Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F8C224BEAF11EFB979D44F762E951A.roa
File: 89F8C224BEAF11EFB979D44F762E951A.roa (raw, json)
Hash identifier: ehXgONeu7ivlwK2G6FFgxfyCxpsYWiSbXmrhTYrUZoI=
Subject key identifier: 52:EA:CF:17:72:1E:41:7D:80:0D:86:54:43:73:D1:EA:B5:4A:D9:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E73B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F8C224BEAF11EFB979D44F762E951A.roa
Signing time: Fri 20 Dec 2024 08:51:02 +0000
ROA not before: Fri 20 Dec 2024 08:50:58 +0000
ROA not after: Sat 25 Jan 2025 08:50:58 +0000
asID: 6079
IP address blocks: 45.203.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59195 (0xe73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:50:58 2024 GMT
Not After : Jan 25 08:50:58 2025 GMT
Subject: CN=67652ff5-0778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:db:09:52:f7:df:f1:d5:d3:94:31:13:16:
93:09:ce:35:55:21:e7:a1:3f:f5:ca:4d:77:6f:09:
37:27:55:3b:0d:ad:a1:76:e6:3d:4f:3a:78:71:49:
b7:8b:1d:68:ca:b7:35:23:a9:24:72:58:e5:f3:da:
62:18:3f:db:87:60:50:8e:2f:63:1e:04:66:ea:a4:
38:e0:54:79:cb:ed:39:ae:61:03:f7:72:de:36:ed:
db:05:5c:59:56:19:b6:4a:ce:cb:17:4b:72:29:77:
c8:af:47:84:d5:98:99:aa:2c:3d:43:06:13:95:7e:
da:f3:3a:f9:e7:6d:2e:24:e8:19:ae:22:10:40:31:
24:5b:75:ec:be:21:37:d3:0c:0a:60:a4:a7:8d:c6:
ad:a9:b2:3e:df:de:e6:73:c5:18:f0:c8:6d:29:da:
79:f3:45:2e:be:d4:60:31:52:e4:87:d9:e2:d5:48:
33:44:76:1b:0f:ae:29:d2:f6:06:8e:a7:18:3d:27:
ec:6c:65:34:28:68:8a:da:2b:2b:be:15:26:47:34:
14:72:4d:86:82:68:35:11:5e:6e:82:4b:07:40:16:
d2:97:8f:c3:3e:18:54:43:5a:87:a2:f6:67:23:c8:
13:72:d5:d5:eb:90:97:92:aa:e0:1a:df:e6:ad:d7:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:CF:17:72:1E:41:7D:80:0D:86:54:43:73:D1:EA:B5:4A:D9:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F8C224BEAF11EFB979D44F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ca:ae:71:0a:7a:3d:7a:e5:ab:d2:21:df:75:ed:f7:7b:09:
62:3c:bf:6d:d2:36:70:18:cc:f6:f4:7e:ae:20:14:32:a4:e7:
fe:4c:44:27:6f:8f:7f:db:62:0a:61:e7:4a:64:93:3a:bf:0f:
be:3a:8f:2e:26:f5:57:03:2b:68:1f:db:4a:d2:e1:1c:50:c1:
32:bb:7c:83:31:37:52:44:a6:27:43:ec:d6:c6:f7:0d:45:10:
9b:70:23:da:a1:17:47:a8:a7:cd:20:b0:89:da:17:36:5e:1d:
d5:b2:a6:b4:1a:e7:ac:f3:92:18:78:15:23:0c:a9:2c:25:5d:
ce:3e:ba:af:50:8d:0e:2f:69:d9:e9:b7:80:4e:d9:f0:ed:16:
8e:e9:c3:e7:5b:32:f2:a0:b7:c0:61:dc:e1:5c:23:d5:e8:28:
b2:6b:24:8c:f7:d9:87:7d:d4:f2:fb:5a:30:d4:9d:aa:b5:f1:
97:d7:ee:a8:cb:34:cf:4c:5a:6b:77:56:97:a3:c5:5a:fa:7d:
a9:37:78:4f:60:7f:16:88:ca:ad:b4:83:d7:e3:dc:40:32:ac:
80:69:10:8b:f7:be:4f:9f:ff:26:e4:5c:60:61:2a:78:2e:eb:
23:e1:3b:f9:ea:cc:a2:10:e3:f1:30:21:3f:48:e9:78:a4:98:
c3:7e:ca:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOc7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDg1MDU4WhcNMjUwMTI1MDg1MDU4WjAYMRYw
FAYDVQQDEw02NzY1MmZmNS0wNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9PvbCVL33/HV05QxExaTCc41VSHnoT/1yk13bwk3J1U7Da2hduY9Tzp4
cUm3ix1oyrc1I6kkcljl89piGD/bh2BQji9jHgRm6qQ44FR5y+05rmED93LeNu3b
BVxZVhm2Ss7LF0tyKXfIr0eE1ZiZqiw9QwYTlX7a8zr5520uJOgZriIQQDEkW3Xs
viE30wwKYKSnjcatqbI+397mc8UY8MhtKdp580UuvtRgMVLkh9ni1UgzRHYbD64p
0vYGjqcYPSfsbGU0KGiK2isrvhUmRzQUck2Ggmg1EV5ugksHQBbSl4/DPhhUQ1qH
ovZnI8gTctXV65CXkqrgGt/mrdfBqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFLq
zxdyHkF9gA2GVENz0eq1StnVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUY4QzIyNEJFQUYxMUVGQjk3OUQ0NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcuLMA0GCSqGSIb3DQEBCwUA
A4IBAQALyq5xCno9euWr0iHfde33ewliPL9t0jZwGMz29H6uIBQypOf+TEQnb49/
22IKYedKZJM6vw++Oo8uJvVXAytoH9tK0uEcUMEyu3yDMTdSRKYnQ+zWxvcNRRCb
cCPaoRdHqKfNILCJ2hc2Xh3Vsqa0Gues85IYeBUjDKksJV3OPrqvUI0OL2nZ6beA
Ttnw7RaO6cPnWzLyoLfAYdzhXCPV6CiyaySM99mHfdTy+1ow1J2qtfGX1+6oyzTP
TFprd1aXo8Va+n2pN3hPYH8WiMqttIPX49xAMqyAaRCL975Pn/8m5FxgYSp4Lusj
4Tv56syiEOPxMCE/SOl4pJjDfsq8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:16 2025 by rpki-client