Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EEDC47202F411EF87BE1EFC007001B1.roa
File: 8EEDC47202F411EF87BE1EFC007001B1.roa (raw, json)
Hash identifier: n/GN+KLsqYv46iauRtkKe2akQvmfAeUcQ7AgNxKUxQg=
Subject key identifier: 06:6E:ED:CD:E2:70:B5:C5:A3:22:34:63:62:35:D0:1E:FD:F8:75:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EEDC47202F411EF87BE1EFC007001B1.roa
Signing time: Thu 25 Apr 2024 11:11:26 +0000
ROA not before: Thu 25 Apr 2024 11:11:23 +0000
ROA not after: Sun 05 May 2024 11:11:23 +0000
asID: 39600
IP address blocks: 45.195.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34039 (0x84f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:11:23 2024 GMT
Not After : May 5 11:11:23 2024 GMT
Subject: CN=662a3a5e-2e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:e9:b9:52:e2:c1:e5:99:64:73:c6:f9:2e:
11:a2:c2:64:9f:8e:f4:38:02:b5:91:96:54:23:e3:
9b:48:b6:23:4b:99:ff:23:96:f9:93:f2:fa:b9:42:
b1:8c:9a:e6:c6:1d:ab:4b:2b:0a:c5:5a:e8:2c:a9:
a3:9e:f0:a3:3d:83:14:c0:f6:de:9f:ff:0e:6a:00:
c0:da:5c:84:70:5c:f5:ed:87:8f:de:b9:ec:f9:f9:
40:9f:3c:d8:02:48:5a:2a:7b:48:e7:e2:48:9e:22:
2f:a0:27:47:5e:ee:72:cd:c7:01:fb:21:4a:81:7e:
1c:ea:32:87:19:b5:c0:79:c5:98:7d:2f:38:48:af:
8a:c2:ee:43:38:16:f1:09:b9:5d:20:92:ca:c9:7d:
d5:af:92:2a:69:ba:e6:4b:78:29:6e:0d:57:f7:70:
3d:c2:5f:60:af:36:01:11:1c:e4:aa:37:c0:1e:eb:
89:39:c5:d3:89:e3:d1:b3:cf:f8:af:41:72:7d:51:
f8:c3:a8:32:09:b5:74:c5:c8:b5:33:cc:25:09:73:
73:14:5f:59:f7:4a:96:72:5e:a6:96:e4:a3:35:93:
e6:1e:fa:e4:65:e7:79:4b:2d:89:63:79:b6:35:8e:
4d:bb:3b:77:ec:ff:e2:cc:49:1b:b0:7a:18:0a:aa:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:ED:CD:E2:70:B5:C5:A3:22:34:63:62:35:D0:1E:FD:F8:75:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EEDC47202F411EF87BE1EFC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:9f:e5:dd:1a:1a:bd:0f:26:0f:92:46:82:d8:f3:99:50:ec:
f0:07:3d:17:3f:e5:47:1d:58:d8:43:75:e2:13:c5:21:52:ed:
87:c1:ba:ce:9f:d9:2b:7c:b7:3a:a3:47:52:e7:1f:c5:05:6b:
d3:ce:52:e9:ca:ee:b1:e9:74:0f:88:c5:ab:23:56:56:46:ef:
42:01:dc:e3:95:82:fd:07:55:52:7d:3e:bd:73:3e:32:37:ee:
a4:0a:45:52:59:9b:c5:a8:61:16:71:2c:c1:1e:4f:02:bb:4a:
f5:21:c8:70:5b:07:2f:ae:a3:ea:1d:9b:02:68:9c:28:90:c3:
94:a2:d4:1a:3d:ec:38:03:1d:36:16:82:78:04:4f:ba:f8:da:
80:15:1e:98:fd:87:9c:93:f4:b7:99:b1:8d:a4:0a:23:51:34:
a0:c7:9a:c7:bc:f2:99:ad:19:2a:f2:1d:22:27:ef:9d:e9:5e:
c9:ae:e1:67:40:7d:1b:19:65:4b:d4:a4:cb:1c:2c:89:9f:d6:
71:12:a7:1f:73:a8:8e:02:4f:b7:01:b2:02:12:37:f5:e8:98:
16:8e:7a:36:86:4d:b2:85:63:a8:00:4f:ff:4d:e3:df:41:f5:
02:f7:00:cc:9f:b0:57:10:02:65:3a:f6:51:bd:e3:7f:43:53:
73:ce:e1:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIT3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTExMTIzWhcNMjQwNTA1MTExMTIzWjAYMRYw
FAYDVQQDEw02NjJhM2E1ZS0yZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAopTpuVLiweWZZHPG+S4RosJkn470OAK1kZZUI+ObSLYjS5n/I5b5k/L6
uUKxjJrmxh2rSysKxVroLKmjnvCjPYMUwPben/8OagDA2lyEcFz17YeP3rns+flA
nzzYAkhaKntI5+JIniIvoCdHXu5yzccB+yFKgX4c6jKHGbXAecWYfS84SK+Kwu5D
OBbxCbldIJLKyX3Vr5IqabrmS3gpbg1X93A9wl9grzYBERzkqjfAHuuJOcXTiePR
s8/4r0FyfVH4w6gyCbV0xci1M8wlCXNzFF9Z90qWcl6mluSjNZPmHvrkZed5Sy2J
Y3m2NY5Nuzt37P/izEkbsHoYCqr07QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAZu
7c3icLXFoyI0Y2I10B79+HU1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RUVEQzQ3MjAyRjQxMUVGODdCRTFFRkMwMDcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQBLn+XdGhq9DyYPkkaC2POZUOzwBz0XP+VHHVjYQ3XiE8UhUu2HwbrOn9kr
fLc6o0dS5x/FBWvTzlLpyu6x6XQPiMWrI1ZWRu9CAdzjlYL9B1VSfT69cz4yN+6k
CkVSWZvFqGEWcSzBHk8Cu0r1IchwWwcvrqPqHZsCaJwokMOUotQaPew4Ax02FoJ4
BE+6+NqAFR6Y/Yeck/S3mbGNpAojUTSgx5rHvPKZrRkq8h0iJ++d6V7JruFnQH0b
GWVL1KTLHCyJn9ZxEqcfc6iOAk+3AbICEjf16JgWjno2hk2yhWOoAE//TePfQfUC
9wDMn7BXEAJlOvZRveN/Q1NzzuEP
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org