Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C193815EC47411EF876C4C5E762E951A.roa
File: C193815EC47411EF876C4C5E762E951A.roa (raw, json)
Hash identifier: l6F8AUBjZUOX1Ne7EUu+YiAZUAJumkpTrC6T4libJuM=
Subject key identifier: 68:B0:DF:0F:E9:F7:4A:06:5E:46:9D:50:00:7D:8E:DA:12:9C:1B:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C193815EC47411EF876C4C5E762E951A.roa
Signing time: Fri 27 Dec 2024 17:05:21 +0000
ROA not before: Fri 27 Dec 2024 17:05:18 +0000
ROA not after: Sat 01 Feb 2025 17:05:18 +0000
asID: 203020
IP address blocks: 45.198.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61654 (0xf0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:05:18 2024 GMT
Not After : Feb 1 17:05:18 2025 GMT
Subject: CN=676ede51-2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:57:1d:1c:ad:d0:ab:09:8f:b8:a2:34:d5:
5b:ef:93:b4:af:56:2a:63:d6:25:0e:99:31:16:f6:
8c:cd:80:f5:04:f8:0d:82:64:16:f7:8b:00:e7:e7:
67:6d:e2:e5:b9:ae:6c:17:56:e5:fe:48:00:20:84:
46:c2:af:c6:53:91:8e:75:6f:a6:5c:bd:e4:eb:6c:
3a:3f:5a:f0:81:b7:1a:99:3c:48:26:52:3b:ce:c0:
45:6a:b3:fd:36:6c:9e:bf:b3:98:ce:d2:30:75:b2:
0c:02:39:1e:db:ea:ea:cc:96:31:1a:d9:18:5a:e4:
3a:01:7c:26:29:04:ba:b5:a4:d7:1b:d3:11:3e:2f:
1f:cb:31:3f:a4:0d:fb:03:15:45:d2:ca:a1:1d:b4:
7f:e2:a2:b4:69:d7:30:88:dc:4d:b8:44:11:8d:b2:
ab:9b:c0:98:b9:12:67:66:44:c4:88:dd:55:6c:9b:
97:b4:6a:3e:bd:77:04:8d:40:4e:bf:b7:e1:27:cb:
72:d1:24:6b:c5:75:1a:2d:1c:b9:8a:86:dc:43:12:
07:18:06:b7:04:33:4e:66:89:62:01:76:21:cd:1e:
6b:9d:77:24:a1:3f:e1:11:fb:9a:33:29:47:b9:1a:
1b:99:83:5e:47:87:63:96:07:4e:2e:86:34:0b:3c:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:DF:0F:E9:F7:4A:06:5E:46:9D:50:00:7D:8E:DA:12:9C:1B:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C193815EC47411EF876C4C5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:5f:b1:22:e2:01:52:8a:e0:ad:40:5b:19:24:aa:96:e5:3d:
fa:41:ac:18:b8:30:3f:7a:5a:08:62:c2:08:c4:57:95:19:7b:
87:5b:ff:c7:6d:94:2d:5a:15:64:53:b9:ed:84:d9:b5:55:80:
b7:b4:fb:b4:99:b5:9c:4f:e6:68:e1:96:3a:01:e8:66:65:ae:
88:1b:16:42:1f:1c:90:86:be:c1:15:e5:93:d0:a2:aa:80:d5:
8b:5c:2e:06:35:a0:15:2f:3d:eb:46:3e:62:52:33:90:c1:fc:
a9:75:2b:ee:77:c6:fa:39:fb:ca:34:be:2a:11:57:68:85:1b:
cb:f2:f9:22:ac:44:d3:0e:01:94:f5:0f:b4:79:7e:6e:e4:e4:
84:b5:62:5e:6f:4c:f2:0f:19:f3:3d:71:86:d8:d4:ee:9a:2d:
68:d4:fe:46:cc:05:cf:a8:60:bd:37:7e:49:e9:82:29:23:73:
f7:9b:ca:1c:a4:13:5d:d6:e8:4a:6b:cb:9d:d1:98:f2:8b:0c:
6e:db:5a:81:5f:20:42:d0:4d:c6:24:57:0e:5a:0f:61:ac:2a:
b1:fd:45:1b:71:ff:9d:52:09:02:0c:41:52:ef:03:f1:2e:e1:
bf:95:f9:16:b5:61:17:2f:7a:5f:b6:18:37:d0:ad:d6:81:da:
d6:0c:60:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPDWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MTcwNTE4WhcNMjUwMjAxMTcwNTE4WjAYMRYw
FAYDVQQDEw02NzZlZGU1MS0yZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxLRXHRyt0KsJj7iiNNVb75O0r1YqY9YlDpkxFvaMzYD1BPgNgmQW94sA
5+dnbeLlua5sF1bl/kgAIIRGwq/GU5GOdW+mXL3k62w6P1rwgbcamTxIJlI7zsBF
arP9Nmyev7OYztIwdbIMAjke2+rqzJYxGtkYWuQ6AXwmKQS6taTXG9MRPi8fyzE/
pA37AxVF0sqhHbR/4qK0adcwiNxNuEQRjbKrm8CYuRJnZkTEiN1VbJuXtGo+vXcE
jUBOv7fhJ8ty0SRrxXUaLRy5iobcQxIHGAa3BDNOZoliAXYhzR5rnXckoT/hEfua
MylHuRobmYNeR4djlgdOLoY0Czzb/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGiw
3w/p90oGXkadUAB9jtoSnBsDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTkzODE1RUM0NzQxMUVGODc2QzRDNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcY0MA0GCSqGSIb3DQEBCwUA
A4IBAQChX7Ei4gFSiuCtQFsZJKqW5T36QawYuDA/eloIYsIIxFeVGXuHW//HbZQt
WhVkU7nthNm1VYC3tPu0mbWcT+Zo4ZY6AehmZa6IGxZCHxyQhr7BFeWT0KKqgNWL
XC4GNaAVLz3rRj5iUjOQwfypdSvud8b6OfvKNL4qEVdohRvL8vkirETTDgGU9Q+0
eX5u5OSEtWJeb0zyDxnzPXGG2NTumi1o1P5GzAXPqGC9N35J6YIpI3P3m8ocpBNd
1uhKa8ud0Zjyiwxu21qBXyBC0E3GJFcOWg9hrCqx/UUbcf+dUgkCDEFS7wPxLuG/
lfkWtWEXL3pfthg30K3WgdrWDGDe
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:53 2025 by rpki-client