Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C3D158038B11EFB788BD49017001B1.roa
File: 79C3D158038B11EFB788BD49017001B1.roa (raw, json)
Hash identifier: Cqo4KzQqUYENMbuu8GfhKfzCsdCL9vBAF1/WwKDkkI0=
Subject key identifier: 75:2F:63:C7:C0:99:DE:B0:73:85:44:B1:6C:F2:CB:9F:E6:5B:FD:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C3D158038B11EFB788BD49017001B1.roa
Signing time: Fri 26 Apr 2024 05:11:45 +0000
ROA not before: Fri 26 Apr 2024 05:11:41 +0000
ROA not after: Sun 05 May 2024 05:11:41 +0000
asID: 141883
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34260 (0x85d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:11:41 2024 GMT
Not After : May 5 05:11:41 2024 GMT
Subject: CN=662b3791-f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:8a:bd:b0:a1:9b:e9:34:dc:ad:24:dc:fb:
b4:5f:27:a4:bd:79:40:4e:33:e4:cc:27:5f:b6:8c:
3e:af:be:44:7a:73:7d:56:19:20:99:47:e7:90:cb:
6b:f1:79:2e:69:d2:44:ae:59:ad:2e:1e:a3:1d:1f:
97:b2:02:b2:d1:99:42:bf:d2:d8:c6:36:94:05:1f:
a3:50:dc:1f:05:e8:bb:27:7a:c6:86:d6:27:16:34:
ed:0e:90:2b:b4:e3:44:4f:f3:5a:b1:66:5b:49:7e:
41:f6:bf:ae:36:cc:24:70:c3:14:c3:eb:8a:13:19:
5e:73:db:7d:c3:bb:80:08:2e:70:dd:b2:9d:ee:89:
86:ef:d3:a3:81:18:ac:53:4b:63:2e:d2:57:d2:7b:
60:ca:1d:32:39:b4:3b:1b:35:d8:62:00:aa:6a:fc:
8f:86:76:d8:da:8a:a6:f9:0a:7d:7d:a3:d1:3c:46:
47:33:05:ba:ea:e7:8e:84:00:66:b7:86:4c:f5:e5:
f0:88:1e:36:5d:0d:5d:66:8a:2e:44:30:72:70:a7:
29:39:a0:c4:d6:e1:49:d2:e9:43:af:f2:6f:0e:c0:
c8:39:b0:cd:4c:51:57:c2:d8:12:ac:11:6e:74:e1:
a7:2d:f8:54:75:20:c5:0b:04:b3:b7:95:dc:e6:9c:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:63:C7:C0:99:DE:B0:73:85:44:B1:6C:F2:CB:9F:E6:5B:FD:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C3D158038B11EFB788BD49017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:45:4f:90:00:f5:bd:bb:9c:e1:7e:41:7a:af:59:cc:9f:4e:
dc:0e:4a:24:12:11:0f:74:4d:92:f2:ba:bf:78:fa:62:2b:f1:
3d:b2:fe:38:9a:0e:80:a5:86:25:19:4d:77:28:f0:ad:dc:23:
e2:b3:1a:8b:02:95:e1:63:13:77:be:86:a2:17:11:ae:23:ab:
69:52:fe:58:08:60:b5:4c:e4:2b:00:16:64:cc:4d:df:d0:71:
28:8e:81:48:10:75:8a:7e:ef:2c:06:af:55:c7:da:82:94:c2:
5b:88:90:a5:bd:5a:a2:7f:87:86:26:9b:73:9b:3d:f9:91:da:
73:19:67:78:57:b3:da:27:34:10:35:ee:78:4b:d8:97:36:27:
d1:62:f9:c6:de:79:b2:1a:83:ed:fa:3f:69:99:fa:99:64:c8:
49:39:c5:9c:fc:55:86:ae:2b:7a:f2:80:10:6b:79:44:f8:7b:
e7:35:7a:ed:32:8e:5c:7e:a2:f4:23:3f:ce:a4:b2:aa:35:c0:
05:bd:94:43:43:12:3c:06:cc:90:80:56:f5:82:6a:91:f2:77:
96:bb:12:38:14:9e:b6:a5:66:72:c7:2c:80:57:59:e0:6f:73:
52:93:b6:bf:0d:79:b8:c6:71:34:9e:b5:66:50:84:b6:18:b6:
91:a6:b9:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIXUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDUxMTQxWhcNMjQwNTA1MDUxMTQxWjAYMRYw
FAYDVQQDEw02NjJiMzc5MS1mMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4bSKvbChm+k03K0k3Pu0XyekvXlATjPkzCdftow+r75EenN9VhkgmUfn
kMtr8XkuadJErlmtLh6jHR+XsgKy0ZlCv9LYxjaUBR+jUNwfBei7J3rGhtYnFjTt
DpArtONET/NasWZbSX5B9r+uNswkcMMUw+uKExlec9t9w7uACC5w3bKd7omG79Oj
gRisU0tjLtJX0ntgyh0yObQ7GzXYYgCqavyPhnbY2oqm+Qp9faPRPEZHMwW66ueO
hABmt4ZM9eXwiB42XQ1dZoouRDBycKcpOaDE1uFJ0ulDr/JvDsDIObDNTFFXwtgS
rBFudOGnLfhUdSDFCwSzt5Xc5pwEgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHUv
Y8fAmd6wc4VEsWzyy5/mW/04MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OUMzRDE1ODAzOEIxMUVGQjc4OEJENDkwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcgUMA0GCSqGSIb3DQEBCwUA
A4IBAQCgRU+QAPW9u5zhfkF6r1nMn07cDkokEhEPdE2S8rq/ePpiK/E9sv44mg6A
pYYlGU13KPCt3CPisxqLApXhYxN3voaiFxGuI6tpUv5YCGC1TOQrABZkzE3f0HEo
joFIEHWKfu8sBq9Vx9qClMJbiJClvVqif4eGJptzmz35kdpzGWd4V7PaJzQQNe54
S9iXNifRYvnG3nmyGoPt+j9pmfqZZMhJOcWc/FWGrit68oAQa3lE+HvnNXrtMo5c
fqL0Iz/OpLKqNcAFvZRDQxI8BsyQgFb1gmqR8neWuxI4FJ62pWZyxyyAV1ngb3NS
k7a/DXm4xnE0nrVmUIS2GLaRprkP
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org