Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB3AEC7EF47E11EFB5086E7D762E951A.roa
File: EB3AEC7EF47E11EFB5086E7D762E951A.roa (raw, json)
Hash identifier: pdOv265yrnCbXQwjUkpMDI5yMM/CcglfrutHbMFVaag=
Subject key identifier: 9B:63:0D:B8:B1:7F:39:C1:17:E4:6B:84:DA:FA:90:7D:7B:53:E1:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01377A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB3AEC7EF47E11EFB5086E7D762E951A.roa
Signing time: Wed 26 Feb 2025 20:19:02 +0000
ROA not before: Wed 26 Feb 2025 20:18:58 +0000
ROA not after: Sun 23 Mar 2025 20:18:58 +0000
asID: 62240
IP address blocks: 45.192.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79738 (0x1377a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 20:18:58 2025 GMT
Not After : Mar 23 20:18:58 2025 GMT
Subject: CN=67bf7736-ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:d3:dc:89:b9:ee:e1:27:03:6c:8f:fc:9d:
20:96:7d:8a:26:f8:81:cc:a0:a5:41:9f:dc:c9:9a:
89:60:38:aa:80:b2:30:35:8f:23:57:33:49:41:08:
6a:8e:64:f0:06:e5:61:fb:40:67:0c:17:d6:fe:7b:
80:d8:13:06:0e:a5:60:de:24:a1:b1:b6:c8:f7:8f:
00:39:1f:4e:dc:e1:3d:40:5d:ac:c7:b9:7c:aa:1d:
69:89:e9:a7:c3:85:54:0a:26:d8:ae:91:f4:5d:d1:
15:90:65:f3:a3:54:07:f4:df:6d:a7:e9:12:4f:9b:
7f:01:35:2e:18:b0:a0:b3:4e:8d:98:a0:d0:13:4d:
e7:66:51:f5:74:27:13:f8:86:ac:f5:ff:0d:e8:63:
dd:5f:60:bf:c6:c3:d5:fb:30:1c:0c:c0:31:d6:28:
ad:53:9b:4c:e2:65:0c:b5:02:95:eb:0e:1c:8f:92:
85:41:d4:1d:1a:78:a0:bb:6f:0b:e9:0b:7c:58:af:
9d:bd:1c:b3:c3:21:c0:e2:49:0f:46:31:92:60:70:
8a:c6:0a:5a:77:02:1a:8f:6b:c9:9d:de:d3:c1:15:
1e:72:cb:81:9a:e9:62:9d:aa:80:af:c1:06:16:0b:
a0:ea:85:bf:5b:4d:b2:8b:cc:5c:13:ab:11:f4:e8:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:0D:B8:B1:7F:39:C1:17:E4:6B:84:DA:FA:90:7D:7B:53:E1:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB3AEC7EF47E11EFB5086E7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.45.0/24
Signature Algorithm: sha256WithRSAEncryption
47:26:33:b1:3e:18:9d:8d:80:c9:1a:46:45:b4:70:46:0d:66:
11:99:4c:ea:21:35:82:81:0d:9e:0a:ea:ba:bb:3a:d2:0e:1c:
1a:4f:fb:92:a3:a5:5f:0b:c0:60:b4:b0:49:f0:89:0b:a4:38:
e4:2e:e0:dd:50:86:8f:6f:ac:5c:33:7c:eb:26:8c:64:14:6d:
a1:18:83:a0:79:26:eb:18:83:88:44:eb:a0:08:8c:5a:51:82:
2d:5d:b9:5f:10:a6:d9:2c:54:e9:ee:e4:22:ae:b5:3a:69:5b:
b2:46:42:ef:de:4f:7a:e3:ef:b6:ab:be:5b:2a:09:f4:47:92:
35:46:38:4c:1e:1c:e9:16:4f:56:ba:d7:0a:15:f3:c1:5e:6e:
56:a0:8c:f2:a8:80:0c:93:b1:6e:a7:0a:e3:5f:ae:14:db:25:
88:b5:fc:d0:4b:de:80:06:ee:15:c6:11:43:7f:5d:40:3c:6c:
a4:0a:31:13:5b:82:97:d3:ed:29:d2:ab:9b:3c:9b:77:c7:ca:
10:80:b7:23:2b:19:15:fd:66:0b:11:1a:d8:3c:96:22:7d:60:
de:56:25:9d:b8:e1:ca:b3:79:46:cf:30:57:d0:91:da:bc:02:
ca:f2:af:a8:13:32:d7:bc:0d:3d:40:96:1c:98:c9:27:df:44:
b0:6c:c5:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATd6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjAxODU4WhcNMjUwMzIzMjAxODU4WjAYMRYw
FAYDVQQDEw02N2JmNzczNi1jYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy7LT3Im57uEnA2yP/J0gln2KJviBzKClQZ/cyZqJYDiqgLIwNY8jVzNJ
QQhqjmTwBuVh+0BnDBfW/nuA2BMGDqVg3iShsbbI948AOR9O3OE9QF2sx7l8qh1p
iemnw4VUCibYrpH0XdEVkGXzo1QH9N9tp+kST5t/ATUuGLCgs06NmKDQE03nZlH1
dCcT+Ias9f8N6GPdX2C/xsPV+zAcDMAx1iitU5tM4mUMtQKV6w4cj5KFQdQdGnig
u28L6Qt8WK+dvRyzwyHA4kkPRjGSYHCKxgpadwIaj2vJnd7TwRUecsuBmulinaqA
r8EGFgug6oW/W02yi8xcE6sR9OiQYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJtj
DbixfznBF+RrhNr6kH17U+GSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjNBRUM3RUY0N0UxMUVGQjUwODZFN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAtMA0GCSqGSIb3DQEBCwUA
A4IBAQBHJjOxPhidjYDJGkZFtHBGDWYRmUzqITWCgQ2eCuq6uzrSDhwaT/uSo6Vf
C8BgtLBJ8IkLpDjkLuDdUIaPb6xcM3zrJoxkFG2hGIOgeSbrGIOIROugCIxaUYIt
XblfEKbZLFTp7uQirrU6aVuyRkLv3k964++2q75bKgn0R5I1RjhMHhzpFk9WutcK
FfPBXm5WoIzyqIAMk7FupwrjX64U2yWItfzQS96ABu4VxhFDf11APGykCjETW4KX
0+0p0qubPJt3x8oQgLcjKxkV/WYLERrYPJYifWDeViWduOHKs3lGzzBX0JHavALK
8q+oEzLXvA09QJYcmMkn30SwbMVA
-----END CERTIFICATE-----
Generated at Sat May 10 04:51:40 2025 by rpki-client