Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98361C1EBEB011EF8AF91956762E951A.roa
File: 98361C1EBEB011EF8AF91956762E951A.roa (raw, json)
Hash identifier: cpB1fzOmdFXN4m0qNBC6qSWFXnpcaPhP1rqCYR+xYog=
Subject key identifier: 85:EC:6D:61:5D:BC:3C:49:76:DE:B1:39:40:B9:B5:AF:AC:E2:47:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E747
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98361C1EBEB011EF8AF91956762E951A.roa
Signing time: Fri 20 Dec 2024 08:58:35 +0000
ROA not before: Fri 20 Dec 2024 08:58:31 +0000
ROA not after: Sat 25 Jan 2025 08:58:31 +0000
asID: 6079
IP address blocks: 45.203.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59207 (0xe747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:58:31 2024 GMT
Not After : Jan 25 08:58:31 2025 GMT
Subject: CN=676531bb-4963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:7b:24:52:47:07:aa:b6:3b:da:32:1c:61:
c9:d5:73:1a:72:33:4e:02:88:40:fc:c4:12:12:b5:
4e:27:d0:37:1c:33:99:cb:5f:b3:bc:45:47:a5:c3:
49:ce:31:5c:cc:c3:fc:41:43:36:fa:1c:e5:b7:0c:
e1:ce:f6:9d:8f:52:14:35:9a:b8:0e:0d:06:50:62:
35:b7:6f:3c:02:c2:2a:72:0f:a3:3d:15:64:6c:3a:
00:2a:40:58:b1:b1:54:b7:4f:87:60:77:cc:b7:9d:
a2:7a:9a:47:3f:e7:d4:5f:1d:81:73:03:f0:e6:03:
58:d2:69:be:32:3d:4d:62:22:06:71:c3:e5:57:3c:
4f:27:5f:ba:da:e9:e8:36:52:61:14:c4:48:b0:83:
23:14:7b:f1:64:b0:3c:a9:6b:17:09:71:71:15:f4:
db:95:b2:f7:f5:71:3d:60:ce:d3:80:1a:76:5d:4b:
d8:3f:e9:28:64:67:8b:c9:2a:0b:e1:3e:da:a9:67:
e0:de:b9:4c:6b:a6:d4:62:03:12:60:fd:32:48:75:
4f:e1:c8:92:13:d9:a3:aa:7d:7d:7f:b3:ff:61:ff:
b0:2f:02:07:14:d5:4d:6c:e7:8a:bb:28:d9:7b:7d:
71:f6:4e:ed:ed:f4:10:e3:6d:dc:e6:27:ef:57:54:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:6D:61:5D:BC:3C:49:76:DE:B1:39:40:B9:B5:AF:AC:E2:47:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98361C1EBEB011EF8AF91956762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.240.0/22
Signature Algorithm: sha256WithRSAEncryption
49:bf:37:42:cd:d4:4f:a0:57:5a:5b:96:64:9c:2c:8f:91:05:
29:6b:19:e2:80:17:86:c0:96:b6:7b:2c:3b:2e:3f:6f:5e:a7:
95:55:e7:99:87:08:59:fe:d3:ad:1b:4e:01:6b:d3:08:76:0b:
58:5a:17:76:48:f5:03:b3:db:ee:50:d7:1d:b6:6d:0a:d0:1d:
27:45:dd:60:da:98:ea:a7:18:05:d8:5a:94:e9:bc:59:50:f1:
fa:24:07:2f:be:fb:17:87:b2:c9:36:45:20:a5:18:bb:79:16:
da:63:8a:bb:70:ae:ab:6f:87:dd:35:c7:db:b4:17:57:77:32:
67:44:f1:8a:c1:be:8a:40:9f:b5:1a:be:c1:04:81:d9:a9:70:
ee:27:b5:e9:44:31:70:48:53:6c:34:f2:f0:23:b1:1c:ea:55:
c1:2b:00:fe:31:52:26:f9:91:dd:00:96:ae:57:fc:bc:d2:4a:
e6:c6:7c:92:53:f0:ee:b0:68:e3:46:bf:7f:04:03:81:b4:89:
70:d4:7c:f1:3b:74:2b:bd:31:0b:12:9c:91:9f:31:9a:91:a4:
64:f6:6a:97:39:6d:e1:fa:6c:ff:fe:4a:97:6b:99:3e:fb:30:
9e:39:d9:e7:9b:ef:e2:25:f1:2e:dd:f9:46:e6:78:99:80:cf:
49:fa:5f:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOdHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDg1ODMxWhcNMjUwMTI1MDg1ODMxWjAYMRYw
FAYDVQQDEw02NzY1MzFiYi00OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAva57JFJHB6q2O9oyHGHJ1XMacjNOAohA/MQSErVOJ9A3HDOZy1+zvEVH
pcNJzjFczMP8QUM2+hzltwzhzvadj1IUNZq4Dg0GUGI1t288AsIqcg+jPRVkbDoA
KkBYsbFUt0+HYHfMt52ieppHP+fUXx2BcwPw5gNY0mm+Mj1NYiIGccPlVzxPJ1+6
2unoNlJhFMRIsIMjFHvxZLA8qWsXCXFxFfTblbL39XE9YM7TgBp2XUvYP+koZGeL
ySoL4T7aqWfg3rlMa6bUYgMSYP0ySHVP4ciSE9mjqn19f7P/Yf+wLwIHFNVNbOeK
uyjZe31x9k7t7fQQ423c5ifvV1TRewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIXs
bWFdvDxJdt6xOUC5ta+s4kcMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85ODM2MUMxRUJFQjAxMUVGOEFGOTE5NTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcvwMA0GCSqGSIb3DQEBCwUA
A4IBAQBJvzdCzdRPoFdaW5ZknCyPkQUpaxnigBeGwJa2eyw7Lj9vXqeVVeeZhwhZ
/tOtG04Ba9MIdgtYWhd2SPUDs9vuUNcdtm0K0B0nRd1g2pjqpxgF2FqU6bxZUPH6
JAcvvvsXh7LJNkUgpRi7eRbaY4q7cK6rb4fdNcfbtBdXdzJnRPGKwb6KQJ+1Gr7B
BIHZqXDuJ7XpRDFwSFNsNPLwI7Ec6lXBKwD+MVIm+ZHdAJauV/y80krmxnySU/Du
sGjjRr9/BAOBtIlw1HzxO3QrvTELEpyRnzGakaRk9mqXOW3h+mz//kqXa5k++zCe
Odnnm+/iJfEu3flG5niZgM9J+l8S
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:20 2025 by rpki-client