Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AC010ECF3511EF8F47014B762E951A.roa
File: C6AC010ECF3511EF8F47014B762E951A.roa (raw, json)
Hash identifier: u/dwXvn4yzy98IWa9KXuOMv/QwXZxN3DBWjEU7/TBqg=
Subject key identifier: 17:4E:57:4D:05:86:B1:BB:E8:E7:0E:23:99:CA:28:88:36:96:1E:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01052B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AC010ECF3511EF8F47014B762E951A.roa
Signing time: Fri 10 Jan 2025 09:32:15 +0000
ROA not before: Fri 10 Jan 2025 09:32:11 +0000
ROA not after: Sat 01 Feb 2025 09:32:11 +0000
asID: 39600
IP address blocks: 45.197.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66859 (0x1052b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:32:11 2025 GMT
Not After : Feb 1 09:32:11 2025 GMT
Subject: CN=6780e91e-4aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:af:ec:bd:6c:09:e2:44:da:da:03:7e:b3:
cd:e1:99:b3:69:37:e5:91:84:9f:70:29:41:f5:d3:
cc:4c:aa:b6:46:07:07:65:1d:2c:fa:fd:49:72:e5:
94:4b:65:e6:cb:fa:79:57:af:2d:48:f1:c9:c1:2f:
6a:06:30:90:c7:64:70:84:86:fa:e6:3b:a5:31:a2:
d1:a9:31:a7:87:e2:e9:b0:5c:0c:f5:80:eb:c9:85:
89:6a:00:79:1a:2c:60:7b:6f:ad:02:f0:00:dd:ee:
82:14:ca:8e:48:06:fb:39:85:19:c1:99:83:60:4e:
b6:53:15:fc:6e:4f:e7:8d:e7:2d:e2:67:08:0a:f0:
af:54:0d:26:74:10:47:60:6d:b1:80:fd:5b:43:48:
4b:c3:20:13:85:e5:b8:5b:9a:b5:91:63:56:78:90:
f1:40:ad:60:d8:18:f1:b1:f6:92:0c:03:d8:49:47:
1e:99:0e:0c:a8:bc:e4:30:14:b8:2b:88:21:52:ea:
82:83:1a:07:62:f5:50:96:62:f0:6c:74:92:f5:c2:
1b:97:cc:a2:78:54:ab:d3:a0:70:d6:bb:4c:9c:fd:
7a:a5:04:36:7d:6c:31:88:29:d2:ae:22:4e:9a:b5:
43:cd:d4:1d:bc:4f:60:95:2e:11:83:01:fb:a0:96:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:57:4D:05:86:B1:BB:E8:E7:0E:23:99:CA:28:88:36:96:1E:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AC010ECF3511EF8F47014B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:9a:0d:52:57:c3:f9:7d:41:16:bd:33:c8:a2:98:63:64:f7:
80:06:ed:59:d1:1c:0c:92:22:4e:d5:63:dd:75:27:b2:83:4c:
c9:d8:35:9e:a2:2f:35:15:43:26:29:27:fe:7a:8d:3b:7b:6a:
b6:9b:46:8c:40:db:2c:b0:0e:af:5a:bf:9d:57:0e:a0:5c:b2:
ae:83:ae:79:29:ef:8c:9b:0f:56:c7:76:d0:c6:9c:01:39:e3:
be:4f:ef:ca:b6:f9:03:bd:c5:a9:fb:ba:38:83:dd:bd:09:f6:
0b:fd:fd:4a:63:42:a8:cb:b0:69:35:be:37:1c:9d:46:a9:b7:
e2:49:4d:95:0a:28:8e:5e:d2:43:86:f7:9f:4e:96:c8:71:dd:
e8:1b:a1:ff:9f:2b:2f:9a:95:ed:f8:20:bd:ba:d7:9c:b2:4d:
83:13:aa:27:2b:27:5d:20:ed:42:ba:63:1f:f3:74:e9:59:a7:
5a:47:fe:3c:a4:65:dc:1e:e6:f9:e5:c5:9e:c9:3d:71:69:42:
eb:65:60:76:25:03:15:40:4e:5c:c1:9f:7f:3c:1d:30:6d:7c:
0f:22:9b:06:c8:e8:19:e5:bb:88:92:96:4e:2b:91:55:cf:88:
e5:5e:20:9a:92:c6:86:b1:27:73:53:d4:eb:78:8f:85:5d:12:
d6:31:c3:58
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQUrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDkzMjExWhcNMjUwMjAxMDkzMjExWjAYMRYw
FAYDVQQDEw02NzgwZTkxZS00YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2K2v7L1sCeJE2toDfrPN4ZmzaTflkYSfcClB9dPMTKq2RgcHZR0s+v1J
cuWUS2Xmy/p5V68tSPHJwS9qBjCQx2RwhIb65julMaLRqTGnh+LpsFwM9YDryYWJ
agB5Gixge2+tAvAA3e6CFMqOSAb7OYUZwZmDYE62UxX8bk/nject4mcICvCvVA0m
dBBHYG2xgP1bQ0hLwyATheW4W5q1kWNWeJDxQK1g2BjxsfaSDAPYSUcemQ4MqLzk
MBS4K4ghUuqCgxoHYvVQlmLwbHSS9cIbl8yieFSr06Bw1rtMnP16pQQ2fWwxiCnS
riJOmrVDzdQdvE9glS4RgwH7oJaGsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBdO
V00FhrG76OcOI5nKKIg2lh7qMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNkFDMDEwRUNGMzUxMUVGOEY0NzAxNEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcXsMA0GCSqGSIb3DQEBCwUA
A4IBAQBsmg1SV8P5fUEWvTPIophjZPeABu1Z0RwMkiJO1WPddSeyg0zJ2DWeoi81
FUMmKSf+eo07e2q2m0aMQNsssA6vWr+dVw6gXLKug655Ke+Mmw9Wx3bQxpwBOeO+
T+/KtvkDvcWp+7o4g929CfYL/f1KY0Koy7BpNb43HJ1GqbfiSU2VCiiOXtJDhvef
TpbIcd3oG6H/nysvmpXt+CC9utecsk2DE6onKyddIO1CumMf83TpWadaR/48pGXc
Hub55cWeyT1xaULrZWB2JQMVQE5cwZ9/PB0wbXwPIpsGyOgZ5buIkpZOK5FVz4jl
XiCaksaGsSdzU9TreI+FXRLWMcNY
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:04 2025 by rpki-client