Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8508CE9EF0C411EEA5FC518D775412E6.roa
File: 8508CE9EF0C411EEA5FC518D775412E6.roa (raw, json)
Hash identifier: sFpvjc+am74ZGU03lYENGgyaiuEc0plcFMuhM/zIWu0=
Subject key identifier: 20:49:F2:F8:20:7E:87:7C:CE:A5:51:04:41:6A:6F:67:9E:9E:46:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8146
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8508CE9EF0C411EEA5FC518D775412E6.roa
Signing time: Tue 02 Apr 2024 07:42:13 +0000
ROA not before: Tue 02 Apr 2024 07:42:10 +0000
ROA not after: Mon 29 Apr 2024 07:42:10 +0000
asID: 139646
IP address blocks: 45.201.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33094 (0x8146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 07:42:10 2024 GMT
Not After : Apr 29 07:42:10 2024 GMT
Subject: CN=660bb6d5-4b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:f5:9c:9d:fd:0e:39:e3:22:99:6d:38:a7:
cf:83:d5:62:de:6d:72:c8:55:48:12:d3:b2:ce:f7:
74:45:6d:71:db:9a:4f:82:dc:51:c4:c9:43:93:99:
01:e6:db:cb:5e:5c:45:3f:93:05:92:62:af:35:0f:
0a:bd:f6:63:cd:82:7e:32:f1:af:e1:5b:f3:fa:93:
b8:cf:46:36:e0:c9:92:2e:bc:67:75:dd:e3:cb:e5:
0d:25:14:4f:a2:fc:83:9b:ce:f1:9b:b5:86:f7:a6:
d6:2e:bc:f7:73:25:0a:53:42:be:92:c7:08:6c:db:
f8:7f:c2:94:49:8a:83:8d:d4:40:94:f0:b1:4a:f7:
10:7a:d6:ec:cb:ca:30:d1:15:b7:78:99:0e:a1:ac:
1d:1f:7c:3a:4c:51:ad:ae:c4:97:1a:97:6c:19:f1:
6a:1f:c3:02:7d:55:41:30:e6:6a:7f:b3:b6:16:bb:
27:91:00:c5:fa:32:e1:bd:ae:a1:8e:3d:7d:50:2d:
0f:92:5e:c5:51:e4:e8:78:12:66:4e:90:42:e0:63:
f8:b3:b7:ad:79:78:e5:0c:c2:1a:fd:79:83:a9:c6:
da:6e:76:39:70:db:b6:61:7b:7b:e8:c4:65:c7:a2:
d6:89:2e:9d:20:0e:aa:5c:62:d2:d6:f4:83:22:42:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:49:F2:F8:20:7E:87:7C:CE:A5:51:04:41:6A:6F:67:9E:9E:46:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8508CE9EF0C411EEA5FC518D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.222.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:07:1c:ed:ca:3a:85:b4:a5:66:fd:92:53:1a:f1:97:92:d5:
ab:76:bc:7f:77:40:ad:d3:b7:98:04:04:db:8d:2c:76:db:4f:
35:b2:2d:2f:67:df:6e:1c:63:40:95:4d:08:21:71:76:4b:61:
42:0f:ea:33:91:5c:88:bc:17:5f:3a:32:9c:34:0b:64:25:32:
b1:80:3c:da:ce:f4:7a:96:a8:28:17:c7:b0:46:3d:9c:53:bd:
b5:b9:53:be:46:78:9d:8c:06:5b:04:f1:77:40:46:bb:53:80:
78:e6:f2:8c:41:fb:c4:17:fc:52:a3:87:cd:b2:59:d6:f2:49:
8a:ba:e0:61:bb:43:b6:44:17:eb:0f:c6:d5:ea:11:53:f0:8d:
30:a8:2b:69:01:ba:51:87:94:1d:7a:85:49:f8:f0:ee:d1:70:
7b:9e:5e:01:4e:d3:86:60:cb:ae:56:41:b3:0b:f3:c3:c1:e8:
88:ee:a2:50:6a:3e:2c:a1:b9:5c:48:81:4f:80:5e:5f:73:25:
8a:24:99:cd:01:66:98:85:0c:01:61:b1:95:f9:1b:08:eb:37:
3e:88:29:1d:65:7f:66:f5:3b:9a:98:70:c7:74:af:51:94:d1:
73:f1:9e:0b:2e:5a:54:86:51:68:32:34:ae:58:fc:37:0f:e5:
d0:bb:c1:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIFGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDAyMDc0MjEwWhcNMjQwNDI5MDc0MjEwWjAYMRYw
FAYDVQQDEw02NjBiYjZkNS00YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy5r1nJ39DjnjIpltOKfPg9Vi3m1yyFVIEtOyzvd0RW1x25pPgtxRxMlD
k5kB5tvLXlxFP5MFkmKvNQ8KvfZjzYJ+MvGv4Vvz+pO4z0Y24MmSLrxndd3jy+UN
JRRPovyDm87xm7WG96bWLrz3cyUKU0K+kscIbNv4f8KUSYqDjdRAlPCxSvcQetbs
y8ow0RW3eJkOoawdH3w6TFGtrsSXGpdsGfFqH8MCfVVBMOZqf7O2FrsnkQDF+jLh
va6hjj19UC0Pkl7FUeToeBJmTpBC4GP4s7eteXjlDMIa/XmDqcbabnY5cNu2YXt7
6MRlx6LWiS6dIA6qXGLS1vSDIkJstQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCBJ
8vggfod8zqVRBEFqb2eenkbgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NTA4Q0U5RUYwQzQxMUVFQTVGQzUxOEQ3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcneMA0GCSqGSIb3DQEBCwUA
A4IBAQBqBxztyjqFtKVm/ZJTGvGXktWrdrx/d0Ct07eYBATbjSx22081si0vZ99u
HGNAlU0IIXF2S2FCD+ozkVyIvBdfOjKcNAtkJTKxgDzazvR6lqgoF8ewRj2cU721
uVO+RnidjAZbBPF3QEa7U4B45vKMQfvEF/xSo4fNslnW8kmKuuBhu0O2RBfrD8bV
6hFT8I0wqCtpAbpRh5QdeoVJ+PDu0XB7nl4BTtOGYMuuVkGzC/PDweiI7qJQaj4s
oblcSIFPgF5fcyWKJJnNAWaYhQwBYbGV+RsI6zc+iCkdZX9m9TuamHDHdK9RlNFz
8Z4LLlpUhlFoMjSuWPw3D+XQu8H3
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org