Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBC2570CCE8311EF9E79835D762E951A.roa
File: EBC2570CCE8311EF9E79835D762E951A.roa (raw, json)
Hash identifier: u32qk9dxIq+W1t5nZ0IjADIoeZTesq55mkXRmqfTVzA=
Subject key identifier: 2B:E0:61:99:83:12:FE:7B:66:C4:37:66:F2:8A:C6:2F:66:BF:FF:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBC2570CCE8311EF9E79835D762E951A.roa
Signing time: Thu 09 Jan 2025 12:19:06 +0000
ROA not before: Thu 09 Jan 2025 12:19:03 +0000
ROA not after: Sat 01 Feb 2025 12:19:03 +0000
asID: 17561
IP address blocks: 45.203.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66492 (0x103bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:19:03 2025 GMT
Not After : Feb 1 12:19:03 2025 GMT
Subject: CN=677fbeba-08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:40:6e:f2:30:a3:fb:f2:85:c2:4c:a5:e8:
13:01:eb:ab:07:8b:5f:c7:dd:9c:53:bc:cc:71:91:
5b:91:dc:79:70:f0:ce:20:f3:fc:9e:ae:7a:2f:f9:
f2:fd:7b:33:17:c9:54:bc:4e:c0:4b:a0:4d:95:6c:
6d:f3:9c:57:09:14:8a:39:c4:23:89:09:84:19:6c:
8e:07:f6:e2:1a:93:43:7d:39:ec:1f:ac:3b:d1:e7:
d1:b3:3d:9d:4a:e3:53:6c:8b:c6:a2:f2:cf:ff:a2:
c1:a3:2c:1c:25:e2:7b:6b:70:4a:40:4e:4d:e1:42:
ec:12:8a:37:a7:d6:77:27:b6:e6:04:ed:2c:26:1b:
e6:6b:b2:a8:a2:db:e8:99:e3:45:cc:b9:7a:6e:9f:
7e:fa:d6:e6:a6:62:37:c0:eb:ca:9b:4c:e3:88:34:
dd:2d:46:ab:e4:24:76:96:f8:85:cb:7e:b0:20:a5:
f6:df:fc:76:6f:76:be:a2:78:3b:01:07:37:19:dd:
c8:2f:6c:1c:09:a9:64:43:3b:f4:9f:46:8c:c8:f8:
cc:08:b0:4a:47:84:fe:25:45:24:1f:06:d5:ba:05:
5d:c7:ab:14:00:9f:72:68:e1:92:b2:b9:15:65:de:
44:b9:e1:a3:77:e7:d4:22:05:b4:6d:1a:21:66:73:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:61:99:83:12:FE:7B:66:C4:37:66:F2:8A:C6:2F:66:BF:FF:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBC2570CCE8311EF9E79835D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.24.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e0:aa:71:a7:4d:bf:58:82:04:f4:f2:45:11:ef:ac:4d:af:
82:1c:64:21:ca:fd:46:ad:b5:c8:04:0d:b3:29:1a:b0:cb:13:
80:6c:48:9a:45:db:fa:8e:7e:45:be:a7:2f:8d:d2:6a:b3:ad:
9d:6f:f5:c5:52:cc:01:01:b8:a2:af:0d:4f:92:92:da:0e:37:
0b:66:b1:3e:1f:7d:a2:af:dc:b1:a9:28:64:f8:2d:81:fa:19:
f0:02:3b:c3:16:aa:7e:ed:86:0b:c0:dd:43:f6:cd:c8:82:21:
60:7b:49:5c:e2:7f:e7:1b:85:c7:a2:8d:71:9f:11:c2:21:dc:
09:e9:13:fe:21:ca:b2:ee:77:8e:e0:0c:d2:97:51:7e:24:33:
3e:f0:86:b1:28:93:d1:33:a9:ae:02:b5:01:35:f0:54:77:96:
6a:41:be:64:f3:71:ed:8b:63:b4:e7:9a:0d:cc:b0:ba:ca:52:
2a:10:11:d9:20:aa:5c:0b:21:d8:b7:c5:ef:e8:44:dd:a5:aa:
35:b3:2f:7f:6b:df:cf:26:95:0a:77:4a:6c:50:9d:eb:07:fe:
a1:36:1d:a7:1e:da:9b:39:18:dd:99:7f:77:b5:8e:4c:44:80:
b1:11:c0:4d:c1:9d:81:22:36:8a:16:f8:83:b7:f8:fb:e9:ba:
e3:7a:bb:ac
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQO8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTIxOTAzWhcNMjUwMjAxMTIxOTAzWjAYMRYw
FAYDVQQDEw02NzdmYmViYS0wOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAykpAbvIwo/vyhcJMpegTAeurB4tfx92cU7zMcZFbkdx5cPDOIPP8nq56
L/ny/XszF8lUvE7AS6BNlWxt85xXCRSKOcQjiQmEGWyOB/biGpNDfTnsH6w70efR
sz2dSuNTbIvGovLP/6LBoywcJeJ7a3BKQE5N4ULsEoo3p9Z3J7bmBO0sJhvma7Ko
otvomeNFzLl6bp9++tbmpmI3wOvKm0zjiDTdLUar5CR2lviFy36wIKX23/x2b3a+
ong7AQc3Gd3IL2wcCalkQzv0n0aMyPjMCLBKR4T+JUUkHwbVugVdx6sUAJ9yaOGS
srkVZd5EueGjd+fUIgW0bRohZnNnKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCvg
YZmDEv57ZsQ3ZvKKxi9mv/8RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQkMyNTcwQ0NFODMxMUVGOUU3OTgzNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcsYMA0GCSqGSIb3DQEBCwUA
A4IBAQAx4Kpxp02/WIIE9PJFEe+sTa+CHGQhyv1GrbXIBA2zKRqwyxOAbEiaRdv6
jn5FvqcvjdJqs62db/XFUswBAbiirw1PkpLaDjcLZrE+H32ir9yxqShk+C2B+hnw
AjvDFqp+7YYLwN1D9s3IgiFge0lc4n/nG4XHoo1xnxHCIdwJ6RP+Icqy7neO4AzS
l1F+JDM+8IaxKJPRM6muArUBNfBUd5ZqQb5k83Hti2O055oNzLC6ylIqEBHZIKpc
CyHYt8Xv6ETdpao1sy9/a9/PJpUKd0psUJ3rB/6hNh2nHtqbORjdmX93tY5MRICx
EcBNwZ2BIjaKFviDt/j76brjerus
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client