Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D179EC0ECAC111EFB1B25265762E951A.roa
File: D179EC0ECAC111EFB1B25265762E951A.roa (raw, json)
Hash identifier: 0EVUz7hfDNWjSgPfv8P31GGV6K6m3U5o6VUDqKCFyUk=
Subject key identifier: 4B:6A:81:E7:30:C0:24:66:5A:32:A3:62:16:38:69:07:F1:21:86:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D179EC0ECAC111EFB1B25265762E951A.roa
Signing time: Sat 04 Jan 2025 17:32:06 +0000
ROA not before: Sun 05 Jan 2025 17:32:03 +0000
ROA not after: Fri 17 Jan 2025 17:32:03 +0000
asID: 39600
IP address blocks: 45.197.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63266 (0xf722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:32:03 2025 GMT
Not After : Jan 17 17:32:03 2025 GMT
Subject: CN=67797096-934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:c3:d9:db:ba:a3:b6:81:82:2e:1e:a8:0b:
2f:f5:87:50:0e:1f:6d:7d:33:68:ed:58:36:ad:7c:
6b:90:dc:ed:1c:9f:79:86:25:05:6e:e8:86:db:e0:
d2:5b:ee:84:79:a7:f4:39:d9:e0:85:d9:36:29:11:
e1:53:f5:a5:04:be:01:de:f7:69:7d:f5:19:51:43:
14:ca:bb:3c:86:9f:e6:b8:73:8e:d6:ea:4a:01:a3:
2e:6e:30:c7:43:58:92:0b:83:b1:ca:da:9a:91:c0:
1e:8f:45:ce:f3:b7:be:43:79:0d:2a:ad:d4:f5:ee:
0a:c3:d6:8b:29:24:f7:f0:9f:da:06:39:e9:b6:f8:
00:2e:0d:da:d9:0b:3a:1b:36:eb:c0:93:dc:5b:06:
5c:70:0a:2c:44:79:f3:ab:41:a1:39:0d:da:81:9b:
5f:1c:0d:17:ed:2a:16:cb:51:6d:96:bd:01:34:ae:
a1:01:1f:18:b4:a6:34:24:20:3f:27:c9:df:6b:2f:
98:13:4b:1f:98:3f:7a:6c:29:b1:02:98:69:37:43:
aa:ba:b6:fa:ed:30:88:14:25:21:61:56:9d:57:e1:
7c:78:a7:3b:e7:24:29:50:50:66:11:d1:2c:ec:c0:
82:7f:67:a7:f8:0b:2c:4a:21:a6:38:03:f9:cb:32:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:81:E7:30:C0:24:66:5A:32:A3:62:16:38:69:07:F1:21:86:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D179EC0ECAC111EFB1B25265762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.28.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f7:90:10:cf:b5:05:2f:84:0d:6d:54:81:bd:bd:de:3b:b8:
70:2b:2d:ff:06:c5:9f:28:34:c4:50:59:16:cf:48:c7:83:03:
34:43:a1:68:c8:c6:26:ff:20:fb:b2:af:05:be:6a:04:22:b4:
a0:34:e9:b7:76:4d:e9:23:c4:ff:7e:52:91:6e:0b:b9:84:51:
6b:12:fb:9c:dc:fd:5a:3e:5b:f0:c4:b0:6c:09:b6:e9:93:62:
cc:62:89:d1:7e:cf:af:bb:09:90:1e:b0:27:37:ab:21:3e:1a:
a3:eb:6d:ee:7a:7b:a5:0c:13:73:61:fa:e2:74:e7:c8:90:47:
9e:42:14:37:52:34:68:1a:dd:6b:10:31:6d:a6:cd:1b:ec:58:
14:b1:28:1e:56:0c:fc:55:c8:01:e9:f1:56:55:b1:b5:82:f7:
3d:ab:a2:b8:3e:89:8b:39:08:21:6e:7a:53:57:60:47:23:5d:
d1:c5:54:0c:aa:7b:28:a5:cd:9d:1b:0c:79:f3:bd:cc:7e:8e:
b3:f0:79:22:6c:f2:52:25:e1:f1:b8:38:61:84:4c:2c:21:f9:
a9:d0:35:94:a0:d7:94:8f:d7:1b:fe:83:36:e8:a2:58:43:35:
79:ab:07:6b:d3:72:7e:25:8d:0d:82:8b:d7:32:c2:2b:90:1c:
ce:31:76:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPciMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA1MTczMjAzWhcNMjUwMTE3MTczMjAzWjAYMRYw
FAYDVQQDEw02Nzc5NzA5Ni05MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApcDD2du6o7aBgi4eqAsv9YdQDh9tfTNo7Vg2rXxrkNztHJ95hiUFbuiG
2+DSW+6Eeaf0Odnghdk2KRHhU/WlBL4B3vdpffUZUUMUyrs8hp/muHOO1upKAaMu
bjDHQ1iSC4OxytqakcAej0XO87e+Q3kNKq3U9e4Kw9aLKST38J/aBjnptvgALg3a
2Qs6GzbrwJPcWwZccAosRHnzq0GhOQ3agZtfHA0X7SoWy1Ftlr0BNK6hAR8YtKY0
JCA/J8nfay+YE0sfmD96bCmxAphpN0Oqurb67TCIFCUhYVadV+F8eKc75yQpUFBm
EdEs7MCCf2en+AssSiGmOAP5yzJN/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEtq
gecwwCRmWjKjYhY4aQfxIYadMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTc5RUMwRUNBQzExMUVGQjFCMjUyNjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcUcMA0GCSqGSIb3DQEBCwUA
A4IBAQBh95AQz7UFL4QNbVSBvb3eO7hwKy3/BsWfKDTEUFkWz0jHgwM0Q6FoyMYm
/yD7sq8FvmoEIrSgNOm3dk3pI8T/flKRbgu5hFFrEvuc3P1aPlvwxLBsCbbpk2LM
YonRfs+vuwmQHrAnN6shPhqj623uenulDBNzYfridOfIkEeeQhQ3UjRoGt1rEDFt
ps0b7FgUsSgeVgz8VcgB6fFWVbG1gvc9q6K4PomLOQghbnpTV2BHI13RxVQMqnso
pc2dGwx5873Mfo6z8HkibPJSJeHxuDhhhEwsIfmp0DWUoNeUj9cb/oM26KJYQzV5
qwdr03J+JY0NgovXMsIrkBzOMXaU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:08 2025 by rpki-client