Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6387632FAC511EE933BD738017001B1.roa
File: E6387632FAC511EE933BD738017001B1.roa (raw, json)
Hash identifier: OAehpJ0r7llEBF/ws22+QaQvZhnn2Ql+6M4vl5WLS3A=
Subject key identifier: 34:51:AB:02:C4:D4:96:44:B4:8F:77:49:D1:01:5C:01:EF:41:7D:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8262
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6387632FAC511EE933BD738017001B1.roa
Signing time: Mon 15 Apr 2024 01:17:17 +0000
ROA not before: Mon 15 Apr 2024 01:17:14 +0000
ROA not after: Wed 24 Apr 2024 01:17:14 +0000
asID: 136950
IP address blocks: 45.195.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33378 (0x8262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 01:17:14 2024 GMT
Not After : Apr 24 01:17:14 2024 GMT
Subject: CN=661c801d-bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:18:e3:b2:2d:23:a1:07:6b:51:17:48:2d:
47:78:08:e2:30:13:d5:97:42:61:8e:8b:d5:3f:5b:
46:56:19:66:63:a1:6b:5b:52:da:cc:76:39:cf:bc:
ab:37:f9:a5:a4:53:42:dd:e9:08:70:a6:85:f7:1b:
ed:44:42:33:f0:99:52:06:b6:f4:21:57:a3:9f:70:
7e:51:85:27:2b:e0:92:7c:1d:fa:92:cd:96:75:dc:
f6:d5:e5:eb:80:a5:b3:51:fd:41:8e:52:9e:c5:cd:
4c:66:fa:0a:43:00:6d:5f:3f:ad:37:0a:ef:9e:68:
89:67:98:f7:1f:9d:41:1f:cb:2e:0e:9e:f3:c8:8d:
05:7a:2c:3c:0b:56:cc:76:98:41:55:e5:40:5d:ce:
ec:21:30:44:04:22:5b:d5:37:73:f9:88:56:15:97:
0b:25:5e:65:3a:99:ef:9e:38:5e:00:55:6d:22:71:
52:7e:48:97:f2:d4:9d:27:8c:e6:06:49:ef:55:ce:
bb:35:94:f3:f4:61:f8:e1:1d:30:72:4a:83:da:0f:
90:6d:a6:bc:aa:16:d9:fe:13:c5:1a:f8:fe:7b:e3:
1a:19:d2:a3:c6:1d:9f:b1:43:3e:a8:3d:5a:a8:fd:
da:6d:0f:e9:34:86:b2:80:a5:5f:95:11:29:5a:7e:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:AB:02:C4:D4:96:44:B4:8F:77:49:D1:01:5C:01:EF:41:7D:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6387632FAC511EE933BD738017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bc:6e:2d:91:f8:9d:be:3f:3d:82:d5:b9:cd:44:04:fb:aa:
86:4b:fb:50:a4:0d:7d:10:48:fa:d6:b4:13:02:d2:06:07:32:
0c:a8:90:b2:94:92:79:28:95:24:72:48:09:af:66:bc:a7:f5:
33:78:d3:70:0c:34:e2:29:f3:09:e9:8e:af:ce:4b:fc:92:e3:
37:60:39:58:ea:54:71:cf:9e:86:d7:1d:0b:98:ac:9c:4d:83:
53:a2:56:5e:7e:e4:73:52:a6:7a:8b:6a:37:17:29:5e:81:04:
07:dd:f1:68:d7:7b:a5:02:f6:0c:2c:0b:c4:fe:4d:df:d0:6c:
c0:62:1a:fc:96:51:d3:3e:53:16:c2:86:ea:d0:f3:86:e8:18:
b2:62:e8:31:14:44:c8:a1:d9:59:a1:f5:00:fa:5a:70:42:54:
88:94:31:d5:f0:b4:ed:4d:8e:fa:14:ce:e7:be:99:8a:0c:cc:
50:95:4d:6e:3f:69:92:b7:ec:75:24:9a:dd:ef:17:49:14:05:
26:10:a9:2a:e1:30:65:63:5e:d5:e1:b3:aa:56:05:3e:c1:85:
4c:7d:a2:e9:5c:d6:8e:58:ad:d3:6c:7c:be:0f:f0:d3:5d:91:
06:ee:4a:00:50:84:1f:14:86:ff:68:0e:e4:d6:b1:63:c9:1f:
c9:27:12:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIJiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE1MDExNzE0WhcNMjQwNDI0MDExNzE0WjAYMRYw
FAYDVQQDEw02NjFjODAxZC1iZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3J0Y47ItI6EHa1EXSC1HeAjiMBPVl0JhjovVP1tGVhlmY6FrW1LazHY5
z7yrN/mlpFNC3ekIcKaF9xvtREIz8JlSBrb0IVejn3B+UYUnK+CSfB36ks2Wddz2
1eXrgKWzUf1BjlKexc1MZvoKQwBtXz+tNwrvnmiJZ5j3H51BH8suDp7zyI0Feiw8
C1bMdphBVeVAXc7sITBEBCJb1Tdz+YhWFZcLJV5lOpnvnjheAFVtInFSfkiX8tSd
J4zmBknvVc67NZTz9GH44R0wckqD2g+Qbaa8qhbZ/hPFGvj+e+MaGdKjxh2fsUM+
qD1aqP3abQ/pNIaygKVflREpWn6oNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDRR
qwLE1JZEtI93SdEBXAHvQX0QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNjM4NzYzMkZBQzUxMUVFOTMzQkQ3MzgwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOUMA0GCSqGSIb3DQEBCwUA
A4IBAQBPvG4tkfidvj89gtW5zUQE+6qGS/tQpA19EEj61rQTAtIGBzIMqJCylJJ5
KJUkckgJr2a8p/UzeNNwDDTiKfMJ6Y6vzkv8kuM3YDlY6lRxz56G1x0LmKycTYNT
olZefuRzUqZ6i2o3FylegQQH3fFo13ulAvYMLAvE/k3f0GzAYhr8llHTPlMWwobq
0POG6BiyYugxFETIodlZofUA+lpwQlSIlDHV8LTtTY76FM7nvpmKDMxQlU1uP2mS
t+x1JJrd7xdJFAUmEKkq4TBlY17V4bOqVgU+wYVMfaLpXNaOWK3TbHy+D/DTXZEG
7koAUIQfFIb/aA7k1rFjyR/JJxL7
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:04 2024 by rpki-client on console-fra.rpki-client.org