Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE434BEC8EB11EFB4E247BF762E951A.roa
File: BEE434BEC8EB11EFB4E247BF762E951A.roa (raw, json)
Hash identifier: IKuZj7dZT9L8hV0TDMuaOXaps6hy2L4GtVqQTdbNtrw=
Subject key identifier: 54:7D:EC:18:45:0C:07:A9:B8:D4:DD:49:C4:65:F5:98:84:D2:45:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F32C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE434BEC8EB11EFB4E247BF762E951A.roa
Signing time: Thu 02 Jan 2025 09:27:12 +0000
ROA not before: Thu 02 Jan 2025 09:27:08 +0000
ROA not after: Wed 05 Feb 2025 09:27:08 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62252 (0xf32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 09:27:08 2025 GMT
Not After : Feb 5 09:27:08 2025 GMT
Subject: CN=67765bf0-bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:36:cd:44:8f:98:3d:87:40:71:ef:fe:ae:
19:a9:87:e2:64:9a:72:4a:91:c9:a2:62:ac:76:0f:
e5:ee:f1:b1:bf:14:f6:6f:32:97:bd:5b:a0:3c:92:
12:fa:7d:19:0a:ab:8c:71:88:d2:38:e5:4e:b7:02:
3f:ae:77:2d:11:d3:02:42:6e:34:f6:7b:b9:f9:8e:
1e:60:cd:65:53:4a:0e:d8:c3:66:18:15:eb:6a:17:
d5:d3:58:fe:7a:16:8f:80:34:9a:46:db:c1:27:25:
94:6d:a8:94:a8:1d:3e:14:56:35:7d:2e:61:3f:a4:
6c:a7:2f:0d:65:3f:97:c7:8a:5d:7f:fd:8b:96:71:
17:e2:fe:24:5e:68:6c:2d:c8:e5:cf:f7:f8:9f:af:
25:7e:9f:c3:4c:23:0d:13:35:13:dc:84:4b:82:b3:
87:b2:5e:34:f8:c5:04:70:d4:8a:85:ba:b1:ab:fd:
61:2b:f8:46:2a:03:33:7c:4f:9f:62:dc:af:cb:1e:
8c:72:a8:57:56:a7:fb:ca:c6:31:59:08:b9:e6:d3:
39:fc:32:44:91:9a:98:38:05:34:e6:10:b4:f3:c3:
32:87:b7:5e:92:f6:03:be:9f:8e:ef:61:2b:ac:8e:
cb:b4:7a:19:ad:b3:81:ee:3f:36:f5:07:da:b0:3b:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:EC:18:45:0C:07:A9:B8:D4:DD:49:C4:65:F5:98:84:D2:45:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE434BEC8EB11EFB4E247BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
07:aa:05:5c:b2:18:49:12:c1:bc:9e:b9:21:1b:3c:15:f2:46:
2b:63:75:b1:f3:72:09:06:1a:58:a8:59:48:3f:1e:c5:c9:29:
af:6e:00:df:58:2a:db:bc:96:d7:54:63:69:77:8b:15:d6:83:
22:97:d6:61:cd:73:e5:3f:60:07:bd:84:df:61:cf:fd:f7:2d:
52:bc:61:88:c2:8c:5b:f2:8d:7a:47:4d:67:65:fe:4d:1b:99:
29:55:4a:3c:69:9f:91:5a:14:91:1e:78:aa:65:85:94:4f:18:
cc:be:0e:50:52:76:69:39:e2:5d:56:ba:7e:e1:f6:c8:ca:e3:
58:21:48:79:be:4c:91:a5:71:58:c1:06:02:46:47:bc:e5:be:
15:ad:f1:73:b0:7f:77:03:39:1b:36:5d:5c:a7:db:b6:25:7a:
19:88:aa:30:96:03:a5:65:e5:09:a2:56:b0:05:39:7c:8e:98:
87:4b:4c:33:0a:25:9d:d0:3e:1b:24:76:b8:ef:16:09:07:0d:
04:15:a0:ef:b0:77:95:b0:22:b2:b1:d5:ac:bd:78:09:b0:ef:
44:e5:9f:2d:7c:9e:8d:67:4d:d9:a7:80:bd:da:a1:07:b6:27:
f6:20:36:25:09:a6:6d:a9:c1:e2:f7:57:10:92:f4:2c:6a:18:
8f:e6:9c:2a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPMsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMDkyNzA4WhcNMjUwMjA1MDkyNzA4WjAYMRYw
FAYDVQQDEw02Nzc2NWJmMC1iYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArZo2zUSPmD2HQHHv/q4ZqYfiZJpySpHJomKsdg/l7vGxvxT2bzKXvVug
PJIS+n0ZCquMcYjSOOVOtwI/rnctEdMCQm409nu5+Y4eYM1lU0oO2MNmGBXrahfV
01j+ehaPgDSaRtvBJyWUbaiUqB0+FFY1fS5hP6Rspy8NZT+Xx4pdf/2LlnEX4v4k
XmhsLcjlz/f4n68lfp/DTCMNEzUT3IRLgrOHsl40+MUEcNSKhbqxq/1hK/hGKgMz
fE+fYtyvyx6McqhXVqf7ysYxWQi55tM5/DJEkZqYOAU05hC088Myh7dekvYDvp+O
72ErrI7LtHoZrbOB7j829QfasDt/zwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFR9
7BhFDAepuNTdScRl9ZiE0kXmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRUU0MzRCRUM4RUIxMUVGQjRFMjQ3QkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcDyMA0GCSqGSIb3DQEBCwUA
A4IBAQAHqgVcshhJEsG8nrkhGzwV8kYrY3Wx83IJBhpYqFlIPx7FySmvbgDfWCrb
vJbXVGNpd4sV1oMil9ZhzXPlP2AHvYTfYc/99y1SvGGIwoxb8o16R01nZf5NG5kp
VUo8aZ+RWhSRHniqZYWUTxjMvg5QUnZpOeJdVrp+4fbIyuNYIUh5vkyRpXFYwQYC
Rke85b4VrfFzsH93AzkbNl1cp9u2JXoZiKowlgOlZeUJolawBTl8jpiHS0wzCiWd
0D4bJHa47xYJBw0EFaDvsHeVsCKysdWsvXgJsO9E5Z8tfJ6NZ03Zp4C92qEHtif2
IDYlCaZtqcHi91cQkvQsahiP5pwq
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:40 2025 by rpki-client