Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946ABEDED00611EF93A42A77762E951A.roa
File: 946ABEDED00611EF93A42A77762E951A.roa (raw, json)
Hash identifier: JUaYjOxox/7eG5aXKmssaOnxQ+e3RMHTu4LmfZF1pz4=
Subject key identifier: 81:3A:45:2E:5E:87:56:6C:73:91:EF:58:08:6F:1C:5E:0B:07:B4:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946ABEDED00611EF93A42A77762E951A.roa
Signing time: Sat 11 Jan 2025 10:26:55 +0000
ROA not before: Sat 11 Jan 2025 10:26:51 +0000
ROA not after: Sat 25 Jan 2025 10:26:51 +0000
asID: 54801
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66984 (0x105a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:26:51 2025 GMT
Not After : Jan 25 10:26:51 2025 GMT
Subject: CN=6782476f-f0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:88:27:8c:f0:16:eb:7c:89:a1:13:29:c6:
4d:e6:19:37:31:39:f8:42:cc:7f:2b:09:f3:98:f0:
36:07:79:47:47:d9:92:cb:b2:e4:96:5b:57:79:49:
ed:6d:a2:af:f0:f5:a8:f5:a5:08:6d:5c:ce:2b:60:
1e:f3:40:a6:66:92:45:b7:86:e2:f4:a6:8a:8f:f5:
5e:72:71:24:32:f5:35:b2:77:2c:d1:82:ca:e0:2e:
54:e5:76:a0:d7:55:57:25:f0:24:17:d6:89:1a:1b:
e4:51:cc:94:84:48:58:23:9f:74:9e:2c:eb:11:a6:
e7:83:d5:a8:6c:22:ee:13:92:2e:e2:12:73:09:45:
4d:e7:ae:a2:ef:21:d3:06:ae:f7:1b:f3:92:70:bf:
93:27:a8:9c:97:ab:73:1b:e5:33:4d:3b:27:b5:78:
2c:81:21:83:57:c5:4d:4f:9c:3c:19:54:15:c1:29:
ef:3a:43:11:ce:6d:2f:df:96:76:7d:12:ae:7e:8a:
fd:09:23:e3:a9:90:60:56:d9:82:5c:73:1b:f7:46:
5a:50:fc:94:a8:62:1a:f3:7b:3b:de:f6:e1:4e:61:
e2:b7:f1:31:9a:46:21:8a:69:de:a8:26:bc:79:7b:
ca:51:06:ea:9c:40:ce:19:35:64:1a:b3:b0:e8:ab:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:45:2E:5E:87:56:6C:73:91:EF:58:08:6F:1C:5E:0B:07:B4:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946ABEDED00611EF93A42A77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
79:44:21:2e:10:b7:52:fb:09:b8:18:88:d8:e5:43:ca:a1:5b:
7d:ac:a7:8f:6c:20:0a:8f:06:e3:61:3e:a3:b5:7f:04:38:bd:
a4:8d:f0:b4:c3:d3:80:bb:c6:f1:77:2d:c6:a5:be:30:cc:27:
0a:91:b7:15:e8:64:d3:e6:7e:2e:c0:99:d4:0b:93:74:6f:d8:
8a:4c:d0:ac:00:b1:50:c7:7a:94:19:f3:92:16:16:af:43:9f:
5e:c4:a4:a0:c4:99:03:98:ba:ef:e1:ee:cb:1a:89:99:2f:cc:
a5:3c:f3:44:a8:53:6e:95:90:eb:cf:05:69:8b:6f:ff:4a:73:
fb:10:bc:bf:35:8e:5c:a7:da:4d:34:23:47:12:77:9a:c7:ea:
7b:08:cd:01:76:d7:be:da:2b:a8:d1:ef:9a:4b:f6:f8:2d:64:
db:44:a8:57:e0:52:a1:1d:2a:68:d0:fc:c5:7b:e4:ae:80:b2:
6e:d3:45:bd:34:f2:d4:80:b1:0c:66:43:03:4a:42:30:aa:3b:
94:49:25:2d:07:22:b9:44:75:08:5b:5b:b0:9c:e1:12:ea:54:
e2:d6:75:2c:29:c8:04:6e:d5:28:31:ab:e2:88:39:a3:08:e7:
61:a0:f9:54:3d:18:c6:bd:9c:76:07:95:86:c8:3d:84:29:be:
c8:f0:fa:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQWoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTAyNjUxWhcNMjUwMTI1MTAyNjUxWjAYMRYw
FAYDVQQDEw02NzgyNDc2Zi1mMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6diIJ4zwFut8iaETKcZN5hk3MTn4Qsx/KwnzmPA2B3lHR9mSy7LklltX
eUntbaKv8PWo9aUIbVzOK2Ae80CmZpJFt4bi9KaKj/VecnEkMvU1sncs0YLK4C5U
5Xag11VXJfAkF9aJGhvkUcyUhEhYI590nizrEabng9WobCLuE5Iu4hJzCUVN566i
7yHTBq73G/OScL+TJ6icl6tzG+UzTTsntXgsgSGDV8VNT5w8GVQVwSnvOkMRzm0v
35Z2fRKufor9CSPjqZBgVtmCXHMb90ZaUPyUqGIa83s73vbhTmHit/ExmkYhimne
qCa8eXvKUQbqnEDOGTVkGrOw6KvEywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIE6
RS5eh1Zsc5HvWAhvHF4LB7SuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDZBQkVERUQwMDYxMUVGOTNBNDJBNzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcggMA0GCSqGSIb3DQEBCwUA
A4IBAQB5RCEuELdS+wm4GIjY5UPKoVt9rKePbCAKjwbjYT6jtX8EOL2kjfC0w9OA
u8bxdy3Gpb4wzCcKkbcV6GTT5n4uwJnUC5N0b9iKTNCsALFQx3qUGfOSFhavQ59e
xKSgxJkDmLrv4e7LGomZL8ylPPNEqFNulZDrzwVpi2//SnP7ELy/NY5cp9pNNCNH
Eneax+p7CM0Bdte+2iuo0e+aS/b4LWTbRKhX4FKhHSpo0PzFe+SugLJu00W9NPLU
gLEMZkMDSkIwqjuUSSUtByK5RHUIW1uwnOES6lTi1nUsKcgEbtUoMaviiDmjCOdh
oPlUPRjGvZx2B5WGyD2EKb7I8Prn
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:11 2025 by rpki-client