Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE7AD48FCE911EFAB5AF5A8762E951A.roa
File: CCE7AD48FCE911EFAB5AF5A8762E951A.roa (raw, json)
Hash identifier: XcQ6NzAr6BPSVoXmUnV0K0LwHIJnhy++BYwCHwvnXn8=
Subject key identifier: 45:D1:6E:A7:9D:08:E2:02:EF:2B:7A:B0:AE:14:E9:71:E1:4B:3C:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE7AD48FCE911EFAB5AF5A8762E951A.roa
Signing time: Sun 09 Mar 2025 13:24:17 +0000
ROA not before: Sun 09 Mar 2025 13:24:12 +0000
ROA not after: Wed 19 Mar 2025 13:24:12 +0000
asID: 39600
IP address blocks: 45.195.152.0/22 maxlen: 24
45.195.156.0/22 maxlen: 24
45.196.128.0/22 maxlen: 24
45.196.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83079 (0x14487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 13:24:12 2025 GMT
Not After : Mar 19 13:24:12 2025 GMT
Subject: CN=67cd9681-930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:05:48:7b:b1:d2:60:33:23:48:aa:6f:31:
ad:3d:8a:f5:e6:f7:1b:cd:93:84:2f:f0:50:6c:9e:
01:4c:f7:67:08:fa:46:4b:8f:38:5d:26:01:41:55:
0f:57:0a:ed:e7:d7:d2:1a:52:34:4b:4b:8c:8b:68:
c0:2f:a2:de:71:9e:f2:a9:2f:45:5c:48:bc:e1:df:
09:67:5a:c6:3e:0d:18:f4:51:c8:06:72:7b:9a:97:
4d:0b:07:76:57:da:80:0a:b1:54:57:a4:d8:2e:2a:
65:32:93:3a:a9:3c:dc:e8:b5:6e:2d:d3:de:9e:38:
52:5e:c9:a3:8f:89:97:62:8d:f2:73:0f:5c:94:e9:
0f:91:a4:8b:e2:17:17:74:e4:35:3c:e1:d1:35:73:
3e:9f:ad:c4:21:51:84:f6:b6:fa:2b:3b:47:37:75:
6f:0e:f7:81:de:aa:50:33:ac:85:b0:10:c3:b7:c6:
5f:4e:e4:22:0e:5c:f7:0d:1a:1a:50:cf:69:f3:e5:
73:eb:d6:ab:d7:bf:a9:0e:5b:2c:6b:13:f8:44:ae:
76:7c:7e:af:f8:f8:92:da:9b:ae:5d:b8:c4:5a:a1:
d9:fb:22:e7:1a:67:47:28:3f:0c:9d:02:88:8a:37:
2e:cd:14:46:90:17:64:18:ea:d1:42:f0:82:1b:0e:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:6E:A7:9D:08:E2:02:EF:2B:7A:B0:AE:14:E9:71:E1:4B:3C:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE7AD48FCE911EFAB5AF5A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/21
45.196.128.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:2f:42:de:f9:28:6f:e8:68:6c:39:d4:6c:dc:50:39:06:4d:
7f:2e:d1:55:b7:df:ce:b1:b5:e9:50:d1:fb:bd:cd:63:81:c7:
64:a9:4a:d2:9e:aa:bf:b8:69:1e:6f:cc:38:af:84:bb:87:ae:
4b:e6:76:ea:f6:30:3d:b1:f0:54:98:18:1f:f0:50:0c:e8:ec:
34:4f:a0:c8:05:64:6b:b7:cd:15:af:ab:a0:b7:29:96:4d:42:
41:0c:c3:cd:1d:4e:54:58:98:50:22:9c:ac:36:04:5c:ab:f7:
f5:32:e0:42:01:eb:0e:8f:51:38:dd:b7:50:23:87:42:19:89:
63:ca:83:51:e2:d4:92:5b:28:67:5d:c9:b9:64:92:c5:02:1f:
83:57:a3:b7:ae:4e:f5:a0:8d:8d:05:fd:f5:df:0e:47:9e:95:
02:59:62:75:a3:fa:fc:42:ba:5f:41:9a:a0:8b:a0:18:9f:6c:
57:1b:5c:d9:3e:b0:52:cd:a0:3c:f8:14:56:29:18:bd:28:43:
87:26:33:94:28:5f:db:fa:0c:e7:81:ef:9c:9d:34:0d:97:86:
51:6f:df:0f:62:aa:c7:94:02:29:40:2f:ee:a6:20:ca:d7:08:
7e:c8:a7:e3:2c:d7:17:4b:c4:ba:9c:fb:1f:69:20:97:f4:20:
64:1c:75:38
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUSHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA5MTMyNDEyWhcNMjUwMzE5MTMyNDEyWjAYMRYw
FAYDVQQDEw02N2NkOTY4MS05MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv7YFSHux0mAzI0iqbzGtPYr15vcbzZOEL/BQbJ4BTPdnCPpGS484XSYB
QVUPVwrt59fSGlI0S0uMi2jAL6LecZ7yqS9FXEi84d8JZ1rGPg0Y9FHIBnJ7mpdN
Cwd2V9qACrFUV6TYLiplMpM6qTzc6LVuLdPenjhSXsmjj4mXYo3ycw9clOkPkaSL
4hcXdOQ1POHRNXM+n63EIVGE9rb6KztHN3VvDveB3qpQM6yFsBDDt8ZfTuQiDlz3
DRoaUM9p8+Vz69ar17+pDlssaxP4RK52fH6v+PiS2puuXbjEWqHZ+yLnGmdHKD8M
nQKIijcuzRRGkBdkGOrRQvCCGw5+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXR
bqedCOIC7yt6sK4U6XHhSzylMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0U3QUQ0OEZDRTkxMUVGQUI1QUY1QTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLcOYAwQDLcSAMA0GCSqGSIb3
DQEBCwUAA4IBAQA+L0Le+Shv6GhsOdRs3FA5Bk1/LtFVt9/OsbXpUNH7vc1jgcdk
qUrSnqq/uGkeb8w4r4S7h65L5nbq9jA9sfBUmBgf8FAM6Ow0T6DIBWRrt80Vr6ug
tymWTUJBDMPNHU5UWJhQIpysNgRcq/f1MuBCAesOj1E43bdQI4dCGYljyoNR4tSS
WyhnXcm5ZJLFAh+DV6O3rk71oI2NBf313w5HnpUCWWJ1o/r8QrpfQZqgi6AYn2xX
G1zZPrBSzaA8+BRWKRi9KEOHJjOUKF/b+gznge+cnTQNl4ZRb98PYqrHlAIpQC/u
piDK1wh+yKfjLNcXS8S6nPsfaSCX9CBkHHU4
-----END CERTIFICATE-----
Generated at Sat May 10 04:02:26 2025 by rpki-client