Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D369C2CC2A11EF85854D5C762E951A.roa
File: C2D369C2CC2A11EF85854D5C762E951A.roa (raw, json)
Hash identifier: WTaQwQtRUCFq077NorUpD8K96ES5+X6Lpwch9/HArDQ=
Subject key identifier: C0:1C:F5:F5:56:4B:4E:4B:58:EA:6D:F3:AF:3F:33:3F:4F:DF:C7:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D369C2CC2A11EF85854D5C762E951A.roa
Signing time: Mon 06 Jan 2025 12:35:50 +0000
ROA not before: Mon 06 Jan 2025 12:35:46 +0000
ROA not after: Sat 18 Jan 2025 12:35:46 +0000
asID: 39600
IP address blocks: 45.195.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63723 (0xf8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:35:46 2025 GMT
Not After : Jan 18 12:35:46 2025 GMT
Subject: CN=677bce26-134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:06:b9:c6:88:d5:ed:8e:6c:84:7e:64:ea:
54:ec:26:eb:af:fe:52:67:1d:3f:0e:2c:bc:fa:8d:
92:36:1e:de:54:9d:43:6d:a5:ee:be:2e:a8:50:d0:
62:5f:01:e6:1d:9c:3e:f1:4d:45:2e:08:bd:b4:92:
f9:e9:b6:93:72:33:60:83:cf:a0:bf:da:1e:9d:e0:
05:af:b5:91:62:e6:de:29:11:91:d7:ee:1b:57:4c:
1d:9d:e0:d1:2f:dc:f0:1f:a3:7b:98:39:95:a3:9f:
75:fc:1a:68:cf:64:5b:6b:68:46:6d:1a:62:95:ff:
9f:ca:81:f6:a2:af:d5:c9:39:ad:8b:d3:53:9a:67:
08:d6:fc:df:29:4f:4e:e8:e9:f8:96:07:92:97:43:
50:29:05:ea:19:5f:e9:0a:8e:b6:f4:57:da:37:84:
60:a8:85:88:5a:18:74:9f:2a:17:2a:35:61:2b:27:
f5:18:f0:5f:c3:6e:53:44:d1:bb:e3:e8:7f:bc:63:
d2:26:44:bf:a9:dc:81:3b:f1:2d:2d:4f:1c:5c:cf:
25:97:5d:6d:ee:92:39:27:a5:2b:5e:8e:55:10:87:
d2:e5:f8:5d:b2:fe:94:ea:c8:70:04:b2:07:52:60:
47:84:18:41:dc:76:a3:f0:1b:13:e5:5f:41:35:14:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:F5:F5:56:4B:4E:4B:58:EA:6D:F3:AF:3F:33:3F:4F:DF:C7:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D369C2CC2A11EF85854D5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/22
Signature Algorithm: sha256WithRSAEncryption
14:e3:75:4b:e3:98:31:e3:fa:18:13:82:35:b7:ad:83:45:fd:
a3:86:39:56:9b:ca:fa:02:68:3b:74:84:d9:8e:a2:b5:9d:56:
b7:18:f6:78:43:1b:0f:9c:0f:c2:62:26:d2:b1:2f:c8:cf:78:
3c:7f:d8:ca:f7:51:99:0c:af:01:f5:c0:aa:a7:d8:9c:00:fd:
ce:c1:04:35:41:67:ad:ba:76:e9:79:b9:40:a9:d5:ad:8a:99:
55:63:46:62:87:d5:65:c3:4f:16:e0:11:93:00:bc:ec:69:3e:
93:08:82:cc:32:ba:cc:a5:c5:ec:04:a4:70:57:de:23:ef:cf:
64:f9:98:25:b6:60:db:aa:a2:0a:82:c4:c6:74:a4:bb:79:fb:
94:db:6d:a9:88:34:6b:b8:94:b5:80:20:0a:fe:c8:aa:08:bd:
20:cc:9a:98:5c:22:d4:d0:41:51:bd:73:7e:5c:b0:33:4e:73:
de:eb:e7:1f:1e:b2:15:1d:20:3a:c0:e1:da:46:e7:6a:ad:1f:
fa:67:d7:e1:f3:ed:20:ef:3e:47:cd:5e:93:b9:bd:f9:7e:98:
39:00:af:f8:f2:9d:48:d6:f7:2d:c2:bf:a9:ae:93:16:a6:b3:
71:ae:c5:e1:96:4c:16:d5:ca:63:17:f7:58:20:6b:dd:b1:9f:
4f:88:98:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPjrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MTIzNTQ2WhcNMjUwMTE4MTIzNTQ2WjAYMRYw
FAYDVQQDEw02NzdiY2UyNi0xMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2lAGucaI1e2ObIR+ZOpU7Cbrr/5SZx0/Diy8+o2SNh7eVJ1DbaXuvi6o
UNBiXwHmHZw+8U1FLgi9tJL56baTcjNgg8+gv9oeneAFr7WRYubeKRGR1+4bV0wd
neDRL9zwH6N7mDmVo591/Bpoz2Rba2hGbRpilf+fyoH2oq/VyTmti9NTmmcI1vzf
KU9O6On4lgeSl0NQKQXqGV/pCo629FfaN4RgqIWIWhh0nyoXKjVhKyf1GPBfw25T
RNG74+h/vGPSJkS/qdyBO/EtLU8cXM8ll11t7pI5J6UrXo5VEIfS5fhdsv6U6shw
BLIHUmBHhBhB3Haj8BsT5V9BNRQ7sQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMAc
9fVWS05LWOpt868/Mz9P38duMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMkQzNjlDMkNDMkExMUVGODU4NTRENUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQAU43VL45gx4/oYE4I1t62DRf2jhjlWm8r6Amg7dITZjqK1nVa3GPZ4QxsP
nA/CYibSsS/Iz3g8f9jK91GZDK8B9cCqp9icAP3OwQQ1QWetunbpeblAqdWtiplV
Y0Zih9Vlw08W4BGTALzsaT6TCILMMrrMpcXsBKRwV94j789k+ZgltmDbqqIKgsTG
dKS7efuU222piDRruJS1gCAK/siqCL0gzJqYXCLU0EFRvXN+XLAzTnPe6+cfHrIV
HSA6wOHaRudqrR/6Z9fh8+0g7z5HzV6Tub35fpg5AK/48p1I1vctwr+prpMWprNx
rsXhlkwW1cpjF/dYIGvdsZ9PiJiZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:53 2025 by rpki-client