Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD01F5D6CACD11EFA4E523AF762E951A.roa
File: AD01F5D6CACD11EFA4E523AF762E951A.roa (raw, json)
Hash identifier: rUFIbdjZQ5Bhrp64wxFXAmt7hzEjBEsTa/tTVI1Conw=
Subject key identifier: 75:9E:85:4B:30:A8:A3:82:BB:F7:73:F3:52:AB:E6:0E:D7:3B:74:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F766
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD01F5D6CACD11EFA4E523AF762E951A.roa
Signing time: Sat 04 Jan 2025 18:56:59 +0000
ROA not before: Sun 05 Jan 2025 18:56:55 +0000
ROA not after: Fri 17 Jan 2025 18:56:55 +0000
asID: 39600
IP address blocks: 45.196.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63334 (0xf766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:56:55 2025 GMT
Not After : Jan 17 18:56:55 2025 GMT
Subject: CN=6779847b-12eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:72:69:94:fb:c9:7b:f8:5b:d7:20:f6:76:
7b:d4:a1:72:db:ce:2e:ea:b8:98:2c:5a:6f:23:bf:
b9:04:59:9d:6e:ae:43:e7:94:2f:f6:79:9a:ec:b7:
7b:d0:6f:cc:e5:ff:e8:b1:44:01:63:c5:44:05:f1:
ec:07:09:0d:48:ba:f9:87:49:80:68:c2:f8:c6:e1:
e5:62:37:38:c7:8f:54:6b:52:05:01:e6:ce:aa:cd:
95:0f:d6:c8:6c:b9:27:bf:d0:79:07:5b:4f:1e:a7:
87:e8:4e:e3:d9:2d:e6:9d:8e:cb:a1:7d:ab:7b:1c:
b2:42:91:33:b8:13:ea:94:41:b7:50:5a:5f:80:18:
e2:3f:17:1b:0c:5a:54:b8:ab:5c:fb:e7:50:3d:ae:
cc:c6:40:c0:5d:0e:86:e2:03:c6:da:6e:07:db:30:
50:f1:80:13:ca:c9:98:63:e2:a7:d7:c8:9b:32:bd:
5e:2b:da:66:40:7f:dc:1a:95:3a:54:68:10:38:d0:
40:64:53:14:8d:b0:40:63:ea:96:27:3e:86:1c:50:
ea:b8:68:12:c6:f7:53:ab:c4:96:f5:92:1a:4c:ed:
64:33:14:01:f1:6b:e4:de:03:37:be:41:9d:9e:42:
6f:f3:31:ec:60:da:a2:18:ee:a7:c1:80:40:1e:64:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:85:4B:30:A8:A3:82:BB:F7:73:F3:52:AB:E6:0E:D7:3B:74:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD01F5D6CACD11EFA4E523AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
Signature Algorithm: sha256WithRSAEncryption
27:af:3f:aa:2c:ea:7e:c5:12:89:fb:90:bc:ad:79:5a:56:98:
ee:f6:86:d9:52:27:fb:84:60:5c:26:82:11:f9:46:dd:1e:82:
9f:1b:e1:ec:8b:9c:6f:a2:18:29:62:44:bc:48:ba:c2:37:25:
04:b7:96:38:d7:45:5f:26:ab:d0:73:12:43:d8:0b:fa:db:a9:
c1:ce:c6:ff:b4:42:28:72:e9:77:dd:03:4d:55:b6:0a:7f:4b:
b2:b4:66:70:80:11:fc:c3:63:c1:e2:6a:93:33:3e:fa:e9:95:
9d:b4:5d:be:c4:04:0f:0d:a5:1f:c5:e9:5f:c9:0f:96:ab:aa:
95:80:1e:71:0d:23:67:d0:58:8b:bb:3e:36:d0:d0:ac:26:dc:
1c:9a:99:80:b0:62:ed:9a:01:b1:72:e9:48:79:48:1e:cc:3f:
ae:1c:b1:b5:6e:7b:64:b7:7c:46:65:34:25:6f:6a:76:3b:3b:
f7:9d:d7:80:0e:5c:a0:bd:f6:1c:aa:5c:c1:29:f1:3b:12:ac:
0f:33:3e:03:82:a3:2e:c0:4a:d4:e0:20:7b:52:2c:4f:49:c7:
fc:bd:ae:7d:3c:a0:37:60:a0:51:e7:ba:c6:17:0e:98:a4:50:
a1:bd:56:63:83:e1:52:54:fe:76:18:c1:b0:b6:0a:3c:0f:51:
35:27:cd:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPdmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTg1NjU1WhcNMjUwMTE3MTg1NjU1WjAYMRYw
FAYDVQQDEw02Nzc5ODQ3Yi0xMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp+FyaZT7yXv4W9cg9nZ71KFy284u6riYLFpvI7+5BFmdbq5D55Qv9nma
7Ld70G/M5f/osUQBY8VEBfHsBwkNSLr5h0mAaML4xuHlYjc4x49Ua1IFAebOqs2V
D9bIbLknv9B5B1tPHqeH6E7j2S3mnY7LoX2rexyyQpEzuBPqlEG3UFpfgBjiPxcb
DFpUuKtc++dQPa7MxkDAXQ6G4gPG2m4H2zBQ8YATysmYY+Kn18ibMr1eK9pmQH/c
GpU6VGgQONBAZFMUjbBAY+qWJz6GHFDquGgSxvdTq8SW9ZIaTO1kMxQB8Wvk3gM3
vkGdnkJv8zHsYNqiGO6nwYBAHmQKqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHWe
hUswqKOCu/dz81Kr5g7XO3TFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDAxRjVENkNBQ0QxMUVGQTRFNTIzQUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcSMMA0GCSqGSIb3DQEBCwUA
A4IBAQAnrz+qLOp+xRKJ+5C8rXlaVpju9obZUif7hGBcJoIR+UbdHoKfG+Hsi5xv
ohgpYkS8SLrCNyUEt5Y410VfJqvQcxJD2Av626nBzsb/tEIocul33QNNVbYKf0uy
tGZwgBH8w2PB4mqTMz766ZWdtF2+xAQPDaUfxelfyQ+Wq6qVgB5xDSNn0FiLuz42
0NCsJtwcmpmAsGLtmgGxculIeUgezD+uHLG1bntkt3xGZTQlb2p2Ozv3ndeADlyg
vfYcqlzBKfE7EqwPMz4DgqMuwErU4CB7UixPScf8va59PKA3YKBR57rGFw6YpFCh
vVZjg+FSVP52GMGwtgo8D1E1J83E
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:58 2025 by rpki-client