Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51C6FEAF53C11EF87675C98762E951A.roa
File: C51C6FEAF53C11EF87675C98762E951A.roa (raw, json)
Hash identifier: v2l5ILR1mIrlZrVUkBEByDwCpFPmxWC054Ffi7VcXy4=
Subject key identifier: 26:F3:78:42:41:16:45:3D:3C:35:00:40:28:43:53:0C:C6:87:4E:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013B89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51C6FEAF53C11EF87675C98762E951A.roa
Signing time: Thu 27 Feb 2025 18:58:02 +0000
ROA not before: Thu 27 Feb 2025 18:57:59 +0000
ROA not after: Sat 05 Apr 2025 18:57:59 +0000
asID: 205125
IP address blocks: 45.194.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80777 (0x13b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 18:57:59 2025 GMT
Not After : Apr 5 18:57:59 2025 GMT
Subject: CN=67c0b5ba-8480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:7f:54:09:38:cb:82:f7:9b:e8:b7:a9:c4:
0c:73:44:61:80:78:a2:e4:bb:30:16:8f:44:99:af:
1b:8d:95:08:7d:3c:78:c2:ab:57:68:6c:ae:f6:8b:
6a:52:d2:d9:70:72:4b:af:54:bd:d8:1c:eb:3a:75:
dd:c1:ac:7f:98:8f:e5:fe:6f:be:d8:2d:36:ce:c8:
a0:38:9a:aa:db:b0:23:6a:27:c5:45:97:2e:61:86:
89:1d:a2:ec:09:f4:83:88:7b:07:8f:a1:71:51:cd:
2e:1e:3a:28:96:56:c0:c0:47:50:47:2f:da:05:df:
17:8f:19:58:b8:d5:ce:c0:1f:9b:ee:4e:f7:47:93:
d2:65:59:70:94:2b:8d:aa:0a:c4:cb:8a:1b:33:1a:
6e:f3:49:d1:09:29:89:33:51:c7:5f:bd:ed:89:0b:
2f:e5:88:f5:09:63:f0:9a:4b:d8:7b:d7:bf:42:0d:
98:44:e2:6f:de:44:74:1e:f3:31:20:77:f1:73:e2:
08:c4:ed:cb:32:a3:e4:96:3d:dd:0a:99:75:9c:92:
1a:dc:c8:7d:55:ec:a8:a7:5e:47:56:3d:79:41:35:
5a:09:a6:b4:f0:a0:7f:9b:af:49:38:d3:82:18:24:
de:20:da:f4:3d:8c:b1:68:b4:5b:c2:32:dd:0a:d7:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:78:42:41:16:45:3D:3C:35:00:40:28:43:53:0C:C6:87:4E:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C51C6FEAF53C11EF87675C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
12:83:59:6c:7d:43:78:ba:a0:aa:c5:6c:31:7a:c1:c8:75:a1:
a6:ca:df:7c:70:43:18:6b:7f:28:7f:5b:81:5b:c0:1e:5c:e8:
8b:00:f7:29:80:5d:b6:1a:43:22:dd:b5:06:9c:51:2a:22:1c:
d0:5d:e7:9e:53:03:ba:c7:87:06:f8:e9:06:24:3e:0e:c5:8f:
e5:67:a4:12:86:28:e5:ea:67:1a:63:d6:c7:be:26:7b:65:da:
26:23:d1:2a:5a:3d:f2:c7:6d:a2:4d:38:cf:fd:73:cd:f8:61:
59:bf:8e:cd:79:aa:86:47:f1:aa:96:fb:76:74:64:cb:84:af:
dd:bd:bb:d7:e0:e2:fa:6f:21:44:68:72:05:ea:4c:ef:cd:ed:
83:82:5b:15:42:30:1c:e0:d0:a3:27:7e:1c:55:1e:de:9b:ea:
d3:b6:a5:43:c9:32:01:46:b2:64:b6:02:9e:6b:10:8d:36:2c:
5e:1e:7c:78:f3:87:a3:0a:48:09:96:4e:74:52:92:a6:cf:31:
c3:79:78:8c:3f:d0:69:b6:ff:6d:b8:23:8e:af:b9:f2:0e:db:
8e:70:db:28:aa:de:68:3c:34:b4:82:03:5f:aa:f6:92:ac:1f:
7f:76:b6:b4:16:a1:ea:7f:b4:32:2b:45:cd:53:20:79:49:ce:
96:35:db:55
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MTg1NzU5WhcNMjUwNDA1MTg1NzU5WjAYMRYw
FAYDVQQDEw02N2MwYjViYS04NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsGJ/VAk4y4L3m+i3qcQMc0RhgHii5LswFo9Ema8bjZUIfTx4wqtXaGyu
9otqUtLZcHJLr1S92BzrOnXdwax/mI/l/m++2C02zsigOJqq27AjaifFRZcuYYaJ
HaLsCfSDiHsHj6FxUc0uHjoollbAwEdQRy/aBd8XjxlYuNXOwB+b7k73R5PSZVlw
lCuNqgrEy4obMxpu80nRCSmJM1HHX73tiQsv5Yj1CWPwmkvYe9e/Qg2YROJv3kR0
HvMxIHfxc+IIxO3LMqPklj3dCpl1nJIa3Mh9Veyop15HVj15QTVaCaa08KB/m69J
ONOCGCTeINr0PYyxaLRbwjLdCteDvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCbz
eEJBFkU9PDUAQChDUwzGh05wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTFDNkZFQUY1M0MxMUVGODc2NzVDOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcICMA0GCSqGSIb3DQEBCwUA
A4IBAQASg1lsfUN4uqCqxWwxesHIdaGmyt98cEMYa38of1uBW8AeXOiLAPcpgF22
GkMi3bUGnFEqIhzQXeeeUwO6x4cG+OkGJD4OxY/lZ6QShijl6mcaY9bHviZ7Zdom
I9EqWj3yx22iTTjP/XPN+GFZv47NeaqGR/Gqlvt2dGTLhK/dvbvX4OL6byFEaHIF
6kzvze2DglsVQjAc4NCjJ34cVR7em+rTtqVDyTIBRrJktgKeaxCNNixeHnx484ej
CkgJlk50UpKmzzHDeXiMP9Bptv9tuCOOr7nyDtuOcNsoqt5oPDS0ggNfqvaSrB9/
dra0FqHqf7QyK0XNUyB5Sc6WNdtV
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:46:18 2025 by rpki-client