Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11BD652D02511EFBF8DD5BA762E951A.roa
File: B11BD652D02511EFBF8DD5BA762E951A.roa (raw, json)
Hash identifier: 7MRiNBo5qQJK9ldpLi10Sppuhyr5QoptLxcKfazxnic=
Subject key identifier: F5:C5:98:E1:88:F5:B6:B8:C7:74:07:44:1B:2D:A3:2A:94:06:67:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010616
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11BD652D02511EFBF8DD5BA762E951A.roa
Signing time: Sat 11 Jan 2025 14:09:37 +0000
ROA not before: Sat 11 Jan 2025 14:09:33 +0000
ROA not after: Sat 25 Jan 2025 14:09:33 +0000
asID: 139646
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67094 (0x10616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 14:09:33 2025 GMT
Not After : Jan 25 14:09:33 2025 GMT
Subject: CN=67827ba1-336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:92:fc:fd:68:fc:70:30:d9:32:85:5f:47:
76:7b:6e:f6:8b:6e:15:1f:42:06:01:f6:ba:2e:54:
30:0b:c2:ca:9f:16:07:6a:d4:50:85:78:49:78:02:
8d:08:5e:1a:f7:50:24:a6:39:60:12:74:29:bd:64:
5d:cd:9a:73:3e:52:f1:2c:4a:60:6d:70:d4:60:d3:
2c:fe:cd:d6:f2:8d:f7:b5:9d:6c:85:c6:53:8b:32:
07:41:3d:7a:42:8e:5a:2e:79:b1:b7:8b:14:ba:4b:
47:5b:58:ce:59:7f:da:69:6e:07:b7:72:25:82:0e:
48:54:d7:92:71:f7:51:f1:4a:e8:dd:ea:d1:e6:a1:
d8:8a:14:02:e5:a2:e5:24:97:e3:90:f1:e4:e8:69:
3e:12:f8:13:88:0b:25:dd:7e:00:bc:ea:20:2d:3e:
c8:a0:d7:90:a6:21:4f:06:77:7c:e3:23:2d:80:94:
d8:59:94:7e:e6:b1:cf:b0:cb:32:5f:3d:2d:98:29:
7b:2b:04:22:7b:bb:94:e1:3a:79:56:ef:34:fc:82:
db:9b:66:67:0b:2b:bd:bc:67:42:e9:48:a1:31:5e:
b0:01:6a:3b:ed:9a:e3:ba:f5:c1:7d:db:6c:1f:8f:
6d:2a:2c:6e:33:f9:fb:20:58:52:e3:85:19:d4:ef:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:98:E1:88:F5:B6:B8:C7:74:07:44:1B:2D:A3:2A:94:06:67:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B11BD652D02511EFBF8DD5BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
96:a9:7a:48:de:58:75:a6:3e:2b:8a:ea:bc:69:69:10:80:d0:
c3:72:2b:e3:ed:8c:54:5c:f5:54:fc:ac:76:53:de:76:e9:60:
80:99:0d:82:96:eb:ec:3a:3b:4e:bf:9d:09:52:cd:77:32:de:
19:b2:18:71:8d:da:c0:ca:70:49:c6:89:b7:5c:e7:b8:04:3f:
6e:fa:eb:a7:7b:c5:aa:53:cd:55:d9:f5:35:a3:29:96:89:46:
27:19:a9:ef:37:04:cb:b0:ff:1f:05:30:a5:6a:2b:2f:00:1b:
b1:9c:e1:e3:5a:7b:e4:aa:2f:70:f2:f5:c2:57:c2:63:84:58:
1a:f1:2c:f8:e9:de:d8:96:a8:91:4a:11:f3:87:1e:17:35:29:
4d:a9:42:f9:d5:fb:d8:e0:7b:25:de:ef:fd:bd:bc:f5:06:a2:
dd:6b:ad:1e:6c:c3:fe:70:f6:76:7c:ab:4d:c8:92:b1:12:65:
37:8f:13:ae:19:2b:f4:6d:ed:a4:f0:bd:b2:ec:d8:d4:f6:a9:
a7:43:2b:cf:34:52:01:7a:cf:04:00:50:6e:66:ca:68:73:01:
44:f1:c8:c7:59:27:cb:25:c4:09:14:83:78:0a:7b:d2:04:30:
c9:e7:99:32:6d:fc:8f:b6:65:ff:f6:87:21:57:83:33:d5:7a:
b6:65:70:3a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQYWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTQwOTMzWhcNMjUwMTI1MTQwOTMzWjAYMRYw
FAYDVQQDEw02NzgyN2JhMS0zMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0P+S/P1o/HAw2TKFX0d2e272i24VH0IGAfa6LlQwC8LKnxYHatRQhXhJ
eAKNCF4a91AkpjlgEnQpvWRdzZpzPlLxLEpgbXDUYNMs/s3W8o33tZ1shcZTizIH
QT16Qo5aLnmxt4sUuktHW1jOWX/aaW4Ht3Ilgg5IVNeScfdR8Uro3erR5qHYihQC
5aLlJJfjkPHk6Gk+EvgTiAsl3X4AvOogLT7IoNeQpiFPBnd84yMtgJTYWZR+5rHP
sMsyXz0tmCl7KwQie7uU4Tp5Vu80/ILbm2ZnCyu9vGdC6UihMV6wAWo77ZrjuvXB
fdtsH49tKixuM/n7IFhS44UZ1O8uHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPXF
mOGI9ba4x3QHRBstoyqUBmfVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTFCRDY1MkQwMjUxMUVGQkY4REQ1QkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcngMA0GCSqGSIb3DQEBCwUA
A4IBAQCWqXpI3lh1pj4riuq8aWkQgNDDcivj7YxUXPVU/Kx2U9526WCAmQ2Cluvs
OjtOv50JUs13Mt4ZshhxjdrAynBJxom3XOe4BD9u+uune8WqU81V2fU1oymWiUYn
GanvNwTLsP8fBTClaisvABuxnOHjWnvkqi9w8vXCV8JjhFga8Sz46d7YlqiRShHz
hx4XNSlNqUL51fvY4Hsl3u/9vbz1BqLda60ebMP+cPZ2fKtNyJKxEmU3jxOuGSv0
be2k8L2y7NjU9qmnQyvPNFIBes8EAFBuZspocwFE8cjHWSfLJcQJFIN4CnvSBDDJ
55kybfyPtmX/9ochV4Mz1Xq2ZXA6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:41 2025 by rpki-client