Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5A6BD0B92811EFA82DD790762E951A.roa
File: CD5A6BD0B92811EFA82DD790762E951A.roa (raw, json)
Hash identifier: 5sFPzhPtMbgqgeaqXM4X4qb1LiTl4srqNeept2r+eXM=
Subject key identifier: D4:A4:52:97:32:F4:B7:BA:22:0E:F5:54:2E:5F:B4:59:09:89:97:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E329
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5A6BD0B92811EFA82DD790762E951A.roa
Signing time: Fri 13 Dec 2024 08:03:57 +0000
ROA not before: Fri 13 Dec 2024 08:03:53 +0000
ROA not after: Sat 25 Jan 2025 08:03:53 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58153 (0xe329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:03:53 2024 GMT
Not After : Jan 25 08:03:53 2025 GMT
Subject: CN=675bea6d-f2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:fd:a4:5d:31:81:5a:8b:04:40:69:3f:6b:
63:d5:67:6e:df:ba:2d:bc:77:26:f0:3b:db:8f:f0:
77:28:26:f1:5f:72:25:a0:ba:69:5c:db:08:13:41:
9e:86:de:3c:f3:e6:cb:94:cb:40:a9:67:82:4d:a2:
a4:82:b3:d0:97:c9:5c:99:56:87:34:be:23:c8:26:
fb:b0:fa:3b:25:4f:79:bd:74:01:23:32:44:cf:8e:
2a:0b:6a:d0:63:c8:15:fc:46:8b:94:61:a1:52:88:
6b:39:bc:8e:09:d4:33:c7:5b:f9:6c:f5:d6:99:e7:
62:c6:ad:27:40:2b:41:b7:19:57:94:7d:b8:ce:29:
cf:67:b5:f6:2e:16:b8:b4:cd:c0:d8:3b:71:77:0c:
65:f3:2d:91:75:08:83:d7:bd:e4:e0:18:04:7d:11:
0d:9b:e8:f6:b1:1b:03:0f:93:d4:5e:d3:77:c0:06:
54:c2:41:e5:d7:6b:7a:6a:a3:d1:74:34:fd:9f:1a:
ad:d5:21:84:65:73:2a:b5:10:4d:ea:d8:3a:c9:05:
ce:be:df:80:c3:1a:03:d5:3c:58:3d:49:4f:ed:e9:
90:89:01:48:28:f2:6e:6d:dc:99:fa:1f:5d:1f:6f:
28:c8:ef:bd:d5:f1:75:fc:ba:75:53:a6:09:7e:77:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:52:97:32:F4:B7:BA:22:0E:F5:54:2E:5F:B4:59:09:89:97:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD5A6BD0B92811EFA82DD790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bd:68:de:fe:14:1a:f5:46:3a:9c:85:e1:71:e6:00:91:61:
da:c8:98:f7:9a:2f:29:41:f1:55:fd:b0:f0:ca:e2:1b:1b:0b:
e7:be:49:36:a5:7c:97:0e:ef:a7:f5:b1:db:06:b0:41:2d:ca:
27:94:f2:8d:65:81:01:77:66:48:a4:d3:b5:61:4d:fa:34:6e:
60:a8:53:e2:d4:6c:da:11:d6:4f:1d:35:4e:fa:ba:b3:24:40:
e5:4f:61:e1:70:39:25:44:1f:e6:88:e6:e2:52:fe:4d:62:b8:
dc:09:40:23:3b:01:d2:22:2e:08:bb:eb:b6:8e:fa:6b:39:13:
e1:c4:a7:6a:68:0a:ed:ce:a0:00:ce:7a:88:0d:bb:33:7a:19:
0e:0a:6d:e1:6a:87:a0:ed:74:56:0c:86:e4:d9:ed:64:a4:c9:
58:51:aa:ed:91:03:7f:99:fd:bf:55:05:e2:86:ff:98:bb:72:
3d:3a:57:fe:d8:85:76:17:bb:5c:8b:57:49:fb:1e:95:05:3e:
e0:c1:f7:a8:c7:62:57:d0:7d:e5:81:22:cd:e1:95:17:5e:8e:
56:2f:56:a6:87:49:6e:a5:03:92:26:3e:87:0c:a1:6c:5a:ec:
a3:e2:dc:79:82:12:f7:b9:d4:71:47:64:b0:f8:27:f2:ef:8f:
ce:7e:ed:8f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOMpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDgwMzUzWhcNMjUwMTI1MDgwMzUzWjAYMRYw
FAYDVQQDEw02NzViZWE2ZC1mMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWD9pF0xgVqLBEBpP2tj1Wdu37otvHcm8Dvbj/B3KCbxX3IloLppXNsI
E0Geht488+bLlMtAqWeCTaKkgrPQl8lcmVaHNL4jyCb7sPo7JU95vXQBIzJEz44q
C2rQY8gV/EaLlGGhUohrObyOCdQzx1v5bPXWmedixq0nQCtBtxlXlH24zinPZ7X2
Lha4tM3A2Dtxdwxl8y2RdQiD173k4BgEfRENm+j2sRsDD5PUXtN3wAZUwkHl12t6
aqPRdDT9nxqt1SGEZXMqtRBN6tg6yQXOvt+AwxoD1TxYPUlP7emQiQFIKPJubdyZ
+h9dH28oyO+91fF1/Lp1U6YJfnfP8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNSk
Upcy9Le6Ig71VC5ftFkJiZdLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDVBNkJEMEI5MjgxMUVGQTgyREQ3OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfRMA0GCSqGSIb3DQEBCwUA
A4IBAQBfvWje/hQa9UY6nIXhceYAkWHayJj3mi8pQfFV/bDwyuIbGwvnvkk2pXyX
Du+n9bHbBrBBLconlPKNZYEBd2ZIpNO1YU36NG5gqFPi1GzaEdZPHTVO+rqzJEDl
T2HhcDklRB/miObiUv5NYrjcCUAjOwHSIi4Iu+u2jvprORPhxKdqaArtzqAAznqI
DbszehkOCm3haoeg7XRWDIbk2e1kpMlYUartkQN/mf2/VQXihv+Yu3I9Olf+2IV2
F7tci1dJ+x6VBT7gwfeox2JX0H3lgSLN4ZUXXo5WL1amh0lupQOSJj6HDKFsWuyj
4tx5ghL3udRxR2Sw+Cfy74/Ofu2P
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:32 2025 by rpki-client