Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7188A0C3A9711EF851093BE762E951A.roa
File: A7188A0C3A9711EF851093BE762E951A.roa (raw, json)
Hash identifier: /+brOSe65qBVqWib++mfmpDWbxSULfVWER/Ezw91Oi0=
Subject key identifier: 43:6A:7C:B5:C7:1D:BF:72:B7:71:A9:A4:B8:8A:5F:01:03:F7:66:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7188A0C3A9711EF851093BE762E951A.roa
Signing time: Fri 05 Jul 2024 06:27:29 +0000
ROA not before: Fri 05 Jul 2024 06:27:26 +0000
ROA not after: Thu 01 Aug 2024 06:27:26 +0000
asID: 39600
IP address blocks: 45.196.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39095 (0x98b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:27:26 2024 GMT
Not After : Aug 1 06:27:26 2024 GMT
Subject: CN=66879251-5216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:d3:89:ee:23:b6:a2:1c:ac:52:19:4b:67:
2c:a9:28:75:24:ff:50:6a:7c:4e:b3:87:82:1d:b0:
c8:59:c0:07:33:12:83:b7:92:2d:0b:91:d5:95:81:
bf:4a:33:1d:eb:4d:01:d3:ca:05:15:3c:3b:4c:6c:
f5:bc:9a:e0:e8:95:78:4b:5e:0a:4d:bf:bb:20:80:
cd:51:f4:bc:82:d0:13:4c:b8:30:d2:56:d2:88:c3:
6d:7c:ec:62:18:84:df:67:d6:59:a7:d9:40:14:00:
62:46:e3:57:f7:7e:95:59:b4:65:0f:e1:b6:19:e1:
9b:90:83:66:41:98:17:9e:a9:62:28:5f:75:b3:2a:
a1:e6:df:a2:95:0b:4b:bf:6d:65:59:dd:c7:6b:37:
0b:83:22:dc:b7:10:32:4f:76:fa:61:0a:3e:7d:ad:
4a:cd:0b:04:14:71:7d:8f:d8:1a:48:5c:a7:8f:75:
9e:53:88:4e:a7:ae:fd:7b:d3:58:c4:bc:77:f0:b2:
9a:79:5a:e5:60:03:c3:53:70:05:5f:94:24:4e:93:
f5:db:c4:9c:2d:4d:4e:99:05:c4:88:51:83:7e:08:
90:8d:61:2b:55:66:2a:23:b3:91:44:14:bb:97:59:
02:f5:f9:46:de:b4:d0:63:59:85:90:4a:22:33:94:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:7C:B5:C7:1D:BF:72:B7:71:A9:A4:B8:8A:5F:01:03:F7:66:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7188A0C3A9711EF851093BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:b8:14:32:40:4f:3d:8e:ed:13:ab:d3:c9:70:e0:12:f0:94:
c3:5f:7f:f8:e3:56:9a:ea:43:3a:9c:db:51:2c:81:53:a1:f2:
83:cd:cc:4e:74:3f:17:f0:f8:87:1c:c9:f0:f7:68:2b:61:63:
1d:1b:90:1c:23:9e:51:cb:3c:06:92:ef:fe:89:4d:22:2e:e1:
28:33:0a:7b:73:6e:89:5e:49:ce:f0:2f:51:67:0d:3b:a1:cc:
a3:88:84:f4:22:ac:26:c9:18:02:ed:c3:28:c5:30:10:d7:c9:
52:5e:a9:fe:18:e2:ca:96:52:39:7a:38:c3:98:a8:06:4a:e7:
3a:56:4f:ea:91:6a:8b:09:ca:df:63:0c:b6:c9:3a:3f:22:1b:
b3:5d:56:f6:81:1c:e8:9e:ea:b6:16:87:1f:55:a4:37:7a:ff:
44:81:40:a6:30:20:ff:a3:50:a6:f7:8b:6e:2c:72:e9:50:42:
df:e9:ac:1f:8d:10:b5:15:82:75:0b:cf:c4:ab:de:36:00:a5:
e8:01:ae:52:c4:97:5c:76:7f:e3:b7:76:a0:95:d5:fa:f8:a9:
e9:f1:87:14:e4:53:bd:b2:dd:3d:23:55:a0:94:ec:ea:4e:12:
a2:20:f0:33:29:0c:8a:f0:e4:b6:d5:ef:e7:6b:d3:02:1a:49:
7d:ff:e1:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJi3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA1MDYyNzI2WhcNMjQwODAxMDYyNzI2WjAYMRYw
FAYDVQQDEw02Njg3OTI1MS01MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1y3Tie4jtqIcrFIZS2csqSh1JP9QanxOs4eCHbDIWcAHMxKDt5ItC5HV
lYG/SjMd600B08oFFTw7TGz1vJrg6JV4S14KTb+7IIDNUfS8gtATTLgw0lbSiMNt
fOxiGITfZ9ZZp9lAFABiRuNX936VWbRlD+G2GeGbkINmQZgXnqliKF91syqh5t+i
lQtLv21lWd3HazcLgyLctxAyT3b6YQo+fa1KzQsEFHF9j9gaSFynj3WeU4hOp679
e9NYxLx38LKaeVrlYAPDU3AFX5QkTpP128ScLU1OmQXEiFGDfgiQjWErVWYqI7OR
RBS7l1kC9flG3rTQY1mFkEoiM5T4cQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFENq
fLXHHb9yt3GppLiKXwED92aUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNzE4OEEwQzNBOTcxMUVGODUxMDkzQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcSMMA0GCSqGSIb3DQEBCwUA
A4IBAQCbuBQyQE89ju0Tq9PJcOAS8JTDX3/441aa6kM6nNtRLIFTofKDzcxOdD8X
8PiHHMnw92grYWMdG5AcI55RyzwGku/+iU0iLuEoMwp7c26JXknO8C9RZw07ocyj
iIT0IqwmyRgC7cMoxTAQ18lSXqn+GOLKllI5ejjDmKgGSuc6Vk/qkWqLCcrfYwy2
yTo/IhuzXVb2gRzonuq2FocfVaQ3ev9EgUCmMCD/o1Cm94tuLHLpUELf6awfjRC1
FYJ1C8/Eq942AKXoAa5SxJdcdn/jt3agldX6+Knp8YcU5FO9st09I1WglOzqThKi
IPAzKQyK8OS21e/na9MCGkl9/+Gm
-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org