Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D7DA7CC05511EF847656AA762E951A.roa
File: D8D7DA7CC05511EF847656AA762E951A.roa (raw, json)
Hash identifier: IAFRDgyeOqs8BFJjbJUqEsVQHRqKmlHMTqxDDaiDcGo=
Subject key identifier: 66:9F:E7:3C:3E:6A:53:B9:C5:41:F7:E9:A8:37:8B:D8:7B:D4:15:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D7DA7CC05511EF847656AA762E951A.roa
Signing time: Sun 22 Dec 2024 11:14:01 +0000
ROA not before: Sun 22 Dec 2024 11:13:58 +0000
ROA not after: Sun 26 Jan 2025 11:13:58 +0000
asID: 214690
IP address blocks: 45.198.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59359 (0xe7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 22 11:13:58 2024 GMT
Not After : Jan 26 11:13:58 2025 GMT
Subject: CN=6767f479-3038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:c2:a2:3b:50:c0:45:17:54:df:32:0b:c8:
95:47:5c:a5:15:06:a5:84:1f:3a:f5:f7:67:e9:5e:
26:9f:3f:d8:40:ed:b0:37:f7:c2:57:6e:21:41:0c:
e9:ca:aa:b0:a3:68:92:19:4e:1d:c1:3d:7d:b3:e5:
bf:bf:8c:7d:07:ad:a8:9f:97:41:81:1f:c5:bf:9f:
8d:0e:cd:f9:11:94:dc:9a:5f:7b:3a:22:a7:d2:4f:
3c:a2:86:49:ad:d4:d6:d0:a1:7c:2e:6c:d2:ee:b8:
bb:83:7c:66:b8:49:11:26:6c:38:c6:43:99:7f:0e:
81:7f:89:de:74:ac:84:7e:5d:91:7c:84:7c:c8:e2:
9f:5f:4c:8b:ab:7a:fd:56:19:58:c2:77:97:da:7f:
57:85:04:13:d2:40:fa:3a:0b:d5:3b:9e:15:33:1c:
78:75:de:0e:e7:44:41:f2:b1:14:49:41:83:1b:aa:
f5:2f:18:84:94:99:a5:27:34:d8:ee:66:86:46:4e:
a6:42:f7:6e:40:83:99:03:58:e6:0d:cb:89:5d:75:
09:b5:18:07:b0:a6:1d:2f:22:ef:55:fa:79:5e:11:
55:ec:08:ea:f5:8f:96:19:eb:1c:88:d6:d7:39:2c:
69:b4:c1:2b:26:e7:f4:ff:ef:12:f8:4e:b2:da:64:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:E7:3C:3E:6A:53:B9:C5:41:F7:E9:A8:37:8B:D8:7B:D4:15:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D7DA7CC05511EF847656AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1c:ae:2c:a0:e0:af:5b:f5:ba:da:4f:1e:44:e0:9a:c2:b9:
5e:88:64:14:b1:13:0d:0a:18:b8:71:75:9c:d5:25:6c:26:36:
e7:ff:6e:14:a5:23:6a:b1:26:d7:c6:34:a1:de:c0:68:6d:df:
05:0c:88:17:ae:89:fa:62:67:71:39:1e:01:36:04:09:d9:6d:
bc:f4:e1:8d:bc:33:0e:62:fc:97:e0:d7:a3:b5:4a:ee:53:96:
3d:37:d5:f7:18:f3:21:70:32:7d:d2:80:c7:06:ec:e3:35:3e:
5a:4f:2b:ab:87:30:30:e0:5a:5d:58:26:5c:d7:e3:03:72:ed:
bc:aa:e2:63:8b:0a:57:8d:dd:17:bb:5f:f2:20:1f:11:ac:6d:
d6:d8:bc:f0:8a:81:15:c0:d6:20:48:01:9a:d9:2c:b8:15:3e:
85:75:05:c4:6d:1b:b3:75:2f:d5:9e:8b:a3:46:23:15:db:c9:
60:08:af:d0:46:1b:2d:43:11:71:c9:74:d7:84:19:7c:5b:13:
b0:56:53:46:ae:2f:1b:e4:e0:de:52:d6:ad:89:52:2d:c2:eb:
e8:b5:63:bf:5a:64:b0:9d:2f:2b:d3:37:6c:21:04:fb:6a:d3:
e6:9f:3c:84:4e:e1:92:17:7a:39:a8:3c:e0:af:0c:ef:fa:74:
de:a8:1b:c8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOffMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIyMTExMzU4WhcNMjUwMTI2MTExMzU4WjAYMRYw
FAYDVQQDEw02NzY3ZjQ3OS0zMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyN3CojtQwEUXVN8yC8iVR1ylFQalhB869fdn6V4mnz/YQO2wN/fCV24h
QQzpyqqwo2iSGU4dwT19s+W/v4x9B62on5dBgR/Fv5+NDs35EZTcml97OiKn0k88
ooZJrdTW0KF8LmzS7ri7g3xmuEkRJmw4xkOZfw6Bf4nedKyEfl2RfIR8yOKfX0yL
q3r9VhlYwneX2n9XhQQT0kD6OgvVO54VMxx4dd4O50RB8rEUSUGDG6r1LxiElJml
JzTY7maGRk6mQvduQIOZA1jmDcuJXXUJtRgHsKYdLyLvVfp5XhFV7Ajq9Y+WGesc
iNbXOSxptMErJuf0/+8S+E6y2mS55wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGaf
5zw+alO5xUH36ag3i9h71BW6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOEQ3REE3Q0MwNTUxMUVGODQ3NjU2QUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcYEMA0GCSqGSIb3DQEBCwUA
A4IBAQCfHK4soOCvW/W62k8eROCawrleiGQUsRMNChi4cXWc1SVsJjbn/24UpSNq
sSbXxjSh3sBobd8FDIgXron6YmdxOR4BNgQJ2W289OGNvDMOYvyX4NejtUruU5Y9
N9X3GPMhcDJ90oDHBuzjNT5aTyurhzAw4FpdWCZc1+MDcu28quJjiwpXjd0Xu1/y
IB8RrG3W2LzwioEVwNYgSAGa2Sy4FT6FdQXEbRuzdS/VnoujRiMV28lgCK/QRhst
QxFxyXTXhBl8WxOwVlNGri8b5ODeUtatiVItwuvotWO/WmSwnS8r0zdsIQT7atPm
nzyETuGSF3o5qDzgrwzv+nTeqBvI
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:05 2025 by rpki-client