Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9AE3504F47611EFA44DBF43762E951A.roa
File: D9AE3504F47611EFA44DBF43762E951A.roa (raw, json)
Hash identifier: fJZ36jI/AHqk33oWc+k7+Q/1d+cOeh4jYkeQbMkz7QM=
Subject key identifier: 80:3B:E3:2B:67:4C:85:34:58:BD:D1:89:ED:ED:FD:C5:AC:B7:86:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9AE3504F47611EFA44DBF43762E951A.roa
Signing time: Wed 26 Feb 2025 19:21:17 +0000
ROA not before: Wed 26 Feb 2025 19:21:13 +0000
ROA not after: Sun 23 Mar 2025 19:21:13 +0000
asID: 62240
IP address blocks: 45.192.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79610 (0x136fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 19:21:13 2025 GMT
Not After : Mar 23 19:21:13 2025 GMT
Subject: CN=67bf69ad-57a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:58:5d:0c:1c:71:c2:8d:82:f6:1f:9a:d4:
39:b2:95:3e:4f:60:cd:52:aa:30:9a:67:90:31:16:
a6:7e:25:5d:63:ce:72:e1:52:ce:06:66:1a:9d:a9:
dd:da:d9:0b:bf:fe:cc:36:b7:6b:93:8d:6e:5e:ad:
d7:d3:02:61:0d:d8:1f:d8:fc:79:9b:d2:51:d4:5d:
61:c5:1a:2b:9c:de:82:10:07:07:1f:29:f1:80:ad:
80:57:5f:3e:a0:8b:aa:59:24:30:a2:06:9f:89:9c:
5f:02:67:ad:a1:03:16:50:48:1b:ea:64:3a:04:46:
14:4e:41:61:30:33:91:b5:92:cf:f1:f7:93:9d:6a:
91:88:4a:5a:76:50:cb:d9:25:30:be:03:75:41:63:
66:71:45:83:1f:bc:9d:90:42:ed:ce:0f:5f:70:fa:
87:a6:2d:82:43:1f:05:50:3f:62:2e:84:e5:e2:91:
a0:9e:dd:35:37:27:88:ad:fa:7f:6b:d9:e3:ea:9d:
f6:59:3a:27:a4:3b:a9:0e:92:97:03:ee:da:92:2a:
0b:57:89:49:19:4a:d6:a9:92:df:15:e8:b3:8f:c2:
ad:f2:95:f2:17:0b:40:22:3a:ef:73:1d:f1:31:9a:
04:ee:7f:93:fc:66:9c:22:c1:af:fd:8b:69:17:e2:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:E3:2B:67:4C:85:34:58:BD:D1:89:ED:ED:FD:C5:AC:B7:86:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9AE3504F47611EFA44DBF43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:99:e0:3a:ed:5b:d9:32:5b:3d:5c:a3:c4:b1:78:93:2a:4a:
b0:94:6d:71:b7:9b:5b:ec:02:d3:68:9d:c3:56:9c:b3:65:ff:
58:7c:42:61:ec:ef:1d:8a:81:44:ac:7b:4c:77:f0:28:62:98:
8a:be:e6:80:12:02:c2:35:94:08:8a:4e:d0:e2:88:8d:5c:55:
ff:d5:eb:41:6d:e0:cb:fa:93:9b:82:84:92:da:22:bb:4c:02:
c5:e6:23:54:d0:fb:bc:83:9c:69:83:70:2d:d2:7a:b8:e2:14:
08:23:8a:9d:19:89:dd:47:b4:af:37:53:b7:eb:a8:2a:a7:6f:
ce:64:f9:cb:fe:5e:45:b9:ae:b3:72:ba:bc:ea:90:97:42:f9:
3c:f2:1d:ea:ae:c0:eb:4f:1a:f0:96:cc:00:ba:7b:5f:1f:6e:
31:1a:77:52:e4:87:06:8b:36:ab:77:6f:0b:55:c0:94:ef:31:
a4:52:5d:8a:05:d4:d8:af:d7:7f:c3:c0:14:82:df:80:9c:3b:
cf:9c:e5:56:d0:96:47:cf:02:d5:65:af:d1:ae:7d:08:a5:35:
05:d1:f5:29:7b:fc:56:5d:61:11:66:2d:79:6e:38:92:ee:2d:
bd:d0:00:27:2f:f9:b2:7a:64:ce:22:23:1b:b1:9c:55:44:fb:
2c:41:28:a7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATb6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTkyMTEzWhcNMjUwMzIzMTkyMTEzWjAYMRYw
FAYDVQQDEw02N2JmNjlhZC01N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA37tYXQwcccKNgvYfmtQ5spU+T2DNUqowmmeQMRamfiVdY85y4VLOBmYa
nand2tkLv/7MNrdrk41uXq3X0wJhDdgf2Px5m9JR1F1hxRornN6CEAcHHynxgK2A
V18+oIuqWSQwogafiZxfAmetoQMWUEgb6mQ6BEYUTkFhMDORtZLP8feTnWqRiEpa
dlDL2SUwvgN1QWNmcUWDH7ydkELtzg9fcPqHpi2CQx8FUD9iLoTl4pGgnt01NyeI
rfp/a9nj6p32WTonpDupDpKXA+7akioLV4lJGUrWqZLfFeizj8Kt8pXyFwtAIjrv
cx3xMZoE7n+T/GacIsGv/YtpF+I+OQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIA7
4ytnTIU0WL3Rie3t/cWst4bfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOUFFMzUwNEY0NzYxMUVGQTQ0REJGNDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAmMA0GCSqGSIb3DQEBCwUA
A4IBAQBcmeA67VvZMls9XKPEsXiTKkqwlG1xt5tb7ALTaJ3DVpyzZf9YfEJh7O8d
ioFErHtMd/AoYpiKvuaAEgLCNZQIik7Q4oiNXFX/1etBbeDL+pObgoSS2iK7TALF
5iNU0Pu8g5xpg3At0nq44hQII4qdGYndR7SvN1O366gqp2/OZPnL/l5Fua6zcrq8
6pCXQvk88h3qrsDrTxrwlswAuntfH24xGndS5IcGizard28LVcCU7zGkUl2KBdTY
r9d/w8AUgt+AnDvPnOVW0JZHzwLVZa/Rrn0IpTUF0fUpe/xWXWERZi15bjiS7i29
0AAnL/myemTOIiMbsZxVRPssQSin
-----END CERTIFICATE-----
Generated at Sat May 10 04:51:40 2025 by rpki-client