Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA6C11FE3DF011EEA44D68494AD9E6FC.roa
File: BA6C11FE3DF011EEA44D68494AD9E6FC.roa (raw, json)
Hash identifier: cC0SAYTCCkUHzwdXf2pRkrGjguebFo5lDM1hMwYzHIQ=
Subject key identifier: 8F:D7:92:A1:DB:7E:DA:54:32:DA:AA:99:09:44:47:DF:EF:08:46:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 366D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA6C11FE3DF011EEA44D68494AD9E6FC.roa
Signing time: Fri 18 Aug 2023 17:57:42 +0000
ROA not before: Fri 18 Aug 2023 17:57:39 +0000
ROA not after: Tue 30 Apr 2024 17:57:39 +0000
asID: 23764
IP address blocks: 45.195.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13933 (0x366d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 17:57:39 2023 GMT
Not After : Apr 30 17:57:39 2024 GMT
Subject: CN=64dfb116-781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:99:f0:61:a5:8b:1b:b8:64:a8:ac:13:ce:
be:63:86:0d:81:16:bd:50:a5:eb:85:9f:73:c0:37:
a9:70:c6:d5:cc:46:66:ca:bf:15:69:db:3d:80:e2:
c0:00:aa:a6:9b:e4:02:65:d0:84:71:5a:3c:c5:04:
11:00:36:79:14:3d:54:5a:23:27:be:91:ce:c4:a6:
72:9a:8f:a3:92:80:4e:5d:7e:32:00:13:18:fa:b6:
d6:81:25:40:c7:d0:64:40:82:2d:bb:60:0e:1f:7d:
ac:c3:69:b2:e0:f6:07:a4:c0:7f:b8:91:20:42:ab:
1c:29:bf:81:ee:f1:fb:38:53:72:39:dd:88:8d:6c:
bc:47:cb:42:8d:d3:c0:ca:34:df:43:e3:a5:e2:23:
57:62:e8:8b:9b:09:0d:8f:65:12:b3:de:31:af:81:
2f:b2:f4:7f:92:bf:16:fd:2a:f9:e0:66:16:91:4f:
69:87:0b:02:34:a5:23:d9:6a:f9:c3:c0:db:b8:fc:
18:9c:f3:54:fb:bd:33:02:e8:b0:ef:e9:00:3b:04:
6a:3d:07:ee:8f:35:4c:0a:fa:df:f1:39:fa:e8:7b:
0e:a1:41:bb:5c:77:23:a4:4d:9a:a8:a5:dc:a4:f7:
f2:27:63:c4:45:b1:50:c6:29:60:0d:3f:b9:4d:b1:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:92:A1:DB:7E:DA:54:32:DA:AA:99:09:44:47:DF:EF:08:46:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA6C11FE3DF011EEA44D68494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c2:33:5e:47:45:78:4a:31:e1:25:3d:c6:81:ce:7d:31:a9:
d9:6f:97:4d:13:0a:84:1d:08:8c:4b:b9:bb:3c:9f:f0:e6:07:
6d:0d:76:8b:4e:05:47:4f:74:9f:13:7d:92:26:29:9c:3f:cc:
fa:80:57:eb:4a:f5:8a:64:45:3e:75:dc:ae:e7:7f:25:c0:7f:
f0:3f:7c:0d:82:58:52:cc:91:57:db:58:c8:e7:9b:08:36:91:
26:c0:59:c9:e5:fd:62:fc:38:39:e1:60:c3:1a:8c:63:c3:03:
8e:ae:90:15:eb:26:6f:0a:16:3a:4f:1f:e2:0b:36:82:c6:50:
34:82:a5:52:01:b2:2e:1d:7b:45:8e:89:9b:c4:1d:a6:4b:51:
86:25:d2:0f:1b:13:42:ec:12:d2:7e:99:d2:cb:5c:43:39:4b:
34:64:40:bb:d6:51:56:d2:ae:9b:92:45:02:1d:d9:b8:66:aa:
9a:0b:d2:09:4f:90:a5:55:33:52:c4:c3:3b:50:28:30:3d:c5:
03:b7:60:77:d8:d1:40:bd:6d:6a:24:5d:d4:4f:21:e6:9b:37:
7d:af:f4:2a:a5:56:a6:01:5a:32:4a:36:1f:fb:fc:90:dd:2e:
f2:35:a6:96:1c:fa:99:9e:a6:79:2d:57:9f:c7:64:54:98:fb:
35:82:3f:03
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNm0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTgxNzU3MzlaFw0yNDA0MzAxNzU3MzlaMBgxFjAU
BgNVBAMTDTY0ZGZiMTE2LTc4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVyZnwYaWLG7hkqKwTzr5jhg2BFr1QpeuFn3PAN6lwxtXMRmbKvxVp2z2A
4sAAqqab5AJl0IRxWjzFBBEANnkUPVRaIye+kc7EpnKaj6OSgE5dfjIAExj6ttaB
JUDH0GRAgi27YA4ffazDabLg9gekwH+4kSBCqxwpv4Hu8fs4U3I53YiNbLxHy0KN
08DKNN9D46XiI1di6IubCQ2PZRKz3jGvgS+y9H+Svxb9KvngZhaRT2mHCwI0pSPZ
avnDwNu4/Bic81T7vTMC6LDv6QA7BGo9B+6PNUwK+t/xOfroew6hQbtcdyOkTZqo
pdyk9/InY8RFsVDGKWANP7lNsfxPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUj9eS
odt+2lQy2qqZCURH3+8IRp8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JBNkMxMUZFM0RGMDExRUVBNDRENjg0OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwwQwDQYJKoZIhvcNAQELBQAD
ggEBADPCM15HRXhKMeElPcaBzn0xqdlvl00TCoQdCIxLubs8n/DmB20NdotOBUdP
dJ8TfZImKZw/zPqAV+tK9YpkRT513K7nfyXAf/A/fA2CWFLMkVfbWMjnmwg2kSbA
Wcnl/WL8ODnhYMMajGPDA46ukBXrJm8KFjpPH+ILNoLGUDSCpVIBsi4de0WOiZvE
HaZLUYYl0g8bE0LsEtJ+mdLLXEM5SzRkQLvWUVbSrpuSRQId2bhmqpoL0glPkKVV
M1LEwztQKDA9xQO3YHfY0UC9bWokXdRPIeabN32v9CqlVqYBWjJKNh/7/JDdLvI1
ppYc+pmepnktV5/HZFSY+zWCPwM=
-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org