Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2154750D00811EFAEFBEE83762E951A.roa
File: A2154750D00811EFAEFBEE83762E951A.roa (raw, json)
Hash identifier: zQ4dx5lvfIo9uRKT8hCLR7gbsxHPEyJL13QmGTUgZGI=
Subject key identifier: C0:C6:89:A3:65:02:E7:3B:62:E4:A0:8C:E0:08:FE:77:50:7B:20:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2154750D00811EFAEFBEE83762E951A.roa
Signing time: Sat 11 Jan 2025 10:41:37 +0000
ROA not before: Sat 11 Jan 2025 10:41:33 +0000
ROA not after: Sat 25 Jan 2025 10:41:33 +0000
asID: 54801
IP address blocks: 45.207.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66996 (0x105b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:41:33 2025 GMT
Not After : Jan 25 10:41:33 2025 GMT
Subject: CN=67824ae1-ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:46:66:10:6b:3a:3a:44:14:3c:89:4c:51:
18:3b:32:43:e2:53:71:15:47:67:01:43:ad:c4:60:
21:05:37:88:9b:19:9b:db:dc:c5:69:de:d0:06:03:
b6:46:78:01:6d:26:ac:8d:0b:6b:ec:fe:3e:20:57:
54:8c:45:d3:37:56:48:b5:ae:8d:13:c5:63:5e:e4:
ed:fd:bb:ab:db:db:05:11:23:57:cf:f6:68:81:d3:
10:43:f8:74:d5:03:5e:3f:4d:b1:0a:cd:8f:6e:20:
b6:a6:a8:b7:48:f7:9b:9f:d0:b7:aa:ff:d0:e0:b7:
82:51:69:bf:5f:8f:1d:6d:a7:c1:78:78:17:1b:36:
76:81:0c:d6:85:f3:ba:e5:0f:49:9f:ea:67:c2:04:
f3:b4:31:1d:41:1c:20:26:4c:bb:00:d6:70:42:60:
ac:68:a2:e9:e1:8a:6c:18:68:99:9b:64:5e:68:af:
6d:e9:93:81:af:b4:05:0b:ea:31:47:0f:ae:85:90:
1e:de:dc:e6:85:30:80:e9:81:d3:bf:ed:77:38:61:
db:54:db:29:d5:43:84:61:ed:9c:e9:c9:d8:46:61:
da:cf:b9:4f:df:ec:95:7a:0f:ce:73:41:fe:7d:7e:
64:d7:d5:bf:f9:44:f4:f7:9f:3d:53:a3:27:66:f6:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:89:A3:65:02:E7:3B:62:E4:A0:8C:E0:08:FE:77:50:7B:20:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2154750D00811EFAEFBEE83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:4a:99:e1:13:b2:15:85:a1:ed:bd:60:6b:a2:35:b0:58:f8:
cd:04:5f:1d:ce:37:e5:63:1a:98:10:5b:21:3c:ed:39:2b:78:
a2:f8:4a:7a:7f:27:04:c2:2d:53:63:f1:af:ac:83:2a:1f:39:
ff:11:30:7e:ed:57:c3:24:63:cd:9c:e1:bb:1e:bc:f6:61:ca:
2c:63:8f:dd:db:81:c2:7c:b0:7a:19:8a:63:c2:d2:68:fa:d6:
51:a9:b5:69:a6:50:e2:5b:26:0c:76:79:c4:10:9b:af:e2:e7:
0a:4a:fd:57:53:1f:f9:3c:9e:f6:d9:f6:e5:ce:10:a4:3f:7b:
4c:93:2a:1c:59:91:26:d6:2b:cf:ca:43:f3:ac:b7:41:39:b9:
5d:66:15:72:29:c9:54:cd:ae:21:f8:a3:08:b7:66:00:ba:3f:
1d:32:fa:31:3c:cf:f4:26:fd:d9:91:5a:cb:81:88:c9:93:9d:
20:c6:cb:2d:f4:11:4b:25:49:a0:f3:18:85:08:b1:2f:fa:c3:
77:46:ec:1b:3f:b5:70:ce:24:1a:f6:e9:19:84:db:21:d7:e6:
6c:5f:27:3f:c0:b4:22:b1:62:a3:ef:1b:13:2c:a3:8f:6a:a4:
4a:29:34:d2:12:63:dd:1a:56:0f:5a:d4:15:1d:57:77:1a:62:
f9:ce:42:72
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQW0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTA0MTMzWhcNMjUwMTI1MTA0MTMzWjAYMRYw
FAYDVQQDEw02NzgyNGFlMS1jYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyR5GZhBrOjpEFDyJTFEYOzJD4lNxFUdnAUOtxGAhBTeImxmb29zFad7Q
BgO2RngBbSasjQtr7P4+IFdUjEXTN1ZIta6NE8VjXuTt/bur29sFESNXz/ZogdMQ
Q/h01QNeP02xCs2PbiC2pqi3SPebn9C3qv/Q4LeCUWm/X48dbafBeHgXGzZ2gQzW
hfO65Q9Jn+pnwgTztDEdQRwgJky7ANZwQmCsaKLp4YpsGGiZm2ReaK9t6ZOBr7QF
C+oxRw+uhZAe3tzmhTCA6YHTv+13OGHbVNsp1UOEYe2c6cnYRmHaz7lP3+yVeg/O
c0H+fX5k19W/+UT09589U6MnZvaXewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMDG
iaNlAuc7YuSgjOAI/ndQeyDxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjE1NDc1MEQwMDgxMUVGQUVGQkVFODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/gMA0GCSqGSIb3DQEBCwUA
A4IBAQALSpnhE7IVhaHtvWBrojWwWPjNBF8dzjflYxqYEFshPO05K3ii+Ep6fycE
wi1TY/GvrIMqHzn/ETB+7VfDJGPNnOG7Hrz2YcosY4/d24HCfLB6GYpjwtJo+tZR
qbVpplDiWyYMdnnEEJuv4ucKSv1XUx/5PJ722fblzhCkP3tMkyocWZEm1ivPykPz
rLdBObldZhVyKclUza4h+KMIt2YAuj8dMvoxPM/0Jv3ZkVrLgYjJk50gxsst9BFL
JUmg8xiFCLEv+sN3RuwbP7VwziQa9ukZhNsh1+ZsXyc/wLQisWKj7xsTLKOPaqRK
KTTSEmPdGlYPWtQVHVd3GmL5zkJy
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:25 2025 by rpki-client