Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF8E9202F811EFBA5A9A1D017001B1.roa
File: CBEF8E9202F811EFBA5A9A1D017001B1.roa (raw, json)
Hash identifier: MXej9O0Hgq1HwTzh8eRsv1Z+oyALiGOSlCxMsZzCb30=
Subject key identifier: C0:CD:C7:7C:33:30:AE:B9:BA:5B:E7:CA:C7:0F:F3:55:93:60:5B:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8517
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF8E9202F811EFBA5A9A1D017001B1.roa
Signing time: Thu 25 Apr 2024 11:41:47 +0000
ROA not before: Thu 25 Apr 2024 11:41:43 +0000
ROA not after: Sun 05 May 2024 11:41:43 +0000
asID: 39600
IP address blocks: 45.196.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34071 (0x8517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:41:43 2024 GMT
Not After : May 5 11:41:43 2024 GMT
Subject: CN=662a417b-5985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:d3:b4:aa:5a:03:ea:00:70:50:68:8a:29:
01:a8:0d:65:24:9c:e8:c1:0f:7c:18:f6:8b:bd:84:
d7:e5:10:19:4b:8f:9e:ff:f2:90:28:c1:23:d3:e5:
15:2c:d1:fe:34:49:6d:41:2a:b1:f1:36:a9:bb:ef:
c5:63:3d:bb:7c:9e:8e:57:0b:51:c1:ed:f6:98:03:
bf:ea:58:ca:65:db:ab:17:f6:6a:ed:bc:23:6e:5e:
71:60:44:93:08:3b:4a:04:02:0c:8b:57:9d:fe:a7:
d5:cc:17:e8:d7:98:93:f6:c5:ca:e5:aa:23:c8:c2:
40:2c:0d:d7:5a:df:c2:cd:d5:14:46:20:e9:66:e2:
aa:7a:2e:69:ec:7e:27:f4:30:10:2a:2c:b5:af:b9:
91:78:12:c6:4e:06:8a:c2:87:4f:5b:b7:ec:13:92:
97:cc:23:4c:ec:10:17:70:ad:40:4c:da:61:51:de:
40:d1:a9:e9:b8:44:f0:63:6c:0d:1a:a2:11:5f:e6:
a4:58:20:f3:e4:1c:91:a6:9b:74:40:5e:0a:1b:97:
41:4a:8a:14:7c:bc:3a:c3:6c:7c:14:31:07:d5:6d:
84:56:5e:f9:d3:d0:48:c2:58:8d:f1:23:17:af:03:
a9:09:05:12:9b:dc:21:80:2a:80:c3:0f:ed:38:fd:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:C7:7C:33:30:AE:B9:BA:5B:E7:CA:C7:0F:F3:55:93:60:5B:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF8E9202F811EFBA5A9A1D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d0:b2:d7:14:89:64:1c:b6:c3:1f:8d:2b:86:71:6a:e8:e3:
15:00:74:f7:bd:55:05:8c:43:57:a8:7f:34:f0:87:e5:e2:23:
aa:61:3e:47:16:27:bb:bc:1e:db:4a:8c:b4:ea:18:5e:fb:26:
9e:91:f7:7d:be:4a:4a:8e:ba:18:3c:d3:cf:a4:3c:8c:6a:12:
9a:30:00:7c:20:90:38:e5:79:ff:29:05:c1:74:50:97:86:a3:
8b:59:b7:01:93:04:5f:d1:a3:a7:38:ae:d1:c8:a2:a3:97:92:
22:2c:ec:34:09:b9:00:66:22:bf:32:70:c0:91:e4:70:b2:2d:
9a:dd:25:24:38:35:7d:39:8a:de:1a:6c:b9:65:fc:fd:b6:95:
4d:cb:ab:83:4a:97:e3:28:f4:ad:18:17:47:d7:6a:90:65:ab:
42:84:1b:57:6a:f6:c9:5b:f9:d0:c7:24:7c:f6:e0:ef:01:46:
c4:56:15:f3:06:aa:f8:ab:f0:a4:6b:1e:1d:4d:e4:a8:7d:b1:
82:8b:63:11:2e:e0:f0:13:43:d0:1a:80:de:36:90:6d:01:59:
ad:7c:e2:7c:26:7c:70:cb:c5:01:03:fb:83:6f:45:cb:97:77:
d7:23:47:59:09:0e:23:54:97:a1:26:08:6b:7c:79:c4:0b:6c:
0b:11:8f:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIUXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTE0MTQzWhcNMjQwNTA1MTE0MTQzWjAYMRYw
FAYDVQQDEw02NjJhNDE3Yi01OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr0/TtKpaA+oAcFBoiikBqA1lJJzowQ98GPaLvYTX5RAZS4+e//KQKMEj
0+UVLNH+NEltQSqx8Tapu+/FYz27fJ6OVwtRwe32mAO/6ljKZdurF/Zq7bwjbl5x
YESTCDtKBAIMi1ed/qfVzBfo15iT9sXK5aojyMJALA3XWt/CzdUURiDpZuKqei5p
7H4n9DAQKiy1r7mReBLGTgaKwodPW7fsE5KXzCNM7BAXcK1ATNphUd5A0anpuETw
Y2wNGqIRX+akWCDz5ByRppt0QF4KG5dBSooUfLw6w2x8FDEH1W2EVl7509BIwliN
8SMXrwOpCQUSm9whgCqAww/tOP1TCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMDN
x3wzMK65ulvnyscP81WTYFvtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQkVGOEU5MjAyRjgxMUVGQkE1QTlBMUQwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcSMMA0GCSqGSIb3DQEBCwUA
A4IBAQCl0LLXFIlkHLbDH40rhnFq6OMVAHT3vVUFjENXqH808Ifl4iOqYT5HFie7
vB7bSoy06hhe+yaekfd9vkpKjroYPNPPpDyMahKaMAB8IJA45Xn/KQXBdFCXhqOL
WbcBkwRf0aOnOK7RyKKjl5IiLOw0CbkAZiK/MnDAkeRwsi2a3SUkODV9OYreGmy5
Zfz9tpVNy6uDSpfjKPStGBdH12qQZatChBtXavbJW/nQxyR89uDvAUbEVhXzBqr4
q/Ckax4dTeSofbGCi2MRLuDwE0PQGoDeNpBtAVmtfOJ8Jnxwy8UBA/uDb0XLl3fX
I0dZCQ4jVJehJghrfHnEC2wLEY+0
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org