Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1910FAF2D911EF9D2B59B0762E951A.roa
File: EB1910FAF2D911EF9D2B59B0762E951A.roa (raw, json)
Hash identifier: Ts4Ec/qVkUl4tfp9CmSohMm5hRVDm1D4qm991PzlsPo=
Subject key identifier: FB:CF:DA:61:FD:E7:7C:EF:1E:9A:0C:89:05:A2:66:D1:86:22:91:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1910FAF2D911EF9D2B59B0762E951A.roa
Signing time: Mon 24 Feb 2025 18:05:24 +0000
ROA not before: Mon 24 Feb 2025 18:05:20 +0000
ROA not after: Fri 04 Apr 2025 18:05:20 +0000
asID: 42831
IP address blocks: 45.198.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77092 (0x12d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 18:05:20 2025 GMT
Not After : Apr 4 18:05:20 2025 GMT
Subject: CN=67bcb4e4-1992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:9a:76:33:55:de:43:d3:33:50:a5:5b:61:
a3:3a:20:7f:ce:74:cc:7e:d1:61:03:7e:80:5f:ad:
ca:ca:fa:55:8f:d8:45:68:a3:65:57:07:77:ef:8f:
7c:15:ca:96:c7:9c:5f:a2:3d:c4:a1:5e:b9:3b:45:
ed:a9:aa:07:c9:48:16:37:07:e1:8d:6d:d7:ed:be:
1a:73:a9:e9:2b:d0:a4:d5:28:36:59:12:10:6d:50:
f4:06:3f:2c:35:41:03:bc:ae:b0:26:65:f8:6a:26:
e9:fa:f7:65:c5:e0:f1:87:29:d7:7e:52:4e:c7:ed:
d9:19:b6:60:38:e0:fc:47:6e:45:52:49:34:4d:df:
14:98:54:39:5a:c6:1a:0f:6a:2a:7f:ad:4e:74:f4:
f9:fb:2b:92:68:5e:7f:5a:57:7b:86:db:9d:f3:27:
24:fd:ea:41:90:8f:63:b7:02:38:d8:c9:d1:62:d3:
e6:95:5d:0a:c2:c3:2c:68:0a:8e:0f:7b:73:40:51:
dd:7c:5e:63:ca:54:eb:ab:02:0f:f7:e5:3e:15:7c:
c1:c2:91:a6:a2:aa:9c:96:b7:d0:43:2d:eb:04:c5:
11:a3:31:36:66:1b:e7:54:19:6b:bc:8d:f9:c5:3e:
81:7f:67:f9:44:e6:f9:80:e4:c1:ad:55:fb:7d:f3:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:DA:61:FD:E7:7C:EF:1E:9A:0C:89:05:A2:66:D1:86:22:91:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1910FAF2D911EF9D2B59B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:3d:08:6e:c6:49:1f:34:b8:37:cc:7f:9e:cd:d3:8e:8c:cc:
d4:66:95:a9:b2:a2:63:8a:d1:43:87:f5:15:21:75:8a:79:33:
b0:42:fc:d7:9a:d2:00:ba:03:38:e1:57:50:16:83:42:34:a7:
d3:8e:da:b3:e4:77:f5:c8:43:09:8d:53:88:e1:ea:f4:86:58:
a9:b8:60:30:de:8a:72:c9:c1:d9:d0:d0:2a:07:29:60:f1:fc:
12:b7:b3:21:0e:a7:b7:35:d6:16:37:e6:16:af:24:62:0f:40:
fe:93:c1:71:b0:7b:f2:65:56:09:e6:66:ca:5c:9f:a1:a4:7c:
b7:80:c8:85:07:82:f5:34:63:b3:e7:66:ea:25:5b:6a:c6:73:
a6:fa:d7:6d:e1:1f:b2:8b:e9:ef:b3:9b:28:7e:59:49:61:66:
89:e7:2a:db:23:8e:70:e4:ac:46:16:66:d5:1b:dd:c8:46:56:
fd:65:0d:c8:2c:75:54:2c:6b:71:05:35:d3:92:30:cb:13:26:
b0:ed:c8:e5:8c:1c:0d:bd:f2:74:be:b3:4c:09:18:12:da:38:
1c:06:1e:49:f0:da:ad:ab:61:ad:df:9b:90:cf:78:75:45:29:
14:70:4a:2e:42:80:ba:5a:8f:b8:83:6c:45:1f:c7:36:90:b7:
ec:e8:b0:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS0kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTgwNTIwWhcNMjUwNDA0MTgwNTIwWjAYMRYw
FAYDVQQDEw02N2JjYjRlNC0xOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuWCadjNV3kPTM1ClW2GjOiB/znTMftFhA36AX63KyvpVj9hFaKNlVwd3
7498FcqWx5xfoj3EoV65O0XtqaoHyUgWNwfhjW3X7b4ac6npK9Ck1Sg2WRIQbVD0
Bj8sNUEDvK6wJmX4aibp+vdlxeDxhynXflJOx+3ZGbZgOOD8R25FUkk0Td8UmFQ5
WsYaD2oqf61OdPT5+yuSaF5/Wld7htud8yck/epBkI9jtwI42MnRYtPmlV0KwsMs
aAqOD3tzQFHdfF5jylTrqwIP9+U+FXzBwpGmoqqclrfQQy3rBMURozE2ZhvnVBlr
vI35xT6Bf2f5ROb5gOTBrVX7ffPorQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPvP
2mH953zvHpoMiQWiZtGGIpEuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjE5MTBGQUYyRDkxMUVGOUQyQjU5QjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcZAMA0GCSqGSIb3DQEBCwUA
A4IBAQAbPQhuxkkfNLg3zH+ezdOOjMzUZpWpsqJjitFDh/UVIXWKeTOwQvzXmtIA
ugM44VdQFoNCNKfTjtqz5Hf1yEMJjVOI4er0hlipuGAw3opyycHZ0NAqBylg8fwS
t7MhDqe3NdYWN+YWryRiD0D+k8FxsHvyZVYJ5mbKXJ+hpHy3gMiFB4L1NGOz52bq
JVtqxnOm+tdt4R+yi+nvs5sofllJYWaJ5yrbI45w5KxGFmbVG93IRlb9ZQ3ILHVU
LGtxBTXTkjDLEyaw7cjljBwNvfJ0vrNMCRgS2jgcBh5J8Nqtq2Gt35uQz3h1RSkU
cEouQoC6Wo+4g2xFH8c2kLfs6LBr
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:48 2025 by rpki-client