApE0V+9pcLT6eWS6fBdD
L25pqdm2Ssvm2axlkb3nOPi7XrQ5+oueQy4eLeI9W877BSJktO32xqvmvUpDxtn4
QzAMEheP2qEIbbOSoPnLY8V8p9tdlWSJlwAmz1nC+AP6zSDk2IRfubKDFpFrNPZC
vREG3DQRARxLu/D4rSkl5ZrwgW1urwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ4v
hzyBsDAgSZvz1fhFf3D8+4PTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MDI0RkFDQTM3NzMxMUVGOTAyRDBFN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc3wMA0GCSqGSIb3DQEBCwUA
A4IBAQAfuSK2kVen4u4hgEwNLlY4lySfMS+odH/Mt1S54bCLGX27rTahFWxA3lyT
rakOxa43SGjlARpzqBORQWN6FEA2KtqKR9fdfnTwRrtSlzfi35pNxXVsDaPxPjxx
TvN25HqLsQL+xbqfqE1cNPUKAncBFVdnrEuBcefe7MP/EzPGnz8X4/GOF7OPYcMo
8DWB83FMJof6dq8i281YkpxsO9XY1MUTDRN9r/nV5NcgJt4+G1aDhiRzk6fauOF/
92Hp6eZY93VuWwlQMGIlz+M7NiX8xnzvCHjhoeryjxZLYrJVmhmo+NHi0RIRieGj
1MHfgxxtVKgHT6M51k+m0f9Ck4v/
-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org