Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79F12DAB92B11EF83590BA2762E951A.roa
File: A79F12DAB92B11EF83590BA2762E951A.roa (raw, json)
Hash identifier: +cvNFe8hzVZVUCUu7AIZFx8n6yq392yAs6cpgaBn314=
Subject key identifier: CE:A8:ED:1C:DF:63:05:83:FA:A0:71:A8:8F:F5:3F:3B:52:93:72:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E34D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79F12DAB92B11EF83590BA2762E951A.roa
Signing time: Fri 13 Dec 2024 08:24:22 +0000
ROA not before: Fri 13 Dec 2024 08:24:18 +0000
ROA not after: Sat 25 Jan 2025 08:24:18 +0000
asID: 202656
IP address blocks: 45.199.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58189 (0xe34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:24:18 2024 GMT
Not After : Jan 25 08:24:18 2025 GMT
Subject: CN=675bef36-6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:fa:c7:2b:fc:3b:0c:21:7f:29:96:cc:d7:
2f:6b:89:d6:1a:ad:39:8c:65:50:cb:93:98:fe:fb:
b6:c0:c7:93:a2:5c:e9:fd:40:70:ef:74:cb:e5:a1:
ce:82:da:79:89:a7:23:e2:e0:dd:6d:6e:bc:a3:e6:
64:d6:61:e0:12:e7:6b:95:6d:42:6c:c7:35:68:2c:
ba:cc:8c:c9:ca:d9:97:d3:5a:c0:1e:a2:fb:e2:13:
3f:15:ce:31:67:a0:4a:df:6d:cb:e3:8c:24:3d:d4:
05:18:a6:b5:28:d5:9d:b2:d2:af:c4:5a:da:fc:a7:
fe:17:15:b6:e6:9a:e1:0f:37:9d:4c:9d:4b:cc:e3:
0b:d3:9e:33:4a:9b:d8:e7:19:fa:8b:ad:8c:04:cc:
f9:24:30:e6:a8:f5:7c:21:43:86:5d:bb:04:55:b6:
a8:37:0a:21:3c:87:31:1b:16:d2:10:24:25:0d:ad:
22:4f:c9:8f:50:ec:67:9e:9c:68:3a:c5:59:21:09:
56:b3:d1:36:ec:5a:c4:a2:0c:66:c9:c6:ed:c6:0f:
8f:84:c4:7c:bc:05:0e:63:4b:e9:f1:e0:27:aa:16:
32:1b:bd:0a:51:40:90:db:96:3f:5e:b8:b9:dd:e8:
3c:cc:c2:ce:bf:c1:f9:72:2b:0d:bc:44:f5:78:60:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:ED:1C:DF:63:05:83:FA:A0:71:A8:8F:F5:3F:3B:52:93:72:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79F12DAB92B11EF83590BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.248.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:2f:91:08:fc:13:84:4f:b1:cb:89:1f:9a:40:da:89:d1:90:
37:6c:7a:b0:fc:9a:ef:65:f4:dc:d4:de:56:3f:c5:13:df:7d:
b2:12:56:e8:d7:9b:09:5b:e9:2f:a4:cf:de:36:a1:64:de:6b:
89:a6:64:40:e5:a9:20:9b:8d:95:47:21:fb:06:53:ee:e1:18:
2f:2e:de:17:ba:4a:46:1f:02:04:76:cf:a0:30:98:1c:08:bf:
f0:fe:a3:ae:41:66:c7:4d:f9:ef:f7:cf:ca:40:d7:93:c8:4f:
a0:aa:86:9a:de:72:13:54:22:c2:35:7d:96:f0:77:88:da:c8:
e8:08:64:f4:c8:c1:4b:91:82:4d:84:42:27:d9:27:b4:41:db:
03:6c:a3:b5:1b:82:78:11:9a:c7:e9:ab:c3:7e:5e:a8:02:f6:
cd:14:01:4f:ec:60:c9:8e:71:e2:08:01:67:a9:cb:df:ae:84:
84:09:e0:4f:f7:5d:3c:07:2f:28:20:1c:fa:7a:e1:d4:3a:80:
fe:18:97:bf:62:e3:1d:93:2a:fc:9e:23:66:d9:f1:16:79:f2:
c0:94:79:bd:f9:1f:61:31:56:46:49:ac:49:dc:de:e6:3d:5b:
04:ce:68:2a:81:9d:2e:3f:1b:20:97:98:50:52:90:6a:58:0d:
35:80:7e:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAONNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDgyNDE4WhcNMjUwMTI1MDgyNDE4WjAYMRYw
FAYDVQQDEw02NzViZWYzNi02NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzwz6xyv8OwwhfymWzNcva4nWGq05jGVQy5OY/vu2wMeTolzp/UBw73TL
5aHOgtp5iacj4uDdbW68o+Zk1mHgEudrlW1CbMc1aCy6zIzJytmX01rAHqL74hM/
Fc4xZ6BK323L44wkPdQFGKa1KNWdstKvxFra/Kf+FxW25prhDzedTJ1LzOML054z
SpvY5xn6i62MBMz5JDDmqPV8IUOGXbsEVbaoNwohPIcxGxbSECQlDa0iT8mPUOxn
npxoOsVZIQlWs9E27FrEogxmycbtxg+PhMR8vAUOY0vp8eAnqhYyG70KUUCQ25Y/
Xri53eg8zMLOv8H5cisNvET1eGCsFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM6o
7RzfYwWD+qBxqI/1PztSk3J5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNzlGMTJEQUI5MkIxMUVGODM1OTBCQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcf4MA0GCSqGSIb3DQEBCwUA
A4IBAQC8L5EI/BOET7HLiR+aQNqJ0ZA3bHqw/JrvZfTc1N5WP8UT332yElbo15sJ
W+kvpM/eNqFk3muJpmRA5akgm42VRyH7BlPu4RgvLt4XukpGHwIEds+gMJgcCL/w
/qOuQWbHTfnv98/KQNeTyE+gqoaa3nITVCLCNX2W8HeI2sjoCGT0yMFLkYJNhEIn
2Se0QdsDbKO1G4J4EZrH6avDfl6oAvbNFAFP7GDJjnHiCAFnqcvfroSECeBP9108
By8oIBz6euHUOoD+GJe/YuMdkyr8niNm2fEWefLAlHm9+R9hMVZGSaxJ3N7mPVsE
zmgqgZ0uPxsgl5hQUpBqWA01gH5a
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:42 2025 by rpki-client