Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60F6B8D00E11EF8DB18DAB762E951A.roa
File: ED60F6B8D00E11EF8DB18DAB762E951A.roa (raw, json)
Hash identifier: W4dhj3Oiu4cXmo++nKo2WmCFdgJiMDI9mQ5b2ke4RdM=
Subject key identifier: DB:1A:D3:6A:BF:51:51:F7:AE:AD:0E:3A:E9:36:B9:ED:77:72:E5:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60F6B8D00E11EF8DB18DAB762E951A.roa
Signing time: Sat 11 Jan 2025 11:26:40 +0000
ROA not before: Sat 11 Jan 2025 11:26:37 +0000
ROA not after: Sat 25 Jan 2025 11:26:37 +0000
asID: 139646
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67030 (0x105d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 11:26:37 2025 GMT
Not After : Jan 25 11:26:37 2025 GMT
Subject: CN=67825570-126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:25:9b:da:06:96:8e:89:43:79:cb:29:33:
be:26:a6:39:5c:4e:9b:e7:7d:5b:b9:b7:e2:4b:c0:
b8:5f:15:ea:ce:a7:47:78:15:d3:10:00:27:3f:62:
79:47:e1:bd:1a:39:fe:40:0d:91:bf:a0:4e:b4:fd:
d8:af:7b:8c:95:c3:ad:57:e4:d9:56:9a:d6:51:03:
f9:aa:90:db:60:86:a9:0b:9c:39:51:f2:bb:b8:42:
7d:df:b6:c0:ed:b4:ed:5c:23:03:a9:15:e6:13:02:
ac:17:be:0a:b1:6f:f7:c4:09:b9:21:f3:de:4d:10:
ed:b1:8f:a5:cc:a2:5c:6b:d0:d2:d6:ee:bb:e2:e8:
fb:d7:5c:ed:23:1d:12:d9:8b:c8:2b:46:7b:02:f4:
18:07:72:ab:04:ba:4d:14:da:32:10:c1:e6:33:91:
45:6a:2d:c4:3d:d7:18:8e:95:e3:c6:95:ab:75:f0:
a7:4e:a3:67:0c:a9:d2:ab:a3:93:ee:51:28:cb:03:
59:7f:cc:e5:3b:66:49:b2:bf:82:32:b0:9b:1a:0f:
35:db:3e:62:50:f0:23:91:86:f9:e2:27:7e:d3:f4:
60:d8:f4:c5:06:ee:85:43:22:66:a0:58:14:93:ef:
9e:a9:d1:3c:32:a7:63:46:4b:1d:a2:e6:23:e1:32:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:D3:6A:BF:51:51:F7:AE:AD:0E:3A:E9:36:B9:ED:77:72:E5:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED60F6B8D00E11EF8DB18DAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
74:eb:df:05:bf:7a:71:0b:5f:dc:5a:28:52:e4:d1:0c:84:fa:
f7:8a:de:2e:4d:fe:14:39:b6:22:1a:7d:03:61:90:d9:48:5f:
ab:97:41:66:c8:6f:91:35:ab:8a:d9:1b:6d:30:4d:8c:e0:8a:
21:da:72:11:b3:8d:76:d9:10:cc:19:8b:4b:c7:94:b1:a8:d8:
c7:33:12:03:cd:63:d1:45:23:8e:e8:a7:36:60:f6:bc:51:24:
bb:ef:4a:73:44:08:e8:42:cd:fa:af:11:f1:8f:ec:bb:c6:f1:
e1:0b:fe:da:b1:19:c5:30:05:32:91:21:c0:88:df:ac:f3:db:
4b:31:07:df:c1:15:dc:0b:6e:41:83:c5:62:f7:45:f0:5f:7e:
ea:38:bf:06:d0:aa:40:be:21:3d:e3:e4:b3:fe:30:18:67:c7:
9c:07:90:a0:94:22:30:57:28:22:42:8a:e3:3f:b5:26:36:8c:
88:93:a9:4b:4c:64:ee:28:36:3e:cb:86:28:51:c6:24:0a:6b:
c7:80:65:5d:f2:45:6e:10:92:9f:7f:36:9c:40:1e:79:67:b5:
c4:19:24:fd:a8:43:ec:86:16:a2:9b:32:77:3b:9e:e0:cd:2d:
0e:1f:d5:d7:4c:e6:3d:85:09:a2:f7:97:eb:8b:35:c1:fc:b9:
63:ee:d5:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQXWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTEyNjM3WhcNMjUwMTI1MTEyNjM3WjAYMRYw
FAYDVQQDEw02NzgyNTU3MC0xMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnholm9oGlo6JQ3nLKTO+JqY5XE6b531bubfiS8C4XxXqzqdHeBXTEAAn
P2J5R+G9Gjn+QA2Rv6BOtP3Yr3uMlcOtV+TZVprWUQP5qpDbYIapC5w5UfK7uEJ9
37bA7bTtXCMDqRXmEwKsF74KsW/3xAm5IfPeTRDtsY+lzKJca9DS1u674uj711zt
Ix0S2YvIK0Z7AvQYB3KrBLpNFNoyEMHmM5FFai3EPdcYjpXjxpWrdfCnTqNnDKnS
q6OT7lEoywNZf8zlO2ZJsr+CMrCbGg812z5iUPAjkYb54id+0/Rg2PTFBu6FQyJm
oFgUk++eqdE8MqdjRksdouYj4TJu7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNsa
02q/UVH3rq0OOuk2ue13cuWBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRDYwRjZCOEQwMEUxMUVGOERCMThEQUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcgSMA0GCSqGSIb3DQEBCwUA
A4IBAQB0698Fv3pxC1/cWihS5NEMhPr3it4uTf4UObYiGn0DYZDZSF+rl0FmyG+R
NauK2RttME2M4Ioh2nIRs4122RDMGYtLx5SxqNjHMxIDzWPRRSOO6Kc2YPa8USS7
70pzRAjoQs36rxHxj+y7xvHhC/7asRnFMAUykSHAiN+s89tLMQffwRXcC25Bg8Vi
90XwX37qOL8G0KpAviE94+Sz/jAYZ8ecB5CglCIwVygiQorjP7UmNoyIk6lLTGTu
KDY+y4YoUcYkCmvHgGVd8kVuEJKffzacQB55Z7XEGST9qEPshhaimzJ3O57gzS0O
H9XXTOY9hQmi95frizXB/Llj7tW6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:24 2025 by rpki-client