Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2996D404A5911EF88ABDE63762E951A.roa
File: E2996D404A5911EF88ABDE63762E951A.roa (raw, json)
Hash identifier: Lb/qwS3b0CsEzJP0OKGnBWX36ByWXradeWY4e37c6yc=
Subject key identifier: 0F:96:5B:5C:FA:BA:15:27:28:75:F6:E3:DF:7C:9D:49:83:0A:AA:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2996D404A5911EF88ABDE63762E951A.roa
Signing time: Thu 25 Jul 2024 07:45:39 +0000
ROA not before: Thu 25 Jul 2024 07:45:35 +0000
ROA not after: Sat 03 Aug 2024 07:45:35 +0000
asID: 174
IP address blocks: 45.196.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40889 (0x9fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:45:35 2024 GMT
Not After : Aug 3 07:45:35 2024 GMT
Subject: CN=66a202a2-2772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:88:1c:76:bc:6e:f5:b0:58:9e:32:92:4e:
1c:6e:bb:6a:c8:e6:6b:16:07:db:cb:87:6f:e4:15:
27:0b:99:05:d5:14:d1:3f:1a:02:30:2e:b4:c1:fe:
8e:39:9f:55:bd:48:8d:a7:d0:84:8f:9d:47:85:ac:
65:b9:18:18:0c:4c:49:28:47:f7:69:8e:4b:69:af:
95:1c:58:11:99:42:77:7b:67:06:12:af:15:ca:97:
a3:ca:fe:0f:75:35:c2:28:83:69:54:f3:68:3e:80:
42:7c:81:e5:9d:1f:01:f0:f9:ea:e6:96:04:73:c0:
fd:53:54:0d:62:54:6e:54:c1:e2:cd:94:96:f8:b3:
49:53:74:ba:15:a0:25:d2:30:fb:e7:65:8b:a6:3c:
bc:26:2c:91:58:4c:6c:3e:88:65:a7:fc:0f:a6:7a:
81:55:51:c3:e0:72:5f:37:e3:fc:9c:1e:ab:98:72:
6b:35:5b:cc:5c:ec:f0:be:32:8d:77:f4:9e:6c:80:
86:50:5e:c2:8c:5e:28:43:ab:18:08:2f:d6:37:b1:
4d:d8:8f:7a:89:9e:9d:8c:41:c3:69:dc:27:be:6c:
c2:0f:8c:ec:80:02:24:f3:bd:e1:b2:2c:cc:2e:e8:
b1:5e:67:87:55:c1:67:29:4b:b3:e3:ad:d9:ff:57:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:5B:5C:FA:BA:15:27:28:75:F6:E3:DF:7C:9D:49:83:0A:AA:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2996D404A5911EF88ABDE63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c5:a9:ac:43:ed:4d:12:65:4e:68:62:34:a9:f5:9d:32:2f:
42:36:41:56:9c:61:86:87:82:fb:01:8e:4b:08:b4:71:ea:cc:
20:aa:cd:fe:ea:1a:02:94:d4:b6:41:7f:05:a8:b4:aa:f7:aa:
46:b6:e6:5e:94:13:24:43:30:a6:99:b1:16:01:78:43:99:49:
1d:cd:fa:51:fc:4d:36:d4:f8:08:95:62:96:d9:e8:84:81:93:
f8:bc:3f:23:16:80:b1:ac:e9:4f:5b:c9:4b:c4:aa:3c:58:2d:
39:2a:7b:94:43:bb:09:95:bc:90:b1:3c:65:5b:38:23:f6:da:
d9:a4:f3:a1:d0:11:88:7d:c6:5b:f9:3c:75:0f:0d:57:2f:9a:
26:71:6c:3f:a9:4b:a6:d1:fd:da:c8:0b:03:e8:4f:75:30:d3:
97:fd:a6:07:e4:f1:c0:e0:f9:97:41:e9:fa:0e:e3:14:6a:e2:
17:fa:3f:23:61:d0:0d:9e:a2:44:23:3b:4a:14:27:7d:84:e4:
f1:3e:dd:bd:19:23:0a:f1:45:91:d7:b2:fa:4c:de:8b:2d:3e:
22:83:f1:f0:d0:16:61:4e:93:1c:35:c7:70:e4:92:79:27:aa:
de:5a:52:96:70:3b:98:18:c1:16:0c:25:b5:82:bc:75:22:86:
76:3f:d1:82
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ+5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDc0NTM1WhcNMjQwODAzMDc0NTM1WjAYMRYw
FAYDVQQDEw02NmEyMDJhMi0yNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtROIHHa8bvWwWJ4ykk4cbrtqyOZrFgfby4dv5BUnC5kF1RTRPxoCMC60
wf6OOZ9VvUiNp9CEj51HhaxluRgYDExJKEf3aY5Laa+VHFgRmUJ3e2cGEq8Vypej
yv4PdTXCKINpVPNoPoBCfIHlnR8B8Pnq5pYEc8D9U1QNYlRuVMHizZSW+LNJU3S6
FaAl0jD752WLpjy8JiyRWExsPohlp/wPpnqBVVHD4HJfN+P8nB6rmHJrNVvMXOzw
vjKNd/SebICGUF7CjF4oQ6sYCC/WN7FN2I96iZ6djEHDadwnvmzCD4zsgAIk873h
sizMLuixXmeHVcFnKUuz463Z/1emGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA+W
W1z6uhUnKHX24998nUmDCqoPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjk5NkQ0MDRBNTkxMUVGODhBQkRFNjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSbMA0GCSqGSIb3DQEBCwUA
A4IBAQAcxamsQ+1NEmVOaGI0qfWdMi9CNkFWnGGGh4L7AY5LCLRx6swgqs3+6hoC
lNS2QX8FqLSq96pGtuZelBMkQzCmmbEWAXhDmUkdzfpR/E021PgIlWKW2eiEgZP4
vD8jFoCxrOlPW8lLxKo8WC05KnuUQ7sJlbyQsTxlWzgj9trZpPOh0BGIfcZb+Tx1
Dw1XL5omcWw/qUum0f3ayAsD6E91MNOX/aYH5PHA4PmXQen6DuMUauIX+j8jYdAN
nqJEIztKFCd9hOTxPt29GSMK8UWR17L6TN6LLT4ig/Hw0BZhTpMcNcdw5JJ5J6re
WlKWcDuYGMEWDCW1grx1IoZ2P9GC
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org