Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C961259CBDD711EF8FA1B482762E951A.roa
File: C961259CBDD711EF8FA1B482762E951A.roa (raw, json)
Hash identifier: 0ppQ7Iq0pV9QYXZSicubXzqlb2s2C16sJwXKMcfhtCo=
Subject key identifier: 89:73:4B:AD:47:9B:10:2E:A8:A4:FA:F2:EE:EA:0B:49:A3:2C:34:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C961259CBDD711EF8FA1B482762E951A.roa
Signing time: Thu 19 Dec 2024 07:06:37 +0000
ROA not before: Thu 19 Dec 2024 07:06:33 +0000
ROA not after: Fri 24 Jan 2025 07:06:33 +0000
asID: 395793
IP address blocks: 45.198.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58799 (0xe5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:06:33 2024 GMT
Not After : Jan 24 07:06:33 2025 GMT
Subject: CN=6763c5fc-6ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:c1:69:7a:99:b4:18:44:83:d3:96:0a:d2:
06:a8:4f:f6:c5:21:e5:32:b0:36:a0:64:f7:ad:08:
aa:76:4f:05:ca:d8:89:51:37:f1:5b:af:3f:e1:f8:
be:f4:fb:2f:85:9f:be:54:d6:ba:64:a5:ce:41:60:
bc:3c:ea:78:38:f3:d3:df:31:25:77:14:79:6b:b2:
64:95:b5:13:57:ec:34:73:95:ff:d0:a4:e0:1b:cd:
71:62:10:62:1a:9c:6f:64:49:1a:64:a8:a7:21:a1:
93:3e:c9:5f:ca:06:26:be:15:c2:fe:96:75:81:c4:
8e:47:90:14:d9:8c:24:13:bc:a2:30:1f:74:e2:87:
99:8d:2b:40:3a:9e:f0:48:09:27:f7:86:22:e7:eb:
61:06:9a:71:25:d8:33:7d:5b:a3:51:9a:59:8a:0e:
3d:1e:df:e8:a0:56:bb:96:91:e6:1a:69:85:c4:08:
bb:dd:85:16:40:ec:32:27:94:af:c3:1f:de:b1:e0:
43:86:36:d1:63:5b:11:4d:69:53:a1:a1:a8:fc:c3:
03:a0:69:27:5b:1d:5e:9e:66:90:b3:1f:a6:be:c0:
a4:89:7c:df:2a:4c:5a:7f:ff:3f:db:14:da:46:0a:
05:84:47:ab:04:dc:c6:3e:32:32:66:86:06:46:3b:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:4B:AD:47:9B:10:2E:A8:A4:FA:F2:EE:EA:0B:49:A3:2C:34:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C961259CBDD711EF8FA1B482762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0b:b0:1e:05:ce:da:12:9e:a8:30:de:c8:f9:50:7a:4d:82:
f5:72:cc:f3:ab:45:e7:6b:63:c7:b1:66:46:14:0f:94:9d:79:
29:2c:d9:54:fd:6a:31:cb:f8:43:6d:ad:e4:cf:12:4a:94:2d:
49:96:9d:7e:3c:32:7b:73:f8:65:49:86:4b:7b:d1:43:cd:e6:
ee:5e:39:8f:15:de:03:3b:56:31:63:c1:9a:f0:c8:aa:55:ac:
4c:6f:0c:3f:cc:1e:2e:a5:57:d6:4c:9c:bd:db:c5:38:95:0c:
12:b8:d1:dc:8a:dd:0e:14:33:7c:b8:b2:9e:f8:5a:69:fb:6e:
ab:33:f8:74:6d:6c:be:fe:6c:25:eb:fe:b7:88:3d:0b:63:c1:
42:ee:61:c3:b3:56:8d:f4:9e:5a:69:98:1f:01:24:61:a5:9e:
25:d5:46:83:0d:45:17:52:31:a1:c1:c2:55:02:77:61:31:84:
81:9b:ec:61:8e:f0:d4:58:8b:d2:71:e7:0e:d2:65:1a:af:d0:
dd:b3:0a:dd:95:f7:ca:cd:f9:3b:0a:0f:7c:ef:78:3c:47:2b:
6d:4b:63:40:cc:4b:08:65:d4:a7:9d:b3:63:84:c9:5a:0b:c3:
58:0d:d1:70:e7:51:63:9e:b0:66:59:ad:a1:4c:e4:e8:2a:22:
36:0c:57:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDcwNjMzWhcNMjUwMTI0MDcwNjMzWjAYMRYw
FAYDVQQDEw02NzYzYzVmYy02ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/HBaXqZtBhEg9OWCtIGqE/2xSHlMrA2oGT3rQiqdk8FytiJUTfxW68/
4fi+9PsvhZ++VNa6ZKXOQWC8POp4OPPT3zEldxR5a7JklbUTV+w0c5X/0KTgG81x
YhBiGpxvZEkaZKinIaGTPslfygYmvhXC/pZ1gcSOR5AU2YwkE7yiMB904oeZjStA
Op7wSAkn94Yi5+thBppxJdgzfVujUZpZig49Ht/ooFa7lpHmGmmFxAi73YUWQOwy
J5Svwx/eseBDhjbRY1sRTWlToaGo/MMDoGknWx1enmaQsx+mvsCkiXzfKkxaf/8/
2xTaRgoFhEerBNzGPjIyZoYGRjvKsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIlz
S61HmxAuqKT68u7qC0mjLDQcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTYxMjU5Q0JERDcxMUVGOEZBMUI0ODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALca3MA0GCSqGSIb3DQEBCwUA
A4IBAQAjC7AeBc7aEp6oMN7I+VB6TYL1cszzq0Xna2PHsWZGFA+UnXkpLNlU/Wox
y/hDba3kzxJKlC1Jlp1+PDJ7c/hlSYZLe9FDzebuXjmPFd4DO1YxY8Ga8MiqVaxM
bww/zB4upVfWTJy928U4lQwSuNHcit0OFDN8uLKe+Fpp+26rM/h0bWy+/mwl6/63
iD0LY8FC7mHDs1aN9J5aaZgfASRhpZ4l1UaDDUUXUjGhwcJVAndhMYSBm+xhjvDU
WIvScecO0mUar9DdswrdlffKzfk7Cg9873g8RyttS2NAzEsIZdSnnbNjhMlaC8NY
DdFw51FjnrBmWa2hTOToKiI2DFcV
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:40 2025 by rpki-client