Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/933A51964A6411EF88ED91AA762E951A.roa
File: 933A51964A6411EF88ED91AA762E951A.roa (raw, json)
Hash identifier: UaDEl5qFLUvgzSQD3C7H/pf8V6HyP4EWAKwYXEuVoxQ=
Subject key identifier: D3:39:D8:8D:F7:0D:94:BA:E6:3C:44:49:42:97:D2:43:18:B6:5B:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/933A51964A6411EF88ED91AA762E951A.roa
Signing time: Thu 25 Jul 2024 09:02:10 +0000
ROA not before: Thu 25 Jul 2024 09:02:07 +0000
ROA not after: Sat 03 Aug 2024 09:02:07 +0000
asID: 22773
IP address blocks: 45.207.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40955 (0x9ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:02:07 2024 GMT
Not After : Aug 3 09:02:07 2024 GMT
Subject: CN=66a21492-f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:30:bb:a9:28:da:02:65:03:26:67:0c:8a:
85:71:7d:f0:72:0b:44:db:c0:7d:58:5c:26:89:9d:
4e:8e:cc:5d:92:1c:4e:8d:7a:85:f5:53:09:74:4b:
08:45:21:8c:89:b8:32:95:9b:9d:b8:b2:67:c1:c0:
13:79:ad:e0:8e:42:d6:77:ee:6b:6f:ed:49:74:f7:
05:10:ff:3c:36:13:b2:56:27:cc:69:93:eb:63:bb:
d4:bf:ac:2c:2a:45:3b:d2:0f:fe:7c:cd:a6:57:8f:
63:a8:57:ae:1f:08:7a:82:4d:41:34:3a:95:e8:86:
8d:6f:1d:e3:ca:ba:9f:ea:5c:eb:31:ed:9d:45:8b:
10:f0:62:c3:a0:e2:65:9a:39:6b:ce:06:af:9f:e6:
64:56:3c:cb:45:0a:24:ab:3d:ca:4a:6e:c9:41:db:
4e:d9:8c:c3:69:d0:7f:66:dd:00:6c:49:ff:d0:04:
4c:be:88:94:9d:9e:08:6b:95:0d:68:8c:55:7f:5a:
a0:ce:76:7b:f8:8f:95:6b:7e:1c:77:f0:c3:68:38:
73:59:3c:05:02:bd:aa:9f:9e:fe:a3:54:82:eb:d0:
b6:46:7c:b7:b4:ba:45:1c:a3:66:a6:0c:e4:af:19:
0d:ba:2a:d8:44:db:cf:ae:8b:88:f0:b0:04:ba:d2:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:D8:8D:F7:0D:94:BA:E6:3C:44:49:42:97:D2:43:18:B6:5B:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/933A51964A6411EF88ED91AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.0.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a9:d3:d6:6b:1b:af:a6:f4:4d:1c:0e:e9:fb:a0:cc:36:b0:
5b:c7:b8:b7:5b:a7:f5:a5:ec:21:b5:3a:78:61:ce:58:17:02:
58:34:1b:60:3c:11:24:6a:52:25:ac:98:0e:27:e7:7c:42:f4:
48:52:05:4f:40:ea:ef:08:47:44:de:56:8a:03:9a:f7:48:84:
75:cf:2a:21:7e:d3:dc:98:35:c9:e0:50:85:6d:af:8b:a4:87:
c6:a6:a2:4f:9c:5a:72:d9:9b:e1:30:98:01:5f:9f:e1:28:f4:
40:c1:4e:f6:0b:20:c9:81:75:e5:92:00:6e:ec:f7:7e:66:87:
d8:12:c5:6b:26:88:73:36:4b:73:7a:2d:d7:97:f1:24:4e:be:
ed:a2:0b:98:33:61:3f:4b:88:04:ed:16:c1:3a:83:9d:25:dc:
d4:7d:29:cf:b7:a8:e9:48:55:ff:45:02:4c:18:85:ab:46:79:
52:da:da:17:df:75:1b:d2:02:c9:40:88:a5:3a:5a:62:23:41:
0f:ba:b6:3b:8b:0e:3e:f5:c7:2d:54:35:c1:f5:76:97:9c:39:
5e:7d:f7:68:c6:79:62:e2:4c:a4:1b:0a:f4:13:64:77:16:64:
45:85:aa:8c:3c:74:97:28:0b:b6:01:03:f5:3f:03:35:bc:d9:
32:6a:2b:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDkwMjA3WhcNMjQwODAzMDkwMjA3WjAYMRYw
FAYDVQQDEw02NmEyMTQ5Mi1mMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA72cwu6ko2gJlAyZnDIqFcX3wcgtE28B9WFwmiZ1OjsxdkhxOjXqF9VMJ
dEsIRSGMibgylZuduLJnwcATea3gjkLWd+5rb+1JdPcFEP88NhOyVifMaZPrY7vU
v6wsKkU70g/+fM2mV49jqFeuHwh6gk1BNDqV6IaNbx3jyrqf6lzrMe2dRYsQ8GLD
oOJlmjlrzgavn+ZkVjzLRQokqz3KSm7JQdtO2YzDadB/Zt0AbEn/0ARMvoiUnZ4I
a5UNaIxVf1qgznZ7+I+Va34cd/DDaDhzWTwFAr2qn57+o1SC69C2Rny3tLpFHKNm
pgzkrxkNuirYRNvProuI8LAEutJVIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNM5
2I33DZS65jxESUKX0kMYtluWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MzNBNTE5NjRBNjQxMUVGODhFRDkxQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLc8AMA0GCSqGSIb3DQEBCwUA
A4IBAQAjqdPWaxuvpvRNHA7p+6DMNrBbx7i3W6f1pewhtTp4Yc5YFwJYNBtgPBEk
alIlrJgOJ+d8QvRIUgVPQOrvCEdE3laKA5r3SIR1zyohftPcmDXJ4FCFba+LpIfG
pqJPnFpy2ZvhMJgBX5/hKPRAwU72CyDJgXXlkgBu7Pd+ZofYEsVrJohzNktzei3X
l/EkTr7toguYM2E/S4gE7RbBOoOdJdzUfSnPt6jpSFX/RQJMGIWrRnlS2toX33Ub
0gLJQIilOlpiI0EPurY7iw4+9cctVDXB9XaXnDleffdoxnli4kykGwr0E2R3FmRF
haqMPHSXKAu2AQP1PwM1vNkyaiv6
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org