Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999D5F964A5B11EFA6917C6D762E951A.roa
File: 999D5F964A5B11EFA6917C6D762E951A.roa (raw, json)
Hash identifier: NEQIYX8wR8NNxH2DgDO2Ziqb5hu66IDOmPfkqHahd5A=
Subject key identifier: DD:AC:D6:DB:FB:D3:87:9D:7D:49:EB:49:CA:E2:B5:B8:3F:24:41:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999D5F964A5B11EFA6917C6D762E951A.roa
Signing time: Thu 25 Jul 2024 07:57:55 +0000
ROA not before: Thu 25 Jul 2024 07:57:52 +0000
ROA not after: Sat 03 Aug 2024 07:57:52 +0000
asID: 174
IP address blocks: 45.196.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40901 (0x9fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:57:52 2024 GMT
Not After : Aug 3 07:57:52 2024 GMT
Subject: CN=66a20583-0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:45:f6:f6:fe:6a:37:84:79:af:ad:e9:c1:
de:f3:41:d9:9e:11:77:92:d7:03:ca:bd:41:b3:be:
2a:7f:07:3e:92:0e:cf:cb:fe:3c:2c:33:2f:4d:fa:
d5:50:7f:aa:6a:34:a4:07:38:11:1a:ba:6c:71:1b:
dd:ad:00:a4:98:af:7f:b5:e6:92:f0:b9:2b:14:c2:
46:ec:65:97:27:58:51:f7:e1:09:de:88:34:a1:c7:
26:32:e7:54:64:d4:aa:f1:cd:da:dc:da:71:18:48:
bf:0e:a1:a3:ad:78:75:d9:e2:92:52:12:35:d5:e3:
24:c9:30:e8:2f:c4:4f:6d:87:95:bb:d4:ad:e4:aa:
6e:73:d8:cd:1d:1d:b3:08:b1:ac:92:64:99:4f:87:
25:b8:f2:dd:cb:f2:94:57:d8:b8:32:05:d6:a4:92:
61:6e:43:b5:9f:83:fe:fa:1e:08:47:3c:ae:dc:c3:
3f:c5:31:57:17:82:d8:cb:91:a2:2e:fb:16:2f:80:
4b:38:31:84:5d:e8:d3:da:49:d4:f3:06:74:26:5c:
9f:95:7e:07:41:1d:0b:ac:14:bb:4a:f4:e6:b8:dc:
d4:6a:34:c6:7b:62:e3:28:74:a7:2f:e5:12:6d:27:
9c:4c:62:d9:6d:22:34:42:ae:ce:0f:14:b8:84:9a:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AC:D6:DB:FB:D3:87:9D:7D:49:EB:49:CA:E2:B5:B8:3F:24:41:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999D5F964A5B11EFA6917C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.152.0/24
Signature Algorithm: sha256WithRSAEncryption
87:41:82:ef:96:bd:dd:cd:09:9e:7a:e6:47:c5:fc:85:df:a4:
f3:a4:e3:ef:2c:41:bf:b1:64:ae:14:27:ed:04:36:af:2d:e4:
74:ef:52:71:4a:e0:f7:b4:83:5e:7d:fc:fa:77:66:b6:49:ac:
6b:42:96:74:76:d8:4c:49:5d:6f:22:65:58:c4:71:b9:72:a5:
c0:c4:cf:ce:77:7a:0c:57:90:bd:de:72:12:74:72:c5:61:a9:
4e:74:99:01:b2:cb:cc:e3:15:05:e0:03:b8:c1:2d:14:24:05:
73:60:f2:7a:75:1c:2c:8e:45:a1:a2:98:4e:4d:41:0f:2a:fe:
dc:cc:af:b9:62:74:82:a3:e7:99:93:0d:2d:5e:9c:f6:82:e0:
dc:5e:8d:bf:ee:e8:cb:5f:a7:09:f3:42:f0:ca:d9:35:3e:f4:
98:fe:f8:e0:59:f9:83:1e:2f:f5:4f:c1:66:f6:8f:9c:de:d5:
f6:e2:01:5d:97:4d:15:ee:30:a0:37:8d:01:6e:09:01:60:a3:
7e:6c:9b:d6:f2:10:9a:cd:8e:34:5d:b0:7c:1c:31:43:cd:cd:
cb:5f:4e:dc:67:61:34:27:44:b1:e7:1c:54:70:4f:1d:2d:e9:
73:cc:64:a5:df:e9:68:7c:a5:13:01:54:c5:96:1f:a3:22:df:
a5:88:f2:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDc1NzUyWhcNMjQwODAzMDc1NzUyWjAYMRYw
FAYDVQQDEw02NmEyMDU4My0wNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlx5F9vb+ajeEea+t6cHe80HZnhF3ktcDyr1Bs74qfwc+kg7Py/48LDMv
TfrVUH+qajSkBzgRGrpscRvdrQCkmK9/teaS8LkrFMJG7GWXJ1hR9+EJ3og0occm
MudUZNSq8c3a3NpxGEi/DqGjrXh12eKSUhI11eMkyTDoL8RPbYeVu9St5Kpuc9jN
HR2zCLGskmSZT4cluPLdy/KUV9i4MgXWpJJhbkO1n4P++h4IRzyu3MM/xTFXF4LY
y5GiLvsWL4BLODGEXejT2knU8wZ0JlyflX4HQR0LrBS7SvTmuNzUajTGe2LjKHSn
L+USbSecTGLZbSI0Qq7ODxS4hJr14QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN2s
1tv704edfUnrScritbg/JEH2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTlENUY5NjRBNUIxMUVGQTY5MTdDNkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSYMA0GCSqGSIb3DQEBCwUA
A4IBAQCHQYLvlr3dzQmeeuZHxfyF36TzpOPvLEG/sWSuFCftBDavLeR071JxSuD3
tINeffz6d2a2SaxrQpZ0dthMSV1vImVYxHG5cqXAxM/Od3oMV5C93nISdHLFYalO
dJkBssvM4xUF4AO4wS0UJAVzYPJ6dRwsjkWhophOTUEPKv7czK+5YnSCo+eZkw0t
Xpz2guDcXo2/7ujLX6cJ80Lwytk1PvSY/vjgWfmDHi/1T8Fm9o+c3tX24gFdl00V
7jCgN40BbgkBYKN+bJvW8hCazY40XbB8HDFDzc3LX07cZ2E0J0Sx5xxUcE8dLelz
zGSl3+lofKUTAVTFlh+jIt+liPI4
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org