Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C26643A4BDD611EFAE70037B762E951A.roa
File: C26643A4BDD611EFAE70037B762E951A.roa (raw, json)
Hash identifier: IZc6C5FaoQQBQZTaKytqK+TuVif3V5XBtm4lVXjvlmA=
Subject key identifier: A0:5A:22:7B:B5:7B:A6:B2:7F:CC:A0:4A:49:D7:DC:2D:94:27:F9:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C26643A4BDD611EFAE70037B762E951A.roa
Signing time: Thu 19 Dec 2024 06:59:15 +0000
ROA not before: Thu 19 Dec 2024 06:59:12 +0000
ROA not after: Thu 23 Jan 2025 06:59:12 +0000
asID: 395793
IP address blocks: 45.194.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58787 (0xe5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 06:59:12 2024 GMT
Not After : Jan 23 06:59:12 2025 GMT
Subject: CN=6763c443-cb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:db:35:68:4e:1a:01:b3:de:6b:31:3e:40:
90:01:16:21:51:5f:a5:b7:20:1e:18:ab:cb:f1:04:
4d:64:c4:1a:20:8c:a1:de:db:55:4e:02:39:ed:41:
21:7b:3f:8e:79:a1:f0:79:28:d0:21:1a:b1:28:55:
50:ea:dd:57:26:61:a0:34:aa:e7:df:36:fc:2c:43:
a8:69:ea:cb:39:36:17:c4:2d:45:a0:4f:f0:2d:11:
87:94:24:42:11:59:e2:df:4b:4b:b5:28:83:f9:b6:
4b:97:0c:ab:55:89:6f:d3:48:7c:04:4d:2d:3f:3a:
3e:50:d4:f7:a8:2e:50:83:cd:b9:74:7d:d8:70:9b:
79:b1:80:57:38:8f:f4:74:9b:9c:5a:5b:31:77:76:
87:05:64:b7:f4:a4:8f:22:e5:e4:c0:08:a5:4c:59:
c8:10:91:cd:9f:be:77:85:e5:c2:e4:0d:f9:c5:dd:
06:e6:23:58:63:cf:b5:09:f8:c1:bb:5f:52:50:18:
d0:c3:99:3a:15:5a:4e:18:0c:75:d4:5a:3a:7b:16:
c7:80:b6:fc:67:91:fa:02:ff:0e:d2:41:f8:c6:9e:
a1:88:b1:93:96:3c:2b:f3:71:8d:13:87:12:d8:72:
1e:4e:e9:51:61:fc:29:d4:bb:2a:f5:18:55:4d:ba:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:22:7B:B5:7B:A6:B2:7F:CC:A0:4A:49:D7:DC:2D:94:27:F9:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C26643A4BDD611EFAE70037B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.24.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0d:62:b5:70:19:56:a1:86:1d:fc:1a:d7:de:8f:0b:e8:ea:
54:99:e1:a1:94:a3:82:b9:3f:5d:28:c6:e5:f4:9e:b9:fd:c2:
a6:92:a3:48:d1:20:31:be:cb:ce:02:13:f0:89:da:c3:8b:f9:
b9:f9:cc:b1:69:1f:55:15:73:d1:69:5a:79:4a:51:bf:9b:6e:
91:8d:7d:23:53:d0:7b:32:0a:40:f6:e2:9e:e8:f9:34:97:0b:
26:8d:cc:a3:f5:f9:91:bd:5b:d0:b6:ce:0c:92:34:bd:a3:89:
a9:9d:6e:dd:90:72:19:2d:71:d6:a4:fd:9c:ea:00:35:a4:84:
c0:aa:54:3e:3c:15:cd:87:af:39:91:5e:28:58:73:68:65:bb:
3f:3e:d5:f7:a8:97:16:c5:b8:02:c0:4b:56:1f:c6:2e:1d:9d:
24:e7:ff:cc:68:e3:6a:71:f6:e9:69:a1:7c:3d:5c:3a:46:ae:
50:5c:e7:35:b1:98:24:a1:f1:52:fe:c3:c1:ed:4b:10:ae:76:
db:4e:6c:d3:c0:52:d3:2e:ad:c9:34:f0:9f:1d:e1:a9:3d:b7:
c6:37:4b:7c:60:80:30:a5:4d:01:cd:e3:8d:9b:63:22:e0:66:
36:e1:24:f8:2c:3e:93:42:ca:3a:9b:6d:03:cd:7a:d0:6f:7a:
ec:34:fb:52
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDY1OTEyWhcNMjUwMTIzMDY1OTEyWjAYMRYw
FAYDVQQDEw02NzYzYzQ0My1jYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxHbNWhOGgGz3msxPkCQARYhUV+ltyAeGKvL8QRNZMQaIIyh3ttVTgI5
7UEhez+OeaHweSjQIRqxKFVQ6t1XJmGgNKrn3zb8LEOoaerLOTYXxC1FoE/wLRGH
lCRCEVni30tLtSiD+bZLlwyrVYlv00h8BE0tPzo+UNT3qC5Qg825dH3YcJt5sYBX
OI/0dJucWlsxd3aHBWS39KSPIuXkwAilTFnIEJHNn753heXC5A35xd0G5iNYY8+1
CfjBu19SUBjQw5k6FVpOGAx11Fo6exbHgLb8Z5H6Av8O0kH4xp6hiLGTljwr83GN
E4cS2HIeTulRYfwp1Lsq9RhVTbp48QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKBa
Inu1e6ayf8ygSknX3C2UJ/kgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMjY2NDNBNEJERDYxMUVGQUU3MDAzN0I3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIYMA0GCSqGSIb3DQEBCwUA
A4IBAQBnDWK1cBlWoYYd/BrX3o8L6OpUmeGhlKOCuT9dKMbl9J65/cKmkqNI0SAx
vsvOAhPwidrDi/m5+cyxaR9VFXPRaVp5SlG/m26RjX0jU9B7MgpA9uKe6Pk0lwsm
jcyj9fmRvVvQts4MkjS9o4mpnW7dkHIZLXHWpP2c6gA1pITAqlQ+PBXNh685kV4o
WHNoZbs/PtX3qJcWxbgCwEtWH8YuHZ0k5//MaONqcfbpaaF8PVw6Rq5QXOc1sZgk
ofFS/sPB7UsQrnbbTmzTwFLTLq3JNPCfHeGpPbfGN0t8YIAwpU0BzeONm2Mi4GY2
4ST4LD6TQso6m20DzXrQb3rsNPtS
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:25 2025 by rpki-client