Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A882B1FEBEA111EFA332C477762E951A.roa
File: A882B1FEBEA111EFA332C477762E951A.roa (raw, json)
Hash identifier: x8HqxTm1PTG8127lRhohRsYifFLTKPc8LjE3C+OW3ws=
Subject key identifier: 07:95:03:DE:05:9D:F9:05:94:50:02:33:FF:F6:AC:7C:98:46:56:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E708
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A882B1FEBEA111EFA332C477762E951A.roa
Signing time: Fri 20 Dec 2024 07:11:40 +0000
ROA not before: Fri 20 Dec 2024 07:11:36 +0000
ROA not after: Thu 23 Jan 2025 07:11:36 +0000
asID: 202656
IP address blocks: 45.199.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59144 (0xe708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:11:36 2024 GMT
Not After : Jan 23 07:11:36 2025 GMT
Subject: CN=676518ac-54b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:94:97:00:a9:25:4c:39:e3:89:4f:47:8a:
48:5e:55:32:33:ac:fc:f6:17:6d:9e:ad:6d:35:a6:
f4:c1:89:2c:fa:3e:be:fc:4e:fe:ae:c5:96:b7:78:
82:56:4b:15:e1:44:bc:33:ac:43:5d:f8:ee:16:e5:
be:fc:8c:ff:f7:15:c5:61:7a:04:67:1b:a6:e0:07:
c9:55:e3:bc:79:3a:7c:30:78:ab:3d:ee:07:ff:eb:
00:a7:1d:2f:31:b1:fa:83:bb:c2:79:ae:bd:45:89:
c7:80:85:fe:d3:dd:aa:dd:ff:82:f0:0d:6b:72:92:
b2:34:ab:25:53:d9:d6:91:f0:c3:8b:5e:de:5c:07:
c9:7d:1e:26:9f:e8:01:b2:b6:da:07:a6:b3:95:a7:
e9:72:b1:05:3d:c5:24:d2:3e:95:07:2f:41:1b:dd:
8d:13:2f:19:56:25:8f:ab:b2:ca:31:1d:e9:9c:cf:
39:6d:22:b2:50:0c:46:83:35:d6:da:10:cb:6d:0a:
09:5a:28:2b:02:0e:8b:1b:6e:c8:07:10:2d:ff:bc:
66:7c:08:21:1d:a8:c4:ac:e7:28:b0:35:e9:cc:48:
52:53:3d:49:38:ba:a2:9d:48:75:bf:48:ae:19:5e:
3d:b9:81:f8:72:4e:b2:44:0c:f3:12:52:fc:c0:a7:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:03:DE:05:9D:F9:05:94:50:02:33:FF:F6:AC:7C:98:46:56:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A882B1FEBEA111EFA332C477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.136.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f0:83:e7:47:9b:f9:4b:97:14:51:ca:c2:5c:21:06:2b:13:
6d:98:de:85:5b:db:b8:fb:1e:c9:d5:6b:bb:94:f9:b3:46:5b:
f0:19:9f:85:63:6f:62:61:fe:e2:ac:25:9d:39:fe:e6:ac:6a:
0f:7a:10:4f:d4:32:2a:af:f1:d7:43:46:eb:08:42:e8:91:c7:
03:0c:d4:34:e9:14:dc:29:ac:e9:83:5b:64:e2:96:27:c3:67:
1e:d6:95:8e:7f:04:90:80:22:05:b4:bc:16:5c:14:25:1a:b5:
55:ac:3b:2a:fe:a2:67:fa:60:57:e1:1f:68:20:d9:5a:24:80:
4b:7a:b5:36:f6:33:2d:fd:f2:59:59:38:a8:49:ad:e9:b5:99:
49:c2:77:fa:cc:fa:35:b8:bd:be:3c:33:38:5f:5a:bd:bc:47:
ed:aa:f9:09:56:be:e8:b4:b0:35:e9:06:e9:b8:99:0d:88:11:
0b:8b:46:15:f4:be:bc:5c:f0:31:f4:4b:3c:30:16:65:38:a4:
97:c1:f5:2e:88:e3:1c:d9:f9:b7:96:7e:9f:63:4b:cc:b3:58:
7d:73:c2:26:34:91:f2:5c:fb:04:c9:b6:c4:5d:d0:1b:2b:38:
85:68:f5:6b:78:aa:9c:3b:53:d9:03:b2:e5:74:0d:4d:76:b6:
ad:ee:d2:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOcIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDcxMTM2WhcNMjUwMTIzMDcxMTM2WjAYMRYw
FAYDVQQDEw02NzY1MThhYy01NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvPeUlwCpJUw544lPR4pIXlUyM6z89hdtnq1tNab0wYks+j6+/E7+rsWW
t3iCVksV4US8M6xDXfjuFuW+/Iz/9xXFYXoEZxum4AfJVeO8eTp8MHirPe4H/+sA
px0vMbH6g7vCea69RYnHgIX+092q3f+C8A1rcpKyNKslU9nWkfDDi17eXAfJfR4m
n+gBsrbaB6azlafpcrEFPcUk0j6VBy9BG92NEy8ZViWPq7LKMR3pnM85bSKyUAxG
gzXW2hDLbQoJWigrAg6LG27IBxAt/7xmfAghHajErOcosDXpzEhSUz1JOLqinUh1
v0iuGV49uYH4ck6yRAzzElL8wKcPiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAeV
A94FnfkFlFACM//2rHyYRlbmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODgyQjFGRUJFQTExMUVGQTMzMkM0Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceIMA0GCSqGSIb3DQEBCwUA
A4IBAQAp8IPnR5v5S5cUUcrCXCEGKxNtmN6FW9u4+x7J1Wu7lPmzRlvwGZ+FY29i
Yf7irCWdOf7mrGoPehBP1DIqr/HXQ0brCELokccDDNQ06RTcKazpg1tk4pYnw2ce
1pWOfwSQgCIFtLwWXBQlGrVVrDsq/qJn+mBX4R9oINlaJIBLerU29jMt/fJZWTio
Sa3ptZlJwnf6zPo1uL2+PDM4X1q9vEftqvkJVr7otLA16QbpuJkNiBELi0YV9L68
XPAx9Es8MBZlOKSXwfUuiOMc2fm3ln6fY0vMs1h9c8ImNJHyXPsEybbEXdAbKziF
aPVreKqcO1PZA7LldA1Ndrat7tJ3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:25 2025 by rpki-client