Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CC41AA4A5B11EFAD664D6D762E951A.roa
File: 74CC41AA4A5B11EFAD664D6D762E951A.roa (raw, json)
Hash identifier: X0C14mON7odukbDzSSWEQU6cluosDlR6s9XPAX3ObDI=
Subject key identifier: E7:E5:91:43:78:DB:5E:7F:1F:5F:DF:D2:02:9E:A7:7A:18:DA:15:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CC41AA4A5B11EFAD664D6D762E951A.roa
Signing time: Thu 25 Jul 2024 07:56:53 +0000
ROA not before: Thu 25 Jul 2024 07:56:50 +0000
ROA not after: Sat 03 Aug 2024 07:56:50 +0000
asID: 174
IP address blocks: 45.199.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40899 (0x9fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:56:50 2024 GMT
Not After : Aug 3 07:56:50 2024 GMT
Subject: CN=66a20545-fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:f3:33:8c:ac:f8:b0:7c:49:66:2d:f5:e8:
40:8e:d8:90:67:25:30:51:05:f0:eb:12:da:7f:77:
91:fa:7c:67:f2:7a:a5:ed:9c:65:06:0c:4d:2a:53:
60:58:c2:b2:43:36:5c:5c:b9:f6:e0:ef:2a:17:6c:
63:67:87:74:0f:67:1e:62:fb:fd:d3:c9:74:75:1e:
c0:ab:65:74:75:13:09:75:cd:8b:0d:ec:d9:80:b8:
5f:ba:45:07:0f:46:16:6b:15:95:a9:22:e1:d1:ba:
b4:86:6a:2f:94:7f:8d:12:da:ea:08:29:6c:90:93:
f5:44:1e:9c:91:6c:4a:27:e0:d9:13:17:97:52:a7:
da:d9:5e:c2:97:18:07:58:04:2d:cd:47:11:6d:51:
33:9f:84:b2:89:11:95:92:43:ae:08:73:20:a0:47:
3f:45:09:de:c8:60:5f:9d:28:ec:31:8a:d4:18:38:
1b:ea:59:04:a9:13:09:d1:f8:02:68:d6:bd:19:05:
14:f2:71:28:e0:ed:13:7b:77:57:c3:18:20:02:1f:
da:35:c7:35:02:f2:81:90:92:81:da:08:24:df:33:
27:34:b7:22:41:5a:07:59:aa:e3:73:2f:58:49:f3:
82:ca:d2:7a:88:18:f9:44:f9:13:50:73:1f:fa:42:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:91:43:78:DB:5E:7F:1F:5F:DF:D2:02:9E:A7:7A:18:DA:15:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74CC41AA4A5B11EFAD664D6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:28:74:64:c0:24:01:fe:cb:49:e2:30:87:29:e2:0e:19:00:
63:36:f3:e2:c1:27:e8:23:d1:b1:c5:45:b7:5a:e1:43:eb:ca:
28:50:0c:45:2c:5c:31:98:db:30:a6:c4:70:41:de:f7:4f:d3:
98:3c:9f:2e:ea:d3:c7:0f:cd:4a:3e:48:6e:24:eb:62:2b:11:
90:91:65:e7:dd:34:bd:4e:7e:20:27:e1:82:70:36:5d:91:9f:
36:f1:de:b2:b1:f3:de:25:67:42:fa:2a:4e:c4:c2:ef:b3:29:
47:e4:b3:7d:e1:37:81:42:1e:54:14:8a:c1:39:91:cf:3b:60:
35:ac:93:3b:cc:bb:93:09:8b:e4:34:01:da:02:c8:3c:01:a4:
44:a9:1d:a3:10:1f:bb:15:87:24:ef:cf:6f:04:2e:62:eb:88:
08:75:25:ff:69:fb:fe:86:ff:19:fd:11:63:21:5a:74:ba:99:
cc:ac:a9:58:07:21:8d:cf:c9:54:dd:c3:3c:bd:a5:ed:dc:af:
f3:37:a2:77:40:d7:4d:df:e2:69:92:74:09:10:53:54:00:f3:
0c:9e:39:69:8d:77:af:d5:1e:c1:d9:18:be:80:74:9d:0b:40:
fc:18:fe:eb:42:93:56:e2:5b:09:c7:13:3e:48:b7:c0:b6:dd:
11:23:ec:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDc1NjUwWhcNMjQwODAzMDc1NjUwWjAYMRYw
FAYDVQQDEw02NmEyMDU0NS1mYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1LfzM4ys+LB8SWYt9ehAjtiQZyUwUQXw6xLaf3eR+nxn8nql7ZxlBgxN
KlNgWMKyQzZcXLn24O8qF2xjZ4d0D2ceYvv908l0dR7Aq2V0dRMJdc2LDezZgLhf
ukUHD0YWaxWVqSLh0bq0hmovlH+NEtrqCClskJP1RB6ckWxKJ+DZExeXUqfa2V7C
lxgHWAQtzUcRbVEzn4SyiRGVkkOuCHMgoEc/RQneyGBfnSjsMYrUGDgb6lkEqRMJ
0fgCaNa9GQUU8nEo4O0Te3dXwxggAh/aNcc1AvKBkJKB2ggk3zMnNLciQVoHWarj
cy9YSfOCytJ6iBj5RPkTUHMf+kIq9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOfl
kUN4215/H1/f0gKep3oY2hUwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NENDNDFBQTRBNUIxMUVGQUQ2NjRENkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLceCMA0GCSqGSIb3DQEBCwUA
A4IBAQC1KHRkwCQB/stJ4jCHKeIOGQBjNvPiwSfoI9GxxUW3WuFD68ooUAxFLFwx
mNswpsRwQd73T9OYPJ8u6tPHD81KPkhuJOtiKxGQkWXn3TS9Tn4gJ+GCcDZdkZ82
8d6ysfPeJWdC+ipOxMLvsylH5LN94TeBQh5UFIrBOZHPO2A1rJM7zLuTCYvkNAHa
Asg8AaREqR2jEB+7FYck789vBC5i64gIdSX/afv+hv8Z/RFjIVp0upnMrKlYByGN
z8lU3cM8vaXt3K/zN6J3QNdN3+JpknQJEFNUAPMMnjlpjXev1R7B2Ri+gHSdC0D8
GP7rQpNW4lsJxxM+SLfAtt0RI+wS
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org