Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22163A8C47311EFA0D5DC57762E951A.roa
File: C22163A8C47311EFA0D5DC57762E951A.roa (raw, json)
Hash identifier: D9KRi/R72LjYIK4S2OH1wykFNFOCOTCOTy0jrFeRZHE=
Subject key identifier: 64:FB:08:FB:67:4D:D2:27:BD:DA:31:C2:2C:5D:B3:07:EA:BC:B0:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22163A8C47311EFA0D5DC57762E951A.roa
Signing time: Fri 27 Dec 2024 16:58:13 +0000
ROA not before: Fri 27 Dec 2024 16:58:09 +0000
ROA not after: Sat 01 Feb 2025 16:58:09 +0000
asID: 203020
IP address blocks: 45.198.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61644 (0xf0cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:58:09 2024 GMT
Not After : Feb 1 16:58:09 2025 GMT
Subject: CN=676edca5-e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:00:a2:ad:e0:6a:43:3c:e5:c3:b9:57:80:
69:c2:c8:af:c3:30:84:0a:fe:f9:ea:2e:f2:8e:cb:
9e:9a:c6:f1:dc:85:76:23:f2:77:15:9d:c9:d0:c8:
16:83:11:42:d8:0f:b8:c5:d6:7e:b9:26:bd:93:36:
92:0b:d2:8b:08:0f:0a:5d:b2:e9:7d:d5:2c:53:0b:
69:2e:c1:5a:54:ef:98:0a:ee:12:86:7f:bd:f1:1a:
4b:7e:38:c9:f9:7b:04:ec:94:04:c0:b7:7f:d9:33:
3a:2c:b2:06:5b:cd:2b:37:9b:83:3a:7f:b6:e7:62:
37:0b:b1:60:a7:e2:aa:d3:29:f5:e6:f8:54:ef:8c:
7e:4e:03:ae:7d:86:4a:7a:b1:38:5e:1b:e4:48:0d:
c1:54:ec:4b:51:d6:a5:a5:fd:60:73:04:6b:da:7d:
1d:62:a7:55:75:02:0d:21:89:10:07:9e:28:d1:7a:
f9:a8:75:ce:ba:47:da:28:a8:fb:ca:1c:6f:6d:7e:
1f:70:bd:5c:05:3f:e8:1e:d6:ec:97:fd:d6:eb:ab:
fd:e9:e7:bb:68:95:53:39:2c:9e:9d:ba:ec:a7:91:
36:3b:59:2c:bb:95:70:43:9f:f2:4d:92:03:7c:d7:
60:b7:70:3c:8c:c9:47:c1:77:94:6a:25:a3:1d:d1:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:08:FB:67:4D:D2:27:BD:DA:31:C2:2C:5D:B3:07:EA:BC:B0:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22163A8C47311EFA0D5DC57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:83:73:bc:49:28:cc:20:b6:74:6a:41:cf:73:8a:bb:4b:a6:
8b:f9:37:1e:52:8c:06:4d:da:60:1d:68:b5:3d:fd:ae:bf:27:
9e:d3:1f:44:8c:5e:98:7b:bf:71:d6:a2:0c:79:e0:47:01:5b:
75:c5:14:29:97:67:dc:1b:fb:c2:a1:f6:2c:a5:3b:9a:aa:7f:
cf:93:f0:ea:47:57:81:7b:1b:71:74:b2:c7:78:02:27:a5:f4:
82:b7:56:db:70:5e:cb:8a:20:38:a2:0e:74:2e:74:91:08:4d:
9a:48:33:47:06:6c:5d:b4:9b:45:fe:05:38:24:95:79:b9:79:
08:9d:ad:9b:a5:30:c7:2d:cf:67:0f:e0:f2:8c:7f:59:28:e9:
ac:50:9f:a5:3d:d4:39:d3:70:f9:f9:34:04:1e:12:c1:17:34:
f8:86:5e:df:7f:57:d2:c2:d3:6d:5a:9b:41:77:d8:fe:b6:59:
99:c8:31:30:83:4c:1b:d6:05:d9:3a:93:00:13:6f:bc:1e:14:
76:58:3a:c5:6b:1e:02:3d:ce:5f:31:75:8b:31:c8:ce:14:15:
81:94:9f:d0:cd:09:5c:5f:8f:c4:af:3b:01:3d:b9:b8:8f:1f:
cb:18:ff:ef:44:eb:29:80:6a:09:e4:6c:38:c2:05:ba:7b:72:
b4:37:6c:5f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPDMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MTY1ODA5WhcNMjUwMjAxMTY1ODA5WjAYMRYw
FAYDVQQDEw02NzZlZGNhNS1lOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp9UAoq3gakM85cO5V4BpwsivwzCECv756i7yjsuemsbx3IV2I/J3FZ3J
0MgWgxFC2A+4xdZ+uSa9kzaSC9KLCA8KXbLpfdUsUwtpLsFaVO+YCu4Shn+98RpL
fjjJ+XsE7JQEwLd/2TM6LLIGW80rN5uDOn+252I3C7Fgp+Kq0yn15vhU74x+TgOu
fYZKerE4XhvkSA3BVOxLUdalpf1gcwRr2n0dYqdVdQINIYkQB54o0Xr5qHXOukfa
KKj7yhxvbX4fcL1cBT/oHtbsl/3W66v96ee7aJVTOSyenbrsp5E2O1ksu5VwQ5/y
TZIDfNdgt3A8jMlHwXeUaiWjHdECSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGT7
CPtnTdInvdoxwixdswfqvLC6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMjIxNjNBOEM0NzMxMUVGQTBENURDNTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcYyMA0GCSqGSIb3DQEBCwUA
A4IBAQAcg3O8SSjMILZ0akHPc4q7S6aL+TceUowGTdpgHWi1Pf2uvyee0x9EjF6Y
e79x1qIMeeBHAVt1xRQpl2fcG/vCofYspTuaqn/Pk/DqR1eBextxdLLHeAInpfSC
t1bbcF7LiiA4og50LnSRCE2aSDNHBmxdtJtF/gU4JJV5uXkIna2bpTDHLc9nD+Dy
jH9ZKOmsUJ+lPdQ503D5+TQEHhLBFzT4hl7ff1fSwtNtWptBd9j+tlmZyDEwg0wb
1gXZOpMAE2+8HhR2WDrFax4CPc5fMXWLMcjOFBWBlJ/QzQlcX4/ErzsBPbm4jx/L
GP/vROspgGoJ5Gw4wgW6e3K0N2xf
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:17 2025 by rpki-client