Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D2C71ACBDD711EFAA35FB81762E951A.roa
File: 9D2C71ACBDD711EFAA35FB81762E951A.roa (raw, json)
Hash identifier: 3xrIssDd8vRHqXMD3+VCF+4F6KpwrhjgSh7NwBFZoyo=
Subject key identifier: 70:90:9A:D1:0F:14:6A:CC:AD:27:BE:4D:1B:F5:32:C6:71:28:89:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D2C71ACBDD711EFAA35FB81762E951A.roa
Signing time: Thu 19 Dec 2024 07:05:22 +0000
ROA not before: Thu 19 Dec 2024 07:05:18 +0000
ROA not after: Fri 24 Jan 2025 07:05:18 +0000
asID: 395793
IP address blocks: 45.198.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58797 (0xe5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:05:18 2024 GMT
Not After : Jan 24 07:05:18 2025 GMT
Subject: CN=6763c5b2-67fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:c7:8f:a6:a7:53:d3:06:a8:09:c3:db:69:
8d:d1:7f:a1:d9:75:1c:d6:df:e2:b2:25:40:c1:c8:
da:74:dc:00:47:7e:74:89:18:82:ef:52:28:fd:2f:
40:16:e4:a5:b7:03:0a:9e:4b:2a:5c:ac:71:0c:71:
d9:e1:57:98:fb:fb:15:ce:30:54:24:fa:9d:14:2e:
08:61:f8:8b:75:1a:1e:76:5f:f6:7b:15:6c:eb:46:
e8:b9:1a:cf:f0:95:1e:21:8f:4f:ff:ce:31:fe:94:
fc:5a:d1:b5:b2:75:92:75:15:e0:fc:8f:29:5e:bf:
24:f0:d6:21:f4:a2:3f:da:dd:e9:34:97:27:73:6f:
b9:88:1a:31:9c:2f:ff:09:5a:e1:84:9c:77:0f:f9:
a2:f3:d7:7f:ad:93:e5:66:86:da:be:3f:16:29:16:
85:7c:8d:66:e7:c2:75:6a:5c:9a:9b:d9:b8:c7:06:
fd:79:d6:2d:f6:f5:36:66:73:cd:80:04:67:27:38:
f1:f5:26:4e:bd:fb:45:1f:27:f7:de:74:3b:d4:f2:
41:52:da:e4:c4:77:ee:8c:d3:64:c0:d8:cd:6f:18:
a7:f5:cd:af:66:0c:fd:65:be:bc:a1:98:5c:b1:9b:
69:c2:01:30:b7:54:f9:ab:ef:48:72:a7:d8:b6:d0:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:9A:D1:0F:14:6A:CC:AD:27:BE:4D:1B:F5:32:C6:71:28:89:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D2C71ACBDD711EFAA35FB81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.184.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d3:37:62:d9:46:43:12:cc:16:65:70:ee:a4:1d:07:05:98:
02:8e:91:25:65:73:f2:a6:43:02:98:dd:62:2e:ce:fc:65:47:
be:aa:1f:ea:f5:3b:aa:0c:b9:13:fb:43:21:41:b3:12:37:e8:
65:5c:92:fe:2d:aa:55:d1:5b:7f:16:fa:15:a2:30:0c:10:4d:
68:15:90:64:59:35:ca:c4:01:4f:c9:06:d5:d5:e0:69:f6:70:
fe:05:b1:c8:c7:13:df:44:ce:78:9c:ee:74:d9:27:7d:33:85:
fb:ff:93:0e:9d:18:b9:3a:0c:43:fe:49:fa:96:fc:fc:b0:db:
5b:13:b9:c2:60:bb:d9:0e:89:ae:db:a5:f2:0f:45:9e:88:6e:
54:eb:03:0c:0a:91:3a:fe:1c:c7:52:fe:82:2d:1c:09:79:63:
91:48:77:2c:4f:b1:c0:b4:4a:67:de:fb:5e:f8:0a:dd:d4:16:
9b:8b:b9:5e:8e:ef:bf:67:f9:74:6b:54:5f:e4:29:20:51:54:
d0:c6:35:3a:13:d2:a2:49:76:33:25:bb:fc:48:c5:c6:51:02:
6a:9b:61:1a:5c:d9:49:b5:a9:32:53:f0:8c:c6:a9:fd:5b:3c:
b0:ef:c2:6d:3c:91:d7:6a:ae:c0:be:75:52:e7:66:e4:f6:04:
84:27:74:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDcwNTE4WhcNMjUwMTI0MDcwNTE4WjAYMRYw
FAYDVQQDEw02NzYzYzViMi02N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3NbHj6anU9MGqAnD22mN0X+h2XUc1t/isiVAwcjadNwAR350iRiC71Io
/S9AFuSltwMKnksqXKxxDHHZ4VeY+/sVzjBUJPqdFC4IYfiLdRoedl/2exVs60bo
uRrP8JUeIY9P/84x/pT8WtG1snWSdRXg/I8pXr8k8NYh9KI/2t3pNJcnc2+5iBox
nC//CVrhhJx3D/mi89d/rZPlZobavj8WKRaFfI1m58J1alyam9m4xwb9edYt9vU2
ZnPNgARnJzjx9SZOvftFHyf33nQ71PJBUtrkxHfujNNkwNjNbxin9c2vZgz9Zb68
oZhcsZtpwgEwt1T5q+9IcqfYttBFgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHCQ
mtEPFGrMrSe+TRv1MsZxKIltMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RDJDNzFBQ0JERDcxMUVGQUEzNUZCODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALca4MA0GCSqGSIb3DQEBCwUA
A4IBAQBD0zdi2UZDEswWZXDupB0HBZgCjpElZXPypkMCmN1iLs78ZUe+qh/q9Tuq
DLkT+0MhQbMSN+hlXJL+LapV0Vt/FvoVojAMEE1oFZBkWTXKxAFPyQbV1eBp9nD+
BbHIxxPfRM54nO502Sd9M4X7/5MOnRi5OgxD/kn6lvz8sNtbE7nCYLvZDomu26Xy
D0WeiG5U6wMMCpE6/hzHUv6CLRwJeWORSHcsT7HAtEpn3vte+Ard1Babi7leju+/
Z/l0a1Rf5CkgUVTQxjU6E9KiSXYzJbv8SMXGUQJqm2EaXNlJtakyU/CMxqn9Wzyw
78JtPJHXaq7AvnVS52bk9gSEJ3Qu
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:48 2025 by rpki-client