Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E9BFC6A377311EFAF5F357E762E951A.roa
File: 8E9BFC6A377311EFAF5F357E762E951A.roa (raw, json)
Hash identifier: z2EyTMIGHZGdrie4DcV2Ehq2s7kUFEllb7XyZcxMW1o=
Subject key identifier: 4A:F9:77:79:59:B7:FD:97:22:5B:15:97:89:D8:8A:EB:2C:45:8C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E9BFC6A377311EFAF5F357E762E951A.roa
Signing time: Mon 01 Jul 2024 06:31:32 +0000
ROA not before: Mon 01 Jul 2024 06:31:29 +0000
ROA not after: Wed 31 Jul 2024 06:31:29 +0000
asID: 398823
IP address blocks: 45.205.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38610 (0x96d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:31:29 2024 GMT
Not After : Jul 31 06:31:29 2024 GMT
Subject: CN=66824d44-ef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:3e:54:de:2f:88:49:80:de:55:97:cc:b7:
ae:16:37:98:1b:83:00:f9:18:d5:87:95:64:ec:0a:
8b:c7:3d:5a:2a:c2:90:5e:46:49:55:5e:99:f8:7e:
69:cd:16:49:97:1a:8a:18:ce:95:b0:8b:6c:ed:78:
76:8e:64:12:52:e8:31:ca:3a:8d:5d:9f:03:f2:9d:
93:ef:6d:4c:a5:fe:d5:ca:c5:bf:a4:a0:80:d3:11:
5e:1e:8f:16:ba:fa:35:01:67:72:4a:64:15:af:ec:
db:57:2f:2a:68:61:4e:2c:ed:9b:09:a8:10:40:55:
bb:ad:9f:2a:91:aa:16:9d:f9:d2:93:2a:a4:92:28:
58:25:49:4a:44:88:45:0f:21:00:06:4e:97:50:22:
e9:d2:ed:1b:d5:d5:9e:eb:82:18:c9:dc:fa:d5:99:
c7:12:f3:6f:d3:92:1d:bc:dc:12:e9:21:4d:99:f9:
e8:0f:a2:74:a5:06:a0:af:5a:9c:da:37:60:1b:7e:
e6:b0:e2:c3:e8:1e:e4:57:22:8e:eb:98:95:ee:e7:
09:fe:51:d8:23:0d:d8:e4:b6:01:a6:ba:4b:d7:4b:
92:7c:c6:83:4c:8e:34:48:60:77:52:e7:ea:c2:9a:
00:56:df:21:82:e3:1d:96:ce:b0:48:b9:d7:c0:65:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:77:79:59:B7:FD:97:22:5B:15:97:89:D8:8A:EB:2C:45:8C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E9BFC6A377311EFAF5F357E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:bf:01:ee:c9:bd:53:30:bf:9d:73:95:0d:71:24:63:78:c9:
41:ce:5e:ec:3b:b7:c9:92:02:2e:d1:fa:32:31:08:91:5b:a1:
c1:37:a4:4e:46:6a:6e:44:e5:cd:36:ad:4c:de:5a:7e:21:b7:
9d:f2:b5:00:7c:42:60:4b:8c:86:39:23:4d:37:bd:26:00:b2:
38:bb:af:cb:73:39:5d:c7:55:97:6b:45:67:e8:53:f4:f7:6f:
ea:0b:8c:d8:5e:1a:e1:86:d4:2b:08:eb:ad:77:b6:5f:0e:ce:
b6:df:d8:7c:55:8e:43:47:78:47:3a:9c:eb:ec:da:b0:15:9d:
ea:57:19:e2:e1:ba:51:00:90:30:0d:48:2f:82:8d:b2:77:0a:
1a:ec:3e:51:2a:72:56:55:91:86:cf:be:e8:4b:af:1c:98:2e:
f0:64:7f:18:25:7f:30:0b:85:d7:a5:e3:88:cb:41:a3:71:20:
06:eb:be:69:ac:e8:f9:c0:82:d1:58:2e:c0:ba:c9:3f:c8:eb:
bf:75:cc:8a:fb:ca:8e:14:24:96:f8:97:01:18:78:aa:39:57:
ab:4d:12:25:d5:4d:0c:22:a5:7f:c8:96:76:c7:91:a1:65:48:
64:e3:41:6d:8b:d2:16:11:d2:c0:d7:53:b0:3f:a5:33:b2:09:
06:37:cc:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJbSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAxMDYzMTI5WhcNMjQwNzMxMDYzMTI5WjAYMRYw
FAYDVQQDEw02NjgyNGQ0NC1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8oA+VN4viEmA3lWXzLeuFjeYG4MA+RjVh5Vk7AqLxz1aKsKQXkZJVV6Z
+H5pzRZJlxqKGM6VsIts7Xh2jmQSUugxyjqNXZ8D8p2T721Mpf7VysW/pKCA0xFe
Ho8Wuvo1AWdySmQVr+zbVy8qaGFOLO2bCagQQFW7rZ8qkaoWnfnSkyqkkihYJUlK
RIhFDyEABk6XUCLp0u0b1dWe64IYydz61ZnHEvNv05IdvNwS6SFNmfnoD6J0pQag
r1qc2jdgG37msOLD6B7kVyKO65iV7ucJ/lHYIw3Y5LYBprpL10uSfMaDTI40SGB3
UufqwpoAVt8hguMdls6wSLnXwGVNswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEr5
d3lZt/2XIlsVl4nYiussRYywMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTlCRkM2QTM3NzMxMUVGQUY1RjM1N0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc2wMA0GCSqGSIb3DQEBCwUA
A4IBAQC7vwHuyb1TML+dc5UNcSRjeMlBzl7sO7fJkgIu0foyMQiRW6HBN6RORmpu
ROXNNq1M3lp+Ibed8rUAfEJgS4yGOSNNN70mALI4u6/Lczldx1WXa0Vn6FP092/q
C4zYXhrhhtQrCOutd7ZfDs6239h8VY5DR3hHOpzr7NqwFZ3qVxni4bpRAJAwDUgv
go2ydwoa7D5RKnJWVZGGz77oS68cmC7wZH8YJX8wC4XXpeOIy0GjcSAG675prOj5
wILRWC7Ausk/yOu/dcyK+8qOFCSW+JcBGHiqOVerTRIl1U0MIqV/yJZ2x5GhZUhk
40Fti9IWEdLA11OwP6UzsgkGN8xL
-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org