Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F997A78C9A111EF8378044F762E951A.roa
File: 8F997A78C9A111EF8378044F762E951A.roa (raw, json)
Hash identifier: XOnSyKOwVGRQDMPv14X/+fcXib+kcc/lzmbLUsqgT6M=
Subject key identifier: 8D:24:73:12:BB:CF:2A:7C:6B:41:E1:72:DC:E0:DE:06:6A:64:B8:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F667
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F997A78C9A111EF8378044F762E951A.roa
Signing time: Fri 03 Jan 2025 07:08:41 +0000
ROA not before: Fri 03 Jan 2025 07:08:37 +0000
ROA not after: Sat 18 Jan 2025 07:08:37 +0000
asID: 54801
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63079 (0xf667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:08:37 2025 GMT
Not After : Jan 18 07:08:37 2025 GMT
Subject: CN=67778cf9-81f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:60:74:df:ea:48:9b:01:d8:9d:ae:f6:8a:
9e:91:ca:32:04:11:e9:69:c7:85:eb:04:1c:00:04:
56:59:95:11:84:21:2f:fb:c6:a8:3a:35:82:93:02:
79:da:4e:d7:78:40:4f:b7:6e:31:47:f9:9b:05:bb:
0a:cd:bb:b7:a9:cd:4a:10:a7:d2:1c:ef:5b:5d:d1:
79:aa:c3:13:5a:b9:48:1c:be:83:74:57:24:52:a7:
94:40:e0:57:f6:a2:2d:58:0a:d7:8b:89:a5:fb:1d:
49:e9:2c:6d:ab:59:32:d9:af:d2:16:6f:03:dd:c4:
a5:77:3d:e2:13:fa:d5:d7:02:ab:12:3e:cc:2a:c7:
df:2a:95:42:10:7c:12:00:f1:ea:5e:6d:88:0e:48:
69:a5:e4:3e:97:48:5b:d1:0f:60:76:58:54:2c:3b:
fc:35:dc:99:f9:df:83:d8:da:4f:84:0a:1c:51:aa:
19:f3:5e:7d:27:3f:5d:29:89:25:95:6f:a8:ba:26:
75:8e:e9:b1:9d:ef:90:86:9b:00:73:35:db:67:d4:
b4:20:94:86:de:f1:31:dd:26:82:ad:f0:30:70:93:
97:44:50:9f:a0:0d:3b:c5:be:bc:09:ec:4c:ae:40:
96:d0:73:d5:a0:75:14:d5:b5:72:f5:55:bd:b1:56:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:73:12:BB:CF:2A:7C:6B:41:E1:72:DC:E0:DE:06:6A:64:B8:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F997A78C9A111EF8378044F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:ff:38:c4:79:f0:0c:d2:fd:c0:b9:f4:8a:fd:18:c5:c2:8e:
66:cd:c4:00:56:94:db:2c:af:7e:1b:7d:b7:71:0c:68:c8:b2:
d8:ed:c9:67:f5:fd:1d:41:fb:72:e2:0c:79:d5:6b:da:72:3a:
08:83:bf:55:28:c4:5e:26:fb:8c:79:6f:28:0d:de:0c:3f:e2:
40:ff:54:b3:59:08:b8:21:0a:ed:9a:47:a6:ac:db:f7:8c:b7:
86:af:24:0f:91:7d:34:f2:5c:3f:b6:89:c3:37:52:2b:6d:14:
77:b9:f6:e2:8f:a5:8c:70:26:03:57:ab:0f:f1:58:62:e0:6a:
ec:58:2c:d4:66:96:a1:ad:55:be:3c:5a:1a:36:3f:80:34:f2:
59:58:7a:82:83:56:f4:9b:6c:1f:b5:8c:0c:79:ed:a4:27:1d:
b6:47:4e:23:16:7d:d7:dc:f6:0a:a0:2d:29:2b:ee:8e:a8:cb:
e5:11:71:89:10:f5:93:68:1b:57:87:91:e9:bc:6e:86:c8:7e:
b9:21:1b:29:85:10:7c:dd:1c:bc:68:6d:e4:46:71:d5:66:59:
e0:9c:9b:d7:5b:8a:a7:7d:4f:82:5b:c9:be:68:44:8a:b8:22:
f8:ac:2e:c2:ba:2f:0e:4e:26:cb:14:00:7b:49:10:58:00:6c:
13:2f:53:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPZnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDcwODM3WhcNMjUwMTE4MDcwODM3WjAYMRYw
FAYDVQQDEw02Nzc3OGNmOS04MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzpgdN/qSJsB2J2u9oqekcoyBBHpaceF6wQcAARWWZURhCEv+8aoOjWC
kwJ52k7XeEBPt24xR/mbBbsKzbu3qc1KEKfSHO9bXdF5qsMTWrlIHL6DdFckUqeU
QOBX9qItWArXi4ml+x1J6Sxtq1ky2a/SFm8D3cSldz3iE/rV1wKrEj7MKsffKpVC
EHwSAPHqXm2IDkhppeQ+l0hb0Q9gdlhULDv8NdyZ+d+D2NpPhAocUaoZ8159Jz9d
KYkllW+ouiZ1jumxne+QhpsAczXbZ9S0IJSG3vEx3SaCrfAwcJOXRFCfoA07xb68
CexMrkCW0HPVoHUU1bVy9VW9sVY1KwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI0k
cxK7zyp8a0Hhctzg3gZqZLgCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Rjk5N0E3OEM5QTExMUVGODM3ODA0NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcggMA0GCSqGSIb3DQEBCwUA
A4IBAQBq/zjEefAM0v3AufSK/RjFwo5mzcQAVpTbLK9+G323cQxoyLLY7cln9f0d
Qfty4gx51WvacjoIg79VKMReJvuMeW8oDd4MP+JA/1SzWQi4IQrtmkemrNv3jLeG
ryQPkX008lw/tonDN1IrbRR3ufbij6WMcCYDV6sP8Vhi4GrsWCzUZpahrVW+PFoa
Nj+ANPJZWHqCg1b0m2wftYwMee2kJx22R04jFn3X3PYKoC0pK+6OqMvlEXGJEPWT
aBtXh5HpvG6GyH65IRsphRB83Ry8aG3kRnHVZlngnJvXW4qnfU+CW8m+aESKuCL4
rC7Cui8OTibLFAB7SRBYAGwTL1ON
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:54 2025 by rpki-client