Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7407680CC9B411EFBF0B8045762E951A.roa
File: 7407680CC9B411EFBF0B8045762E951A.roa (raw, json)
Hash identifier: lgh5ZP1QkIYv3V0MuDrMsy6Cm/9eNFtDEla05TLT0Kk=
Subject key identifier: 7D:EE:FD:61:45:77:81:A2:DF:FD:DD:57:B5:E9:C8:7B:17:A1:29:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7407680CC9B411EFBF0B8045762E951A.roa
Signing time: Fri 03 Jan 2025 09:23:55 +0000
ROA not before: Fri 03 Jan 2025 09:23:51 +0000
ROA not after: Sat 18 Jan 2025 09:23:51 +0000
asID: 141883
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63177 (0xf6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:23:51 2025 GMT
Not After : Jan 18 09:23:51 2025 GMT
Subject: CN=6777acab-18ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:54:8b:8b:aa:35:a0:29:b1:da:ec:1f:f3:
fa:4a:cc:ce:db:db:73:27:15:91:61:4d:f8:6f:7f:
00:bc:0e:5c:c6:2c:61:41:7b:62:2f:c4:e5:e2:c0:
6c:d6:ae:7e:05:a4:97:89:e3:1d:34:1a:a4:30:af:
38:b8:9d:b1:df:1d:db:13:62:cd:e9:c9:0a:43:8b:
93:ba:92:fa:da:02:10:68:0a:d7:5b:c4:4f:64:87:
6f:d9:39:d0:ef:5a:ae:e4:b7:93:dd:6d:b1:b4:0b:
18:e5:01:d1:de:de:f6:25:62:bc:af:5a:1d:4c:34:
4a:ec:99:b0:32:39:61:6e:16:f9:da:89:8e:7a:8e:
ec:38:e0:b8:21:4b:92:c5:37:d2:e8:03:6d:60:a0:
c4:0c:75:5c:1f:82:1e:33:6c:80:2b:54:a8:58:9f:
b3:6e:70:61:a4:a9:d2:d4:80:eb:75:d0:94:da:63:
09:dd:64:93:3c:63:70:90:d1:4f:b8:24:38:59:b5:
0c:07:ba:2a:63:2f:1b:86:c5:02:86:c4:e3:af:77:
e0:03:20:38:6c:5d:6a:f0:3d:ca:25:01:ce:b5:e0:
15:10:22:1c:08:4a:b6:f5:6a:39:c3:99:7c:ed:b5:
06:f8:24:e5:9e:79:47:80:98:39:fe:ae:57:ea:f2:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:FD:61:45:77:81:A2:DF:FD:DD:57:B5:E9:C8:7B:17:A1:29:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7407680CC9B411EFBF0B8045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:8f:b5:61:34:da:94:75:31:ce:ea:da:a8:e5:b5:d0:27:9a:
bb:4a:e8:b3:72:71:6f:d7:d1:34:5b:d8:9e:cf:72:d9:a3:46:
95:34:8f:80:7b:27:73:e7:4f:b9:c8:52:4a:85:f3:df:a9:be:
38:a5:21:0f:06:8b:07:b8:24:d6:76:ad:34:9a:4f:a2:ee:b4:
23:e2:6b:dd:4b:fd:ed:06:df:c7:56:29:72:ab:3f:9e:8d:a4:
5d:2e:71:bf:5f:da:15:c4:15:f3:b3:30:35:90:20:47:fa:76:
46:e3:7c:fe:03:5e:0c:1b:67:40:66:07:c9:18:26:fe:cb:7f:
01:11:e9:a8:0b:5f:06:91:86:71:3a:69:17:02:72:1e:d4:d0:
76:23:cf:87:c3:c9:8a:e1:c0:df:ba:aa:b8:59:5f:29:c1:50:
13:32:ab:07:e5:1a:89:15:b2:11:61:24:c3:d4:51:20:03:a3:
39:b6:22:4a:19:8a:c5:af:2d:ca:0b:d1:24:17:eb:31:67:7a:
67:a8:94:e5:da:7a:d7:ee:6c:99:91:09:d0:a3:3b:5c:cf:34:
17:d5:b7:56:0d:a4:88:10:67:cf:69:0b:44:94:91:0b:bb:77:
d9:af:ba:73:8c:f3:bd:9c:99:41:7f:d7:1e:28:83:9d:a0:29:
76:61:82:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPbJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDkyMzUxWhcNMjUwMTE4MDkyMzUxWjAYMRYw
FAYDVQQDEw02Nzc3YWNhYi0xOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAojJUi4uqNaApsdrsH/P6SszO29tzJxWRYU34b38AvA5cxixhQXtiL8Tl
4sBs1q5+BaSXieMdNBqkMK84uJ2x3x3bE2LN6ckKQ4uTupL62gIQaArXW8RPZIdv
2TnQ71qu5LeT3W2xtAsY5QHR3t72JWK8r1odTDRK7JmwMjlhbhb52omOeo7sOOC4
IUuSxTfS6ANtYKDEDHVcH4IeM2yAK1SoWJ+zbnBhpKnS1IDrddCU2mMJ3WSTPGNw
kNFPuCQ4WbUMB7oqYy8bhsUChsTjr3fgAyA4bF1q8D3KJQHOteAVECIcCEq29Wo5
w5l87bUG+CTlnnlHgJg5/q5X6vKxYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH3u
/WFFd4Gi3/3dV7XpyHsXoSl0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NDA3NjgwQ0M5QjQxMUVGQkYwQjgwNDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcgSMA0GCSqGSIb3DQEBCwUA
A4IBAQCjj7VhNNqUdTHO6tqo5bXQJ5q7SuizcnFv19E0W9iez3LZo0aVNI+Aeydz
50+5yFJKhfPfqb44pSEPBosHuCTWdq00mk+i7rQj4mvdS/3tBt/HVilyqz+ejaRd
LnG/X9oVxBXzszA1kCBH+nZG43z+A14MG2dAZgfJGCb+y38BEemoC18GkYZxOmkX
AnIe1NB2I8+Hw8mK4cDfuqq4WV8pwVATMqsH5RqJFbIRYSTD1FEgA6M5tiJKGYrF
ry3KC9EkF+sxZ3pnqJTl2nrX7myZkQnQoztczzQX1bdWDaSIEGfPaQtElJELu3fZ
r7pzjPO9nJlBf9ceKIOdoCl2YYIO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:41 2025 by rpki-client