Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65F61ACE8911EFB045FD7F762E951A.roa
File: 8B65F61ACE8911EFB045FD7F762E951A.roa (raw, json)
Hash identifier: TNUyz2mBZB2ztkHQ57j1faZLW0YJuUY96oV5GGh+Q10=
Subject key identifier: DD:E4:81:41:CC:80:92:98:F9:DB:40:D3:95:9F:C5:E0:F6:44:20:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65F61ACE8911EFB045FD7F762E951A.roa
Signing time: Thu 09 Jan 2025 12:59:22 +0000
ROA not before: Thu 09 Jan 2025 12:59:18 +0000
ROA not after: Tue 21 Jan 2025 12:59:18 +0000
asID: 142032
IP address blocks: 45.192.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66530 (0x103e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:59:18 2025 GMT
Not After : Jan 21 12:59:18 2025 GMT
Subject: CN=677fc829-2fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:55:11:b9:5b:3a:5e:fb:4a:13:2e:28:8b:
86:e1:46:e7:9a:30:0b:e5:a9:56:8a:e0:30:74:1d:
37:71:1b:06:d2:a8:ff:34:3f:8f:8f:c6:b3:1f:00:
5d:d0:7e:df:35:4f:de:90:0c:98:27:80:ce:41:b5:
95:35:5f:99:56:4e:e2:e9:af:6d:df:94:cf:40:a8:
68:c8:fe:82:be:95:7b:1e:cc:2b:14:5c:30:bb:31:
af:eb:b6:0d:dc:50:0d:9b:4e:f0:bc:dd:3e:f5:cb:
fe:fc:82:28:d9:ba:c4:85:47:95:0b:09:a4:f2:08:
a1:07:c2:76:0e:bf:1b:3b:4e:61:ed:5b:9f:16:14:
d2:28:2d:5b:d8:3a:c5:33:18:5c:ff:8d:0a:aa:b2:
74:70:49:22:44:6d:4b:33:b7:1f:42:94:4f:8d:f2:
c4:1b:81:83:7b:67:d4:c6:a0:74:9b:dd:5f:22:3d:
fe:64:18:75:68:28:7e:21:c1:e5:48:b0:1c:90:ed:
ea:f4:a3:61:bb:62:76:c2:e0:f1:13:fb:59:44:11:
84:60:30:5a:9c:d7:62:9c:a8:49:e0:3d:06:6c:ac:
05:03:c4:a0:6c:a2:85:a7:10:b5:d6:7d:6e:a8:f1:
05:c0:29:3d:5a:5c:09:6a:7e:d8:a3:15:bb:44:b4:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:81:41:CC:80:92:98:F9:DB:40:D3:95:9F:C5:E0:F6:44:20:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B65F61ACE8911EFB045FD7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.104.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:92:e0:81:94:39:19:da:6c:b7:13:ae:ae:86:e7:8b:68:ed:
b0:d8:72:b9:8b:1f:4a:cf:0a:5e:47:5c:c8:6b:ce:c5:f5:50:
c3:7f:1a:e6:49:ac:03:b7:4e:e7:d8:71:8d:b3:40:0a:76:c4:
be:0a:f5:8b:ee:4d:34:7d:3e:a8:6d:2d:8f:22:59:23:e7:fc:
f4:ca:70:81:af:74:11:89:1e:d6:a9:f8:e8:99:cc:0e:39:ef:
48:31:48:c1:a5:f7:a1:83:ff:07:bf:f2:11:ee:4e:a4:68:ac:
fc:1f:5d:68:7f:49:66:25:07:35:96:c9:c8:ed:df:fa:8e:d4:
fc:87:4f:08:b6:c5:d5:a1:e9:f5:42:1a:0c:bc:2e:8c:0b:c1:
fc:af:9e:03:f2:bd:e9:fd:3e:26:3c:65:2c:5e:67:5e:03:6b:
cc:ef:7f:33:86:ae:9c:4e:f8:78:bb:00:88:3b:ef:73:bf:ff:
2d:47:f0:92:c2:63:64:51:cc:85:cf:28:db:26:e5:0c:5b:52:
85:5c:b9:be:84:52:ed:72:30:9a:1a:75:3d:3e:e8:16:de:92:
29:49:61:d3:fc:50:39:a8:3e:d6:ab:a4:f8:53:9b:86:2d:5c:
0e:a7:b1:92:ff:93:44:30:9d:b8:8f:5d:ef:54:b6:e9:13:1b:
65:4b:e9:75
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQPiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTI1OTE4WhcNMjUwMTIxMTI1OTE4WjAYMRYw
FAYDVQQDEw02NzdmYzgyOS0yZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx39VEblbOl77ShMuKIuG4UbnmjAL5alWiuAwdB03cRsG0qj/ND+Pj8az
HwBd0H7fNU/ekAyYJ4DOQbWVNV+ZVk7i6a9t35TPQKhoyP6CvpV7HswrFFwwuzGv
67YN3FANm07wvN0+9cv+/IIo2brEhUeVCwmk8gihB8J2Dr8bO05h7VufFhTSKC1b
2DrFMxhc/40KqrJ0cEkiRG1LM7cfQpRPjfLEG4GDe2fUxqB0m91fIj3+ZBh1aCh+
IcHlSLAckO3q9KNhu2J2wuDxE/tZRBGEYDBanNdinKhJ4D0GbKwFA8SgbKKFpxC1
1n1uqPEFwCk9WlwJan7YoxW7RLR3mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN3k
gUHMgJKY+dtA05WfxeD2RCAHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QjY1RjYxQUNFODkxMUVGQjA0NUZEN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcBoMA0GCSqGSIb3DQEBCwUA
A4IBAQCzkuCBlDkZ2my3E66uhueLaO2w2HK5ix9KzwpeR1zIa87F9VDDfxrmSawD
t07n2HGNs0AKdsS+CvWL7k00fT6obS2PIlkj5/z0ynCBr3QRiR7WqfjomcwOOe9I
MUjBpfehg/8Hv/IR7k6kaKz8H11of0lmJQc1lsnI7d/6jtT8h08ItsXVoen1QhoM
vC6MC8H8r54D8r3p/T4mPGUsXmdeA2vM738zhq6cTvh4uwCIO+9zv/8tR/CSwmNk
UcyFzyjbJuUMW1KFXLm+hFLtcjCaGnU9PugW3pIpSWHT/FA5qD7Wq6T4U5uGLVwO
p7GS/5NEMJ24j13vVLbpExtlS+l1
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:45 2025 by rpki-client