Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C206CFB047EC11EFB0391D67762E951A.roa
File: C206CFB047EC11EFB0391D67762E951A.roa (raw, json)
Hash identifier: ek0d315r9uIdKI8jEn0oCGL++lZX4NwxfIET13b/16Q=
Subject key identifier: B5:D8:CE:37:BE:B0:3D:30:6A:EB:9F:7D:AC:1A:52:B9:AB:10:E5:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C206CFB047EC11EFB0391D67762E951A.roa
Signing time: Mon 22 Jul 2024 05:39:26 +0000
ROA not before: Mon 22 Jul 2024 05:39:23 +0000
ROA not after: Wed 31 Jul 2024 05:39:23 +0000
asID: 142062
IP address blocks: 45.196.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40495 (0x9e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:39:23 2024 GMT
Not After : Jul 31 05:39:23 2024 GMT
Subject: CN=669df08e-b7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:c0:78:65:1d:b0:64:8a:7d:ed:1c:00:ae:
a4:f2:5d:43:e4:c7:b0:6b:26:e0:d3:66:c9:15:18:
7f:c6:b6:4a:c4:17:2f:06:94:a8:fa:76:49:d5:ad:
37:9b:1d:6a:86:ea:e1:50:0c:a2:75:af:09:ed:89:
d6:d7:05:3b:ff:8d:b5:dc:f7:49:6a:20:bc:1d:b6:
5e:0f:63:bb:d1:6a:dd:fd:2c:2f:1d:0d:9a:da:4a:
fc:b4:6b:91:c7:f9:95:d1:94:4d:2d:5a:6d:6d:df:
3c:8f:f0:d7:79:cc:3c:a9:c3:a9:77:f3:3c:7f:17:
0f:0a:91:8a:48:c5:28:f6:5f:17:cb:e9:a5:50:f7:
f6:6d:a4:b9:cf:e5:41:16:80:dc:42:76:6e:02:48:
c0:45:c7:88:4b:3e:e4:95:8f:e5:9f:4c:c7:ec:dc:
21:59:ad:f9:8e:21:5e:a1:f0:e7:bf:51:40:65:26:
65:b4:16:6a:d4:6f:72:59:38:88:85:31:54:09:1e:
79:e0:27:ad:25:01:e3:f8:47:62:cb:60:42:1f:1c:
d8:84:ce:87:c3:4a:be:46:16:f5:b8:f7:18:98:4a:
84:36:f3:4a:d6:cc:bc:36:89:f5:32:9c:62:4b:ca:
d6:24:7b:39:ff:eb:7d:81:a0:da:23:30:dd:3a:77:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:CE:37:BE:B0:3D:30:6A:EB:9F:7D:AC:1A:52:B9:AB:10:E5:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C206CFB047EC11EFB0391D67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.0.0/20
Signature Algorithm: sha256WithRSAEncryption
90:81:58:2a:0f:e7:b7:f5:79:b6:bd:9e:98:96:45:3b:e4:81:
61:24:4c:b7:31:1d:1c:f0:9a:3b:87:0a:48:00:c1:f3:e4:78:
43:87:99:46:26:2a:90:5c:e1:e5:88:60:4b:40:e3:3d:ad:1d:
37:3a:bc:41:89:31:2e:0a:b2:16:ae:67:04:55:09:2b:df:92:
bd:7a:91:56:fc:98:30:f9:17:52:34:7c:b7:33:89:cc:b8:b4:
7c:8d:ad:b4:49:a9:1e:47:39:1e:53:31:dc:c1:b1:f6:20:ac:
c7:29:9f:a0:4d:de:0a:df:d0:3b:26:19:e7:b3:f2:91:1a:41:
1a:17:27:83:cb:67:ed:0a:b5:3c:79:9c:7c:bf:61:d8:22:37:
be:b7:85:d3:4d:15:9c:07:18:f2:df:aa:d6:3d:e2:1c:78:06:
27:da:f0:c4:3d:8d:1c:d2:de:d9:fa:ad:ca:cf:25:e3:ed:45:
bf:41:aa:0e:0b:09:8a:3e:db:22:47:4c:ba:8e:63:2d:8c:c0:
8b:ec:cd:73:fa:9b:ad:de:19:ca:7d:ff:3b:a7:36:a4:d8:dc:
60:d6:8f:ef:7e:5f:8d:9b:f5:79:e7:e2:d8:a7:47:00:ec:2f:
d0:42:c9:99:6d:2a:7b:c3:8b:d7:78:87:0c:79:99:3f:42:e6:
7a:f7:21:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ4vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzIyMDUzOTIzWhcNMjQwNzMxMDUzOTIzWjAYMRYw
FAYDVQQDEw02NjlkZjA4ZS1iN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyE/AeGUdsGSKfe0cAK6k8l1D5Mewaybg02bJFRh/xrZKxBcvBpSo+nZJ
1a03mx1qhurhUAyida8J7YnW1wU7/4213PdJaiC8HbZeD2O70Wrd/SwvHQ2a2kr8
tGuRx/mV0ZRNLVptbd88j/DXecw8qcOpd/M8fxcPCpGKSMUo9l8Xy+mlUPf2baS5
z+VBFoDcQnZuAkjARceISz7klY/ln0zH7NwhWa35jiFeofDnv1FAZSZltBZq1G9y
WTiIhTFUCR554CetJQHj+Ediy2BCHxzYhM6Hw0q+Rhb1uPcYmEqENvNK1sy8Non1
MpxiS8rWJHs5/+t9gaDaIzDdOndQ2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLXY
zje+sD0wauuffawaUrmrEOXBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMjA2Q0ZCMDQ3RUMxMUVGQjAzOTFENjc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcQAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQgVgqD+e39Xm2vZ6YlkU75IFhJEy3MR0c8Jo7hwpIAMHz5HhDh5lGJiqQ
XOHliGBLQOM9rR03OrxBiTEuCrIWrmcEVQkr35K9epFW/Jgw+RdSNHy3M4nMuLR8
ja20SakeRzkeUzHcwbH2IKzHKZ+gTd4K39A7Jhnns/KRGkEaFyeDy2ftCrU8eZx8
v2HYIje+t4XTTRWcBxjy36rWPeIceAYn2vDEPY0c0t7Z+q3KzyXj7UW/QaoOCwmK
PtsiR0y6jmMtjMCL7M1z+put3hnKff87pzak2Nxg1o/vfl+Nm/V55+LYp0cA7C/Q
QsmZbSp7w4vXeIcMeZk/QuZ69yGL
-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org