Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3872872B92A11EF940CDC9B762E951A.roa
File: B3872872B92A11EF940CDC9B762E951A.roa (raw, json)
Hash identifier: 4nA/FVDOYYtFv3zXZjKMRFCUHsiwrd//bYeI/VKbU9Y=
Subject key identifier: 4C:5E:21:8A:6E:C5:5E:FC:3F:92:57:B0:CB:9D:4A:EE:4F:F4:9F:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E341
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3872872B92A11EF940CDC9B762E951A.roa
Signing time: Fri 13 Dec 2024 08:17:32 +0000
ROA not before: Fri 13 Dec 2024 08:17:29 +0000
ROA not after: Sat 25 Jan 2025 08:17:29 +0000
asID: 202656
IP address blocks: 45.199.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58177 (0xe341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:17:29 2024 GMT
Not After : Jan 25 08:17:29 2025 GMT
Subject: CN=675bed9c-2066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:a8:42:eb:f6:39:21:c9:50:fe:a2:20:8a:
82:47:ba:82:7d:49:09:78:de:46:1a:74:83:86:68:
51:04:df:d4:2a:c9:cd:34:92:f9:a5:e8:5f:92:a7:
39:31:22:8e:75:e9:48:55:3e:7f:b5:a0:00:a1:08:
b3:09:b3:1f:a6:05:5f:08:e2:5d:22:4b:32:00:ea:
5f:c0:d1:bd:bc:21:3e:11:ca:87:a7:14:f9:1f:c9:
f2:77:d8:96:47:e7:c5:d4:2e:4e:bb:dc:eb:ff:0e:
28:2c:58:27:bb:4a:5d:fd:cc:57:70:c3:d6:a2:26:
17:ef:02:9d:c0:dc:e7:a0:9c:bc:5e:20:b6:35:fa:
86:4d:9f:7c:78:7e:14:92:eb:b0:ca:36:b2:2c:d7:
5a:c9:04:75:89:34:0a:93:0e:32:72:cf:6d:9c:c3:
6d:01:b8:d1:0b:13:80:91:b0:08:d0:c5:2b:58:41:
31:cd:c9:0b:41:49:af:25:f9:81:a9:01:53:ee:d7:
0b:45:d1:fe:5e:45:b8:c7:0b:27:0e:82:17:8f:b5:
48:68:85:b4:cf:9f:34:f4:a3:e7:65:a4:30:97:8b:
30:2a:16:65:13:98:7a:cb:eb:ac:94:a2:df:ae:e6:
65:76:86:e8:3c:c1:df:87:fb:71:0b:c5:c2:ca:f6:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:21:8A:6E:C5:5E:FC:3F:92:57:B0:CB:9D:4A:EE:4F:F4:9F:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3872872B92A11EF940CDC9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.226.0/23
Signature Algorithm: sha256WithRSAEncryption
83:9c:64:6f:6c:af:96:4b:fc:39:65:70:65:8c:3e:b6:ff:ba:
25:5b:9f:2d:c0:36:89:9b:85:0b:6e:49:f6:08:73:0a:c8:8b:
eb:87:a9:7c:85:93:a2:f7:c0:c9:2b:42:5d:b9:8d:e1:3b:84:
a4:cd:60:7b:a6:d8:47:2d:51:28:f3:ba:34:6f:c8:bf:62:da:
e6:e6:b9:4f:73:24:26:da:2b:3b:d6:7e:4e:fe:cc:af:74:1f:
54:18:c9:17:f2:ab:c7:52:3b:65:c4:bf:48:63:35:72:6f:43:
c5:28:d7:0c:4c:f5:19:71:24:5a:38:14:79:2c:43:9f:62:73:
e5:89:04:d5:7a:64:ae:61:e0:61:c6:6f:6c:ab:13:d1:27:fb:
da:3d:53:c5:1c:24:df:51:9d:37:c8:6b:59:65:1b:ef:2f:a4:
27:b4:d6:55:37:fe:c3:f7:f6:72:2d:1d:0d:16:31:62:0a:e6:
71:a9:c1:80:e5:c2:53:ac:30:de:10:21:9b:a9:1a:ff:2e:0b:
3d:bf:04:d7:7a:fc:ca:c0:9b:6c:3d:98:fa:27:45:69:b8:f1:
cd:fd:1b:7f:7c:91:41:36:d0:63:31:d3:8c:ce:68:d4:3d:d1:
67:77:97:46:01:f3:60:ed:8f:eb:aa:2d:9b:77:7b:f7:f6:ce:
8f:34:25:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAONBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDgxNzI5WhcNMjUwMTI1MDgxNzI5WjAYMRYw
FAYDVQQDEw02NzViZWQ5Yy0yMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0W2oQuv2OSHJUP6iIIqCR7qCfUkJeN5GGnSDhmhRBN/UKsnNNJL5pehf
kqc5MSKOdelIVT5/taAAoQizCbMfpgVfCOJdIksyAOpfwNG9vCE+EcqHpxT5H8ny
d9iWR+fF1C5Ou9zr/w4oLFgnu0pd/cxXcMPWoiYX7wKdwNznoJy8XiC2NfqGTZ98
eH4UkuuwyjayLNdayQR1iTQKkw4ycs9tnMNtAbjRCxOAkbAI0MUrWEExzckLQUmv
JfmBqQFT7tcLRdH+XkW4xwsnDoIXj7VIaIW0z5809KPnZaQwl4swKhZlE5h6y+us
lKLfruZldoboPMHfh/txC8XCyvb0AQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFExe
IYpuxV78P5JXsMudSu5P9J9pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMzg3Mjg3MkI5MkExMUVGOTQwQ0RDOUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcfiMA0GCSqGSIb3DQEBCwUA
A4IBAQCDnGRvbK+WS/w5ZXBljD62/7olW58twDaJm4ULbkn2CHMKyIvrh6l8hZOi
98DJK0JduY3hO4SkzWB7pthHLVEo87o0b8i/Ytrm5rlPcyQm2is71n5O/syvdB9U
GMkX8qvHUjtlxL9IYzVyb0PFKNcMTPUZcSRaOBR5LEOfYnPliQTVemSuYeBhxm9s
qxPRJ/vaPVPFHCTfUZ03yGtZZRvvL6QntNZVN/7D9/ZyLR0NFjFiCuZxqcGA5cJT
rDDeECGbqRr/Lgs9vwTXevzKwJtsPZj6J0VpuPHN/Rt/fJFBNtBjMdOMzmjUPdFn
d5dGAfNg7Y/rqi2bd3v39s6PNCWZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:29 2025 by rpki-client