Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B247ABAF811EF9F85D76C762E951A.roa
File: 7E1B247ABAF811EF9F85D76C762E951A.roa (raw, json)
Hash identifier: syOtRe224xLdJIn4qNV9XbJojwfPKDpSMagBiLa7Nh4=
Subject key identifier: AE:FC:F2:56:D8:97:2B:21:EA:55:95:04:4D:07:48:8F:C2:EF:94:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B247ABAF811EF9F85D76C762E951A.roa
Signing time: Sun 15 Dec 2024 15:23:10 +0000
ROA not before: Sun 15 Dec 2024 15:23:06 +0000
ROA not after: Mon 20 Jan 2025 15:23:06 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58361 (0xe3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:23:06 2024 GMT
Not After : Jan 20 15:23:06 2025 GMT
Subject: CN=675ef45e-e76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:a6:01:1f:78:94:2b:6d:b7:d4:76:fd:49:
44:c7:a9:a4:97:dd:df:e8:1a:64:32:00:77:08:46:
8f:d2:cf:3a:2b:43:74:63:0f:66:d0:40:a4:66:96:
bf:c6:2e:b7:0b:81:36:36:4c:26:d7:29:3b:97:70:
2c:8b:b7:5d:af:77:b1:89:b1:c2:1f:f9:1f:98:d4:
f9:15:6e:c5:c6:62:fb:a8:71:c7:53:bd:c0:05:be:
65:b0:aa:0c:d2:d0:bb:b5:21:ae:f6:8b:0e:12:a3:
77:04:61:2a:ed:36:76:0e:34:22:3b:26:1d:0f:8e:
9c:a9:c6:87:68:9a:f3:8f:b4:de:f1:2e:f5:3f:1b:
98:02:ba:dc:72:26:0b:76:da:f3:0a:4b:d9:60:29:
f5:1b:6c:61:a6:42:e2:61:b5:36:93:6b:77:d2:74:
ff:24:56:e4:4b:6a:74:4c:eb:49:8d:c9:7c:7b:f2:
7d:f7:ac:99:19:9f:ce:b9:9a:2e:db:8c:c9:a4:cf:
b2:cd:a0:34:4f:a4:56:77:4c:53:83:52:08:9a:43:
9e:90:77:12:a3:54:0d:89:9b:1d:2b:3d:e1:ef:a2:
9a:7e:1c:9c:8f:ce:1d:b2:ed:cf:30:3f:88:7a:c4:
ca:a1:60:e3:b2:09:48:38:7f:6b:10:29:da:a4:1a:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:F2:56:D8:97:2B:21:EA:55:95:04:4D:07:48:8F:C2:EF:94:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E1B247ABAF811EF9F85D76C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:55:ec:cc:a7:09:f2:6e:5f:93:f9:af:b7:a4:95:7a:2c:33:
82:e7:7a:86:34:df:a2:9c:61:76:f7:f3:8c:4a:58:f0:d3:8e:
b5:34:b1:4e:05:8c:95:63:42:5a:5b:38:c5:88:32:f0:25:db:
6e:42:25:71:3c:1f:a2:ea:48:6f:6f:c3:02:16:fe:c1:cb:c4:
76:7c:9b:80:f1:c8:c6:9a:bd:a8:2c:05:12:51:32:8c:80:a9:
fa:e9:ba:39:9e:a3:7c:4c:49:d5:22:77:4b:d7:f5:eb:d5:04:
50:47:84:4a:00:07:e9:e8:06:57:b4:32:55:28:4d:02:22:fc:
37:3e:4c:51:16:9b:e1:56:c0:57:3b:07:97:e7:69:fe:9d:c5:
f9:18:bc:03:cf:cb:44:8c:9f:07:52:52:e8:33:ce:c8:cd:1e:
b2:55:9a:a2:d8:b3:60:c2:48:2c:dd:9b:a8:95:a9:0f:62:2f:
e7:8e:3a:a6:f0:32:69:15:c9:67:71:8f:44:7c:91:c8:c0:02:
a1:94:a0:86:4d:68:b7:9c:d8:68:8c:a5:92:86:06:6b:56:48:
51:3d:e2:1f:d2:6f:83:98:e3:88:a7:62:aa:3f:2e:c7:6e:57:
e1:e5:6c:ce:f8:2a:4d:7b:e1:d4:f5:97:b2:64:d1:df:de:63:
37:ef:52:49
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOP5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE1MTUyMzA2WhcNMjUwMTIwMTUyMzA2WjAYMRYw
FAYDVQQDEw02NzVlZjQ1ZS1lNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq9GmAR94lCttt9R2/UlEx6mkl93f6BpkMgB3CEaP0s86K0N0Yw9m0ECk
Zpa/xi63C4E2Nkwm1yk7l3Asi7ddr3exibHCH/kfmNT5FW7FxmL7qHHHU73ABb5l
sKoM0tC7tSGu9osOEqN3BGEq7TZ2DjQiOyYdD46cqcaHaJrzj7Te8S71PxuYArrc
ciYLdtrzCkvZYCn1G2xhpkLiYbU2k2t30nT/JFbkS2p0TOtJjcl8e/J996yZGZ/O
uZou24zJpM+yzaA0T6RWd0xTg1IImkOekHcSo1QNiZsdKz3h76Kafhycj84dsu3P
MD+IesTKoWDjsglIOH9rECnapBpsOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK78
8lbYlysh6lWVBE0HSI/C75RcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RTFCMjQ3QUJBRjgxMUVGOUY4NUQ3NkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQCNVezMpwnybl+T+a+3pJV6LDOC53qGNN+inGF29/OMSljw0461NLFOBYyV
Y0JaWzjFiDLwJdtuQiVxPB+i6khvb8MCFv7By8R2fJuA8cjGmr2oLAUSUTKMgKn6
6bo5nqN8TEnVIndL1/Xr1QRQR4RKAAfp6AZXtDJVKE0CIvw3PkxRFpvhVsBXOweX
52n+ncX5GLwDz8tEjJ8HUlLoM87IzR6yVZqi2LNgwkgs3ZuolakPYi/njjqm8DJp
FclncY9EfJHIwAKhlKCGTWi3nNhojKWShgZrVkhRPeIf0m+DmOOIp2KqPy7Hblfh
5WzO+CpNe+HU9ZeyZNHf3mM371JJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:57 2025 by rpki-client