Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B38E54CCD811EF9F5756AF762E951A.roa
File: 82B38E54CCD811EF9F5756AF762E951A.roa (raw, json)
Hash identifier: Bh/w8CI9T34NW63rlS1llP+2P9TWtBs25A5zoSGujtQ=
Subject key identifier: 60:DB:CB:CD:9E:35:04:F9:6F:16:08:BB:FD:48:D9:03:B8:F6:9E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B38E54CCD811EF9F5756AF762E951A.roa
Signing time: Tue 07 Jan 2025 09:19:35 +0000
ROA not before: Tue 07 Jan 2025 09:19:31 +0000
ROA not after: Sat 18 Jan 2025 09:19:31 +0000
asID: 151800
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64298 (0xfb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:19:31 2025 GMT
Not After : Jan 18 09:19:31 2025 GMT
Subject: CN=677cf1a7-f1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:05:ce:52:9d:87:9b:4e:46:af:4c:4a:68:
50:35:19:d5:89:7b:44:37:2c:c2:6d:7b:25:8d:a4:
d1:52:b2:eb:b4:d8:f4:a2:78:73:8e:93:84:69:c0:
2b:2c:a0:9e:e2:47:95:d9:67:bd:31:a1:0a:f9:8a:
87:a4:98:46:a8:37:d2:b8:ce:a0:13:eb:81:93:65:
90:91:a8:f1:1a:ea:94:10:e3:79:02:49:f7:9d:31:
28:9d:79:78:ca:4b:86:8f:b6:93:85:09:48:75:ae:
7b:32:0a:95:7d:76:64:95:a4:89:c5:0e:ee:3e:27:
2d:83:09:24:74:ac:cd:b3:4e:d7:16:9d:82:e9:ae:
56:d9:e6:c0:88:0b:23:86:f6:e0:94:43:64:cf:fb:
ba:6b:0c:d2:b0:b5:4e:ef:d1:65:95:06:9e:b8:6b:
1f:0e:36:bf:68:02:40:c3:63:b2:32:57:68:96:5c:
c7:03:4e:27:3a:be:9b:2a:b5:12:b7:59:18:b8:85:
d4:5f:62:d1:77:3f:ab:a8:0b:0e:56:c6:d5:ce:ee:
8d:33:27:ff:5a:00:b8:64:13:9a:d9:31:89:2a:30:
44:7e:ea:4b:cc:78:13:1a:95:cb:76:03:cb:7c:f7:
26:14:e1:a9:97:b8:ea:db:fb:a1:f9:9b:58:6f:1b:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:CB:CD:9E:35:04:F9:6F:16:08:BB:FD:48:D9:03:B8:F6:9E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82B38E54CCD811EF9F5756AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:d3:ed:60:54:d2:62:6f:78:4c:a0:a7:97:df:87:7c:7e:69:
67:19:00:d4:dd:c7:cd:60:a1:b3:8a:c4:d4:ff:38:2c:dc:f7:
d1:75:19:d1:ab:1b:a3:e4:a9:a4:05:16:a9:af:20:f3:db:05:
e9:78:c7:a3:ec:09:57:fc:6d:e0:fd:02:f1:9e:20:2b:d0:a3:
6c:2f:68:2c:ec:15:aa:8a:44:02:ce:15:5c:7c:e1:52:a2:8c:
85:14:ef:9d:8b:5c:a9:6d:69:5b:ff:42:8b:cd:55:f1:15:fb:
ed:38:c9:85:9c:26:f7:c2:9d:0a:5e:35:46:83:17:de:fe:ac:
d3:ec:1f:02:b1:16:0b:51:27:a5:0b:ff:ba:d6:99:1f:15:aa:
03:5b:b8:4c:37:b7:4e:ea:f9:b7:c0:e3:09:ea:de:49:b0:b2:
8b:d7:7f:15:6c:af:a1:76:63:20:ee:79:cc:3f:fa:46:e4:3a:
aa:da:53:50:57:04:64:f1:2d:b8:45:77:fe:cb:a5:83:25:c5:
b3:b6:c0:35:db:b0:ef:01:d5:ae:77:3d:12:c0:13:03:1b:67:
42:74:09:68:d5:5a:87:90:22:1d:2a:60:9a:66:17:ec:98:60:
c8:f7:57:7b:5d:cb:7b:a8:34:66:95:be:90:56:88:a5:af:ec:
6c:5e:6c:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPsqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDkxOTMxWhcNMjUwMTE4MDkxOTMxWjAYMRYw
FAYDVQQDEw02NzdjZjFhNy1mMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA80UFzlKdh5tORq9MSmhQNRnViXtENyzCbXsljaTRUrLrtNj0onhzjpOE
acArLKCe4keV2We9MaEK+YqHpJhGqDfSuM6gE+uBk2WQkajxGuqUEON5Akn3nTEo
nXl4ykuGj7aThQlIda57MgqVfXZklaSJxQ7uPictgwkkdKzNs07XFp2C6a5W2ebA
iAsjhvbglENkz/u6awzSsLVO79FllQaeuGsfDja/aAJAw2OyMldollzHA04nOr6b
KrUSt1kYuIXUX2LRdz+rqAsOVsbVzu6NMyf/WgC4ZBOa2TGJKjBEfupLzHgTGpXL
dgPLfPcmFOGpl7jq2/uh+ZtYbxvNlwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGDb
y82eNQT5bxYIu/1I2QO49p6tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkIzOEU1NENDRDgxMUVGOUY1NzU2QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcUgMA0GCSqGSIb3DQEBCwUA
A4IBAQCM0+1gVNJib3hMoKeX34d8fmlnGQDU3cfNYKGzisTU/zgs3PfRdRnRqxuj
5KmkBRapryDz2wXpeMej7AlX/G3g/QLxniAr0KNsL2gs7BWqikQCzhVcfOFSooyF
FO+di1ypbWlb/0KLzVXxFfvtOMmFnCb3wp0KXjVGgxfe/qzT7B8CsRYLUSelC/+6
1pkfFaoDW7hMN7dO6vm3wOMJ6t5JsLKL138VbK+hdmMg7nnMP/pG5Dqq2lNQVwRk
8S24RXf+y6WDJcWztsA127DvAdWudz0SwBMDG2dCdAlo1VqHkCIdKmCaZhfsmGDI
91d7Xct7qDRmlb6QVoilr+xsXmw+
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:09 2025 by rpki-client