Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6B224653C511EEBCC787554AD9E6FC.roa
File: AA6B224653C511EEBCC787554AD9E6FC.roa (raw, json)
Hash identifier: ZbgWqDskejYCVFCP+sb/ElPfcHgd1HGgSbRQ/qpvo20=
Subject key identifier: FF:E1:D7:8F:6A:0C:02:8E:17:F9:E5:29:10:8A:36:FA:96:74:4E:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 39AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6B224653C511EEBCC787554AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:44:53 +0000
ROA not before: Fri 15 Sep 2023 12:44:50 +0000
ROA not after: Sat 28 Oct 2023 12:44:50 +0000
asID: 9009
IP address blocks: 45.195.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14762 (0x39aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 12:44:50 2023 GMT
Not After : Oct 28 12:44:50 2023 GMT
Subject: CN=650451c5-e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:0b:30:c1:70:ee:99:12:42:0f:ee:a2:23:
76:a7:34:d8:34:69:19:5c:27:72:ae:da:36:ab:67:
3c:df:76:c9:5d:62:e2:82:2e:45:58:d0:3e:98:dd:
08:81:cd:b1:84:56:4a:ca:aa:f1:cb:8c:f8:78:91:
34:6d:21:ad:3b:1c:0c:28:d2:18:30:ce:d2:da:5e:
3e:70:14:bd:ba:01:1a:a1:cc:8e:e0:6e:32:56:dc:
7f:d1:18:ef:4f:85:a7:b4:34:39:ee:c1:a2:2e:c4:
e1:bb:12:40:a8:ec:19:f8:74:5f:36:64:88:0d:70:
3d:8e:bf:50:fc:ec:b7:af:02:6b:66:0c:27:61:ba:
1f:1e:ff:24:26:f6:33:d1:67:32:95:81:3a:bf:ca:
25:5d:c7:73:cb:4e:ed:b4:4f:63:0a:a2:59:c8:22:
06:09:b3:ae:d9:a5:10:e2:d5:98:61:2b:8d:15:03:
03:6c:df:01:ba:2c:1b:2e:fe:de:b4:e1:da:8d:42:
16:dd:fc:21:83:a1:12:db:ba:c2:43:ac:f1:65:9b:
5a:34:5d:27:4a:78:26:c3:0e:07:e4:3a:81:92:cd:
f4:b3:32:53:4f:e7:d4:32:c0:4d:69:2c:ef:0e:bb:
90:79:d3:c1:8d:9a:2a:78:bf:28:3e:d4:e9:32:29:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:D7:8F:6A:0C:02:8E:17:F9:E5:29:10:8A:36:FA:96:74:4E:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6B224653C511EEBCC787554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d9:29:df:45:33:a0:c4:a4:65:5e:57:7f:d9:6a:6b:ce:3d:
b5:ea:a0:c1:2d:8a:fd:d7:74:4a:46:e7:f1:c2:d5:7e:74:0f:
0c:c5:ef:64:32:b6:32:6a:f0:90:9d:da:e3:ed:ad:fc:30:2f:
ba:55:95:b5:22:f3:7b:36:68:2a:29:07:51:e5:c0:cc:73:cc:
65:c8:14:06:ff:4e:b3:54:e1:5a:8d:31:8a:7f:9d:e8:45:e8:
c3:30:20:f7:c9:8a:4b:0f:5c:20:1c:d0:24:c0:97:66:ad:6f:
59:9f:ad:3c:b5:a0:6f:80:60:fe:59:fb:80:3b:5a:0c:2a:3c:
3d:ba:38:a8:46:ae:3e:a8:07:a5:55:1c:fa:3c:4c:36:f8:df:
80:7a:32:bc:64:43:81:18:a2:a1:c7:79:ad:fb:2f:c3:3b:e3:
7a:61:60:bb:2a:f6:dd:d3:13:65:93:16:aa:63:0a:d6:0b:65:
84:d8:dc:65:f8:57:b2:aa:52:59:d6:3f:24:1f:f4:b4:bd:31:
93:8e:b1:c7:73:97:8e:35:c6:c7:a9:7d:7b:2b:27:5d:f2:87:
c8:04:bf:bb:2c:ff:96:f6:b9:ac:b2:1d:6e:ff:97:14:e8:0d:
c7:8c:c4:b7:61:9b:2d:21:09:d4:ec:ae:97:82:80:5a:5a:3c:
9b:0e:c3:71
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOaowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MTUxMjQ0NTBaFw0yMzEwMjgxMjQ0NTBaMBgxFjAU
BgNVBAMTDTY1MDQ1MWM1LWUwYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2IAswwXDumRJCD+6iI3anNNg0aRlcJ3Ku2jarZzzfdsldYuKCLkVY0D6Y
3QiBzbGEVkrKqvHLjPh4kTRtIa07HAwo0hgwztLaXj5wFL26ARqhzI7gbjJW3H/R
GO9Phae0NDnuwaIuxOG7EkCo7Bn4dF82ZIgNcD2Ov1D87LevAmtmDCdhuh8e/yQm
9jPRZzKVgTq/yiVdx3PLTu20T2MKolnIIgYJs67ZpRDi1ZhhK40VAwNs3wG6LBsu
/t604dqNQhbd/CGDoRLbusJDrPFlm1o0XSdKeCbDDgfkOoGSzfSzMlNP59QywE1p
LO8Ou5B508GNmip4vyg+1OkyKZr3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU/+HX
j2oMAo4X+eUpEIo2+pZ0TkEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0FBNkIyMjQ2NTNDNTExRUVCQ0M3ODc1NTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw0EwDQYJKoZIhvcNAQELBQAD
ggEBAKjZKd9FM6DEpGVeV3/ZamvOPbXqoMEtiv3XdEpG5/HC1X50DwzF72QytjJq
8JCd2uPtrfwwL7pVlbUi83s2aCopB1HlwMxzzGXIFAb/TrNU4VqNMYp/nehF6MMw
IPfJiksPXCAc0CTAl2atb1mfrTy1oG+AYP5Z+4A7WgwqPD26OKhGrj6oB6VVHPo8
TDb434B6MrxkQ4EYoqHHea37L8M743phYLsq9t3TE2WTFqpjCtYLZYTY3GX4V7Kq
UlnWPyQf9LS9MZOOscdzl441xsepfXsrJ13yh8gEv7ss/5b2uayyHW7/lxToDceM
xLdhmy0hCdTsrpeCgFpaPJsOw3E=
-----END CERTIFICATE-----
Generated at Fri May 9 10:49:04 2025 by rpki-client