Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAF50A0DCB11EFAEFBFC50017001B1.roa
File: C9DAF50A0DCB11EFAEFBFC50017001B1.roa (raw, json)
Hash identifier: +i3D1YtCZ7c7aeR7i3r7zr7pbjJCcx/U/1COGK9lDVQ=
Subject key identifier: 19:43:17:A2:C3:B0:17:DE:6F:86:61:7D:DF:B0:DC:0E:C9:C2:96:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8903
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAF50A0DCB11EFAEFBFC50017001B1.roa
Signing time: Thu 09 May 2024 06:17:19 +0000
ROA not before: Thu 09 May 2024 06:17:15 +0000
ROA not after: Wed 29 May 2024 06:17:15 +0000
asID: 141883
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35075 (0x8903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:17:15 2024 GMT
Not After : May 29 06:17:15 2024 GMT
Subject: CN=663c6a6f-729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:eb:9f:de:97:dd:32:67:d1:61:22:24:7c:
96:33:af:5d:ee:66:ad:9e:b5:06:29:5a:e0:99:e5:
93:2e:5f:a1:00:98:1e:46:99:61:8c:3f:97:ce:40:
3b:b8:18:60:43:cf:d1:09:bf:09:a1:75:a0:ff:37:
6b:38:5f:26:80:db:8c:37:00:c8:bb:39:7c:e0:5c:
39:6c:4a:d4:89:cf:ba:d5:6a:3c:a1:fb:34:53:b0:
57:90:00:cf:8b:5b:74:44:d6:05:0b:d9:bc:7f:db:
7a:fa:79:df:5f:e3:7e:94:d5:ac:39:5a:fa:e7:16:
9e:5f:68:b9:15:77:76:05:83:66:c1:5a:f2:7b:ee:
4c:c2:4b:ab:a6:6b:48:f3:f2:3e:e9:a7:3a:ad:1c:
5d:5d:f2:64:91:ae:d8:b3:1d:dc:ce:72:21:3e:67:
ef:b4:9f:d9:37:ca:47:cf:20:99:fe:0e:ac:19:f1:
ee:64:4c:3a:5a:fb:84:8f:9a:3f:04:23:7e:6f:64:
43:e4:58:9a:09:28:eb:07:47:55:4c:17:fb:96:70:
8d:e7:f6:9e:93:81:c8:4e:86:20:eb:6e:c4:49:90:
49:d3:39:3a:01:6d:92:e8:20:1d:cd:39:a4:ee:25:
40:c4:95:bf:77:67:f6:3e:66:80:ed:e4:25:88:ad:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:43:17:A2:C3:B0:17:DE:6F:86:61:7D:DF:B0:DC:0E:C9:C2:96:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9DAF50A0DCB11EFAEFBFC50017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
03:63:fb:71:12:b1:95:90:b1:da:11:a8:8b:07:1e:5c:6f:64:
4c:40:ad:da:d0:2e:a6:e2:dd:d1:f8:e9:5d:ec:a5:05:c0:92:
26:4b:f4:cd:d8:7a:1b:0d:89:c0:9d:46:a9:45:c4:2f:2c:6a:
30:ca:ab:2c:61:66:1d:3e:69:b3:5b:0a:97:6a:65:12:b6:7a:
e1:8f:a3:12:7f:8c:e6:e6:84:e9:20:79:11:fd:52:e9:7f:4c:
74:37:66:81:3f:56:16:a3:8a:5d:71:db:3f:e7:eb:f7:f2:bd:
e1:c0:a9:9e:18:07:fc:6f:d0:4a:58:15:b2:ff:43:f7:0c:13:
f4:4d:00:a5:f1:36:9e:80:fa:95:17:2d:1e:79:68:a6:4d:53:
e4:76:cc:22:ac:8f:0a:e1:1f:1f:74:f2:fc:1b:4b:3c:b9:d5:
e0:fd:c6:36:89:14:dc:75:61:94:6b:40:63:54:01:82:08:93:
6c:13:27:cc:38:e4:a0:51:b8:92:d1:65:34:24:f3:94:35:41:
ac:69:8d:32:e8:39:97:07:6c:32:11:60:29:fb:2f:dd:b0:a4:
e0:30:05:f9:64:9b:96:57:f3:8d:a8:ab:b9:08:ff:3c:c1:1a:
9c:1c:ad:67:58:1d:f8:aa:b9:c3:a5:54:8e:64:80:41:2c:3a:
e7:f2:3e:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIkDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTA5MDYxNzE1WhcNMjQwNTI5MDYxNzE1WjAYMRYw
FAYDVQQDEw02NjNjNmE2Zi03MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlTvrn96X3TJn0WEiJHyWM69d7matnrUGKVrgmeWTLl+hAJgeRplhjD+X
zkA7uBhgQ8/RCb8JoXWg/zdrOF8mgNuMNwDIuzl84Fw5bErUic+61Wo8ofs0U7BX
kADPi1t0RNYFC9m8f9t6+nnfX+N+lNWsOVr65xaeX2i5FXd2BYNmwVrye+5Mwkur
pmtI8/I+6ac6rRxdXfJkka7Ysx3cznIhPmfvtJ/ZN8pHzyCZ/g6sGfHuZEw6WvuE
j5o/BCN+b2RD5FiaCSjrB0dVTBf7lnCN5/aek4HIToYg627ESZBJ0zk6AW2S6CAd
zTmk7iVAxJW/d2f2PmaA7eQliK0EawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBlD
F6LDsBfeb4Zhfd+w3A7JwpbZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOURBRjUwQTBEQ0IxMUVGQUVGQkZDNTAwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcwAMA0GCSqGSIb3DQEBCwUA
A4IBAQADY/txErGVkLHaEaiLBx5cb2RMQK3a0C6m4t3R+Old7KUFwJImS/TN2Hob
DYnAnUapRcQvLGowyqssYWYdPmmzWwqXamUStnrhj6MSf4zm5oTpIHkR/VLpf0x0
N2aBP1YWo4pdcds/5+v38r3hwKmeGAf8b9BKWBWy/0P3DBP0TQCl8TaegPqVFy0e
eWimTVPkdswirI8K4R8fdPL8G0s8udXg/cY2iRTcdWGUa0BjVAGCCJNsEyfMOOSg
UbiS0WU0JPOUNUGsaY0y6DmXB2wyEWAp+y/dsKTgMAX5ZJuWV/ONqKu5CP88wRqc
HK1nWB34qrnDpVSOZIBBLDrn8j47
-----END CERTIFICATE-----
Generated at Wed May 29 12:51:24 2024 by rpki-client on console-ams.rpki-client.org