Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2367FCF47111EF8405B4A0762E951A.roa
File: DF2367FCF47111EF8405B4A0762E951A.roa (raw, json)
Hash identifier: /rnRm5XmTdFUygszQybe1Yav/SmghAs9gtESA7gLZ2Y=
Subject key identifier: 20:71:23:07:1F:6C:E3:AD:97:C5:03:00:F7:82:BC:90:66:CA:C8:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013696
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2367FCF47111EF8405B4A0762E951A.roa
Signing time: Wed 26 Feb 2025 18:45:38 +0000
ROA not before: Wed 26 Feb 2025 18:45:35 +0000
ROA not after: Sun 23 Mar 2025 18:45:35 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79510 (0x13696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 18:45:35 2025 GMT
Not After : Mar 23 18:45:35 2025 GMT
Subject: CN=67bf6152-7f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:66:39:8b:04:be:d2:17:23:a9:d3:31:d3:
c7:1e:95:5e:c6:ea:95:95:8a:48:66:ff:7d:6c:65:
77:70:2c:60:32:7a:4c:0e:2e:29:d6:ec:b8:7d:47:
13:91:e5:89:9a:a1:40:40:0e:c8:54:75:9a:34:e8:
38:4e:75:69:3a:8c:bb:5a:0c:72:c0:9e:cc:33:fb:
bd:e4:9a:fb:09:6f:f1:18:45:19:35:49:9a:40:16:
94:be:fe:6d:d1:58:e4:c6:24:79:96:82:e0:cb:f1:
1f:51:a0:45:4b:11:df:55:9b:f9:1e:cd:d6:f1:ae:
7a:87:86:1f:21:8e:81:c1:ae:aa:26:8f:72:96:0b:
45:79:02:c6:5d:b8:ea:db:d3:8c:fa:77:b1:12:96:
aa:d3:9b:35:49:e1:d8:76:7f:05:dc:68:e7:e7:65:
78:89:5a:b2:1a:f9:7d:f0:c0:a6:4e:a4:8b:01:80:
eb:46:55:84:cb:4e:1e:e0:31:15:4a:67:26:38:50:
08:09:29:ca:59:a8:77:a2:2a:45:73:71:90:6e:d4:
a3:67:62:41:c8:78:61:4d:b3:e0:74:cd:ed:ae:8b:
ec:6f:60:05:24:80:72:46:ba:3e:31:0b:fd:2d:a7:
2c:0b:cb:0d:3b:71:ef:b2:88:34:b4:aa:f7:60:13:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:23:07:1F:6C:E3:AD:97:C5:03:00:F7:82:BC:90:66:CA:C8:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2367FCF47111EF8405B4A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/24
Signature Algorithm: sha256WithRSAEncryption
41:53:f5:74:dd:b7:bc:01:68:09:e7:dc:7f:95:23:82:ca:74:
cf:02:64:82:4f:9e:71:f8:76:ac:e7:36:4b:33:41:2b:3a:3f:
9f:c3:8b:2b:78:8f:cd:75:1d:b2:1f:6a:ed:4b:14:16:54:fc:
49:d0:b6:bd:23:00:38:e9:38:75:48:33:77:1a:d3:34:0b:90:
02:b2:26:8a:12:3d:8d:2d:9b:7d:f6:22:bd:6b:eb:1f:0e:d7:
09:fe:48:66:1c:73:31:6d:01:3a:46:76:ee:bd:fa:25:4e:db:
92:e0:a0:82:6b:cb:9c:60:8b:ad:18:68:e2:0a:8e:46:d1:4c:
35:5f:ac:3c:de:3c:24:c7:a4:66:ee:9e:3a:65:5a:81:71:4f:
7f:a7:ae:b8:d3:0b:cb:e3:73:e3:5f:8d:0e:33:4a:cc:0b:7a:
1b:d7:4f:a5:c6:7a:2a:ee:af:1e:e1:1a:1c:48:22:98:fa:96:
a4:f3:28:a1:02:97:8c:d8:0c:2b:e2:92:e7:84:9a:81:03:44:
c9:61:00:40:35:88:25:fb:81:14:c8:b8:0e:4c:dc:54:2d:47:
84:79:83:5c:c4:bf:83:7d:db:8b:3c:25:6d:74:22:45:99:a1:
bf:6a:22:f6:bb:29:60:6c:14:3f:4f:fa:f6:6d:54:45:39:65:
a7:83:8f:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATaWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTg0NTM1WhcNMjUwMzIzMTg0NTM1WjAYMRYw
FAYDVQQDEw02N2JmNjE1Mi03ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAos1mOYsEvtIXI6nTMdPHHpVexuqVlYpIZv99bGV3cCxgMnpMDi4p1uy4
fUcTkeWJmqFAQA7IVHWaNOg4TnVpOoy7WgxywJ7MM/u95Jr7CW/xGEUZNUmaQBaU
vv5t0VjkxiR5loLgy/EfUaBFSxHfVZv5Hs3W8a56h4YfIY6Bwa6qJo9ylgtFeQLG
Xbjq29OM+nexEpaq05s1SeHYdn8F3Gjn52V4iVqyGvl98MCmTqSLAYDrRlWEy04e
4DEVSmcmOFAICSnKWah3oipFc3GQbtSjZ2JByHhhTbPgdM3trovsb2AFJIByRro+
MQv9LacsC8sNO3Hvsog0tKr3YBNbVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCBx
IwcfbOOtl8UDAPeCvJBmysh8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERjIzNjdGQ0Y0NzExMUVGODQwNUI0QTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAgMA0GCSqGSIb3DQEBCwUA
A4IBAQBBU/V03be8AWgJ59x/lSOCynTPAmSCT55x+Has5zZLM0ErOj+fw4sreI/N
dR2yH2rtSxQWVPxJ0La9IwA46Th1SDN3GtM0C5ACsiaKEj2NLZt99iK9a+sfDtcJ
/khmHHMxbQE6RnbuvfolTtuS4KCCa8ucYIutGGjiCo5G0Uw1X6w83jwkx6Rm7p46
ZVqBcU9/p6640wvL43PjX40OM0rMC3ob10+lxnoq7q8e4RocSCKY+pak8yihApeM
2Awr4pLnhJqBA0TJYQBANYgl+4EUyLgOTNxULUeEeYNcxL+DfduLPCVtdCJFmaG/
aiL2uylgbBQ/T/r2bVRFOWWng48h
-----END CERTIFICATE-----
Generated at Sat May 10 04:53:26 2025 by rpki-client