Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937E540ACAC411EFBC2C6376762E951A.roa
File: 937E540ACAC411EFBC2C6376762E951A.roa (raw, json)
Hash identifier: y8tmeMwl2LWGJPTI7xvbYcJNwgNmUEP8YiYVRTp0qQA=
Subject key identifier: 49:D6:66:CB:9E:EB:3D:E0:3C:95:AD:97:CA:F5:E5:9A:93:E1:62:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937E540ACAC411EFBC2C6376762E951A.roa
Signing time: Sat 04 Jan 2025 17:51:51 +0000
ROA not before: Sun 05 Jan 2025 17:51:47 +0000
ROA not after: Fri 17 Jan 2025 17:51:47 +0000
asID: 5065
IP address blocks: 45.203.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63272 (0xf728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:51:47 2025 GMT
Not After : Jan 17 17:51:47 2025 GMT
Subject: CN=67797537-8d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:41:a4:93:c0:01:1f:dc:4c:4b:b4:c3:98:
01:80:49:e8:9a:ec:c4:0a:ed:d2:96:14:8c:b1:97:
59:db:2c:bc:f9:b8:ea:83:5e:8f:1c:b3:aa:73:c3:
1b:91:9a:bf:06:71:23:5e:eb:57:44:27:ae:8e:f9:
87:57:d0:8c:b4:b0:3b:12:70:00:88:4a:07:e9:28:
0a:08:9f:87:7f:ca:b1:86:28:69:56:4a:1a:4a:4e:
06:ae:80:c6:a3:e3:a0:a2:e3:0b:ea:95:35:a0:d5:
bf:35:9e:ae:50:95:10:ec:e3:a9:7e:4f:be:94:55:
c7:b1:6b:60:b8:5f:46:44:24:4a:61:e8:ff:1e:6b:
48:a5:61:03:bc:de:9f:ea:3e:06:19:2a:67:2a:68:
2f:02:5d:fb:5d:fa:8f:b4:21:a0:35:30:1a:97:00:
9d:12:53:c0:e7:cb:16:48:45:9a:9d:5e:42:16:95:
47:6b:82:21:63:ab:30:8e:d4:8a:30:ef:30:8f:df:
c3:a9:76:66:a8:02:ad:c3:19:e2:44:a0:1d:e5:ff:
aa:6d:80:d3:41:db:d3:1e:39:67:84:f7:70:2f:fc:
dc:ba:8c:17:7f:f8:eb:fb:dc:b6:9c:2f:e6:1f:57:
6e:2c:50:0e:4e:89:fa:bc:4f:28:bd:6a:a2:f4:13:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:66:CB:9E:EB:3D:E0:3C:95:AD:97:CA:F5:E5:9A:93:E1:62:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937E540ACAC411EFBC2C6376762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9e:74:85:a8:c3:9f:bc:ac:8d:f2:91:2f:af:9c:3d:19:19:
01:20:80:67:11:b4:9b:62:0c:96:9a:de:7b:97:79:96:05:31:
46:35:38:a5:17:eb:f0:af:9e:e6:a8:3f:30:6a:f6:61:06:5b:
b8:62:00:00:9e:7e:48:3c:9f:14:55:d3:70:00:a8:97:88:c7:
b5:fd:41:74:9e:61:5d:62:5d:c7:5b:30:1f:f4:5c:1e:d6:1a:
25:d4:cf:20:0a:ef:40:da:dc:66:e1:9c:38:e9:16:64:d4:7d:
d7:9a:9a:e4:22:16:1e:c6:fd:78:73:a6:48:bf:78:0b:39:35:
e9:e8:39:d7:ab:3d:10:a1:f2:6e:f6:6c:75:6a:af:d3:ec:5d:
c3:10:db:ca:b5:5f:3f:f6:d0:ae:17:2d:e7:76:71:0a:60:13:
31:68:e2:bb:da:aa:8f:e4:62:0f:d6:d3:56:e2:38:ea:31:9a:
83:53:78:39:3c:f2:c4:37:7f:b6:8b:3f:e7:11:62:ce:14:95:
d2:79:64:dc:ec:08:35:6d:90:26:ac:93:75:ff:cf:61:3e:2c:
72:bd:9c:65:aa:58:d5:64:0e:5f:0f:c6:3a:e4:be:f7:44:e1:
44:60:fd:27:d4:a4:8b:92:5c:fd:29:b0:c7:92:f0:29:0c:ac:
0d:c6:d9:1e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPcoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTc1MTQ3WhcNMjUwMTE3MTc1MTQ3WjAYMRYw
FAYDVQQDEw02Nzc5NzUzNy04ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw+tBpJPAAR/cTEu0w5gBgEnomuzECu3SlhSMsZdZ2yy8+bjqg16PHLOq
c8MbkZq/BnEjXutXRCeujvmHV9CMtLA7EnAAiEoH6SgKCJ+Hf8qxhihpVkoaSk4G
roDGo+OgouML6pU1oNW/NZ6uUJUQ7OOpfk++lFXHsWtguF9GRCRKYej/HmtIpWED
vN6f6j4GGSpnKmgvAl37XfqPtCGgNTAalwCdElPA58sWSEWanV5CFpVHa4IhY6sw
jtSKMO8wj9/DqXZmqAKtwxniRKAd5f+qbYDTQdvTHjlnhPdwL/zcuowXf/jr+9y2
nC/mH1duLFAOTon6vE8ovWqi9BNXZwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEnW
Zsue6z3gPJWtl8r15ZqT4WKhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MzdFNTQwQUNBQzQxMUVGQkMyQzYzNzY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcs9MA0GCSqGSIb3DQEBCwUA
A4IBAQCpnnSFqMOfvKyN8pEvr5w9GRkBIIBnEbSbYgyWmt57l3mWBTFGNTilF+vw
r57mqD8wavZhBlu4YgAAnn5IPJ8UVdNwAKiXiMe1/UF0nmFdYl3HWzAf9Fwe1hol
1M8gCu9A2txm4Zw46RZk1H3XmprkIhYexv14c6ZIv3gLOTXp6DnXqz0QofJu9mx1
aq/T7F3DENvKtV8/9tCuFy3ndnEKYBMxaOK72qqP5GIP1tNW4jjqMZqDU3g5PPLE
N3+2iz/nEWLOFJXSeWTc7Ag1bZAmrJN1/89hPixyvZxlqljVZA5fD8Y65L73ROFE
YP0n1KSLklz9KbDHkvApDKwNxtke
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:35 2025 by rpki-client