Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8411797C48D611EF969D9A96762E951A.roa
File: 8411797C48D611EF969D9A96762E951A.roa (raw, json)
Hash identifier: w2ZgUS2HAFeNZomOH3U2jRxRrV5yaBgcGHc3MopoPgA=
Subject key identifier: 1B:03:6E:70:5D:56:80:F4:18:59:8E:5D:BC:CF:E0:B2:3E:7F:8D:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8411797C48D611EF969D9A96762E951A.roa
Signing time: Tue 23 Jul 2024 09:32:45 +0000
ROA not before: Fri 26 Jul 2024 09:32:41 +0000
ROA not after: Thu 01 Aug 2024 09:32:41 +0000
asID: 139805
IP address blocks: 45.195.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40626 (0x9eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 09:32:41 2024 GMT
Not After : Aug 1 09:32:41 2024 GMT
Subject: CN=669f78bd-b5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:90:a2:55:ea:41:34:39:6c:dc:b8:67:45:
df:7a:c6:fc:0e:80:32:83:e4:3b:6e:e0:ac:f1:75:
d4:b2:7f:db:fa:42:3d:45:b6:ff:f4:00:59:ba:e3:
1f:cc:4e:f7:1d:cb:59:1e:33:11:69:b1:86:16:c9:
54:50:47:fe:e4:74:a8:d3:21:87:72:cc:67:43:d8:
cb:13:ad:10:0d:89:1e:56:64:71:49:4c:10:9d:e6:
66:53:be:d6:68:99:c1:58:1a:29:5d:2e:4f:0f:54:
9e:40:70:d4:ec:79:7c:bd:1a:df:ca:38:6e:0a:a8:
4c:a6:33:da:4e:54:09:2e:f4:13:c2:21:ba:df:12:
f9:2c:69:a8:02:58:b2:85:8a:54:a2:31:c1:43:2f:
44:bf:71:8a:6b:b4:55:63:fb:99:19:40:6c:f9:4c:
d3:83:d2:e8:19:f9:64:13:95:4a:b1:36:27:83:e4:
13:c0:bd:91:d0:bc:5e:a3:57:cb:66:98:a8:90:3d:
60:7d:21:f3:20:51:4f:6e:8e:f8:3e:6f:66:a4:78:
4d:5e:9f:cb:54:c8:e3:4c:0f:d4:91:11:63:5f:77:
8a:3f:80:62:51:ce:6c:a2:4c:b7:48:1d:31:6f:ae:
3c:67:11:66:c7:fa:19:57:74:94:6b:a4:a6:ce:d3:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:6E:70:5D:56:80:F4:18:59:8E:5D:BC:CF:E0:B2:3E:7F:8D:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8411797C48D611EF969D9A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8e:a3:33:e7:62:73:56:c0:9d:09:d9:40:59:e9:06:99:4f:
ea:6b:16:aa:6c:1d:65:d0:f0:a8:23:f4:c3:13:39:cb:5e:9f:
f9:8b:33:8d:ca:0b:a3:3e:ed:8d:95:d8:8d:61:87:85:e5:01:
29:3c:40:76:db:de:5f:61:88:c4:d8:1b:d6:1a:31:17:79:82:
b5:b5:49:c3:2d:f7:15:e0:a2:78:17:28:2b:d0:58:34:23:94:
7b:4d:0e:7a:ea:be:ba:9f:7c:6d:16:89:f2:4b:7c:ad:a7:2c:
41:c0:74:44:80:67:7b:78:f1:90:88:03:1c:82:55:1c:96:23:
79:50:9b:f4:30:a6:36:94:3a:fc:16:56:6d:98:66:ed:0e:f9:
53:64:89:e0:2e:4d:a8:26:23:38:99:b0:6b:80:5e:4c:90:69:
38:e7:30:bb:c2:42:7b:53:71:da:b0:be:ad:ef:2e:ad:b2:d1:
b9:ad:f8:57:07:1d:98:d9:03:38:2e:40:c5:2b:4a:3b:fb:b9:
5f:a5:46:a0:4d:1e:4a:33:9d:bc:69:bc:73:8c:21:dc:6e:a4:
c9:63:0f:82:e0:54:e0:93:b4:fd:72:fc:66:d5:cd:dd:d5:80:
5a:a6:cb:d8:b4:18:cc:c4:37:23:18:5f:b2:9f:e1:5d:a7:3d:
97:ea:64:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ6yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDkzMjQxWhcNMjQwODAxMDkzMjQxWjAYMRYw
FAYDVQQDEw02NjlmNzhiZC1iNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqTqQolXqQTQ5bNy4Z0Xfesb8DoAyg+Q7buCs8XXUsn/b+kI9Rbb/9ABZ
uuMfzE73HctZHjMRabGGFslUUEf+5HSo0yGHcsxnQ9jLE60QDYkeVmRxSUwQneZm
U77WaJnBWBopXS5PD1SeQHDU7Hl8vRrfyjhuCqhMpjPaTlQJLvQTwiG63xL5LGmo
AliyhYpUojHBQy9Ev3GKa7RVY/uZGUBs+UzTg9LoGflkE5VKsTYng+QTwL2R0Lxe
o1fLZpiokD1gfSHzIFFPbo74Pm9mpHhNXp/LVMjjTA/UkRFjX3eKP4BiUc5soky3
SB0xb648ZxFmx/oZV3SUa6SmztNScwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBsD
bnBdVoD0GFmOXbzP4LI+f41vMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NDExNzk3QzQ4RDYxMUVGOTY5RDlBOTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNWMA0GCSqGSIb3DQEBCwUA
A4IBAQCmjqMz52JzVsCdCdlAWekGmU/qaxaqbB1l0PCoI/TDEznLXp/5izONyguj
Pu2NldiNYYeF5QEpPEB2295fYYjE2BvWGjEXeYK1tUnDLfcV4KJ4Fygr0Fg0I5R7
TQ566r66n3xtFonyS3ytpyxBwHREgGd7ePGQiAMcglUcliN5UJv0MKY2lDr8FlZt
mGbtDvlTZIngLk2oJiM4mbBrgF5MkGk45zC7wkJ7U3HasL6t7y6tstG5rfhXBx2Y
2QM4LkDFK0o7+7lfpUagTR5KM528abxzjCHcbqTJYw+C4FTgk7T9cvxm1c3d1YBa
psvYtBjMxDcjGF+yn+Fdpz2X6mRZ
-----END CERTIFICATE-----
Generated at Fri Aug 2 03:36:56 2024 by rpki-client on console-fra.rpki-client.org