Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F32E9672C29411EF8980F077762E951A.roa
File: F32E9672C29411EF8980F077762E951A.roa (raw, json)
Hash identifier: y4zrQ9I60j9WYt3Bte5l5CEJ8V9HtFeVe6unQYtbpiQ=
Subject key identifier: 18:10:57:FF:D4:9D:A6:11:7E:9D:E9:95:51:D4:2C:27:6E:90:93:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F32E9672C29411EF8980F077762E951A.roa
Signing time: Wed 25 Dec 2024 07:50:46 +0000
ROA not before: Wed 25 Dec 2024 07:50:43 +0000
ROA not after: Wed 29 Jan 2025 07:50:43 +0000
asID: 400046
IP address blocks: 45.194.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59827 (0xe9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 07:50:43 2024 GMT
Not After : Jan 29 07:50:43 2025 GMT
Subject: CN=676bb956-e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:56:72:fe:47:d5:47:39:27:f6:8c:90:80:
de:fa:35:02:f1:69:91:9f:18:67:d5:4d:49:08:fc:
c9:12:fa:06:b5:85:2f:9d:3d:20:c4:01:24:ef:95:
4a:b7:82:55:e4:8a:a9:cd:90:3e:47:c3:71:71:49:
c5:29:ca:6a:9d:c3:b0:48:b0:f3:df:92:1e:e9:c2:
ea:7f:6a:5a:52:94:40:83:d8:db:6f:a2:ae:c2:14:
24:6b:48:64:ce:cf:2a:77:f8:5e:b5:14:3d:78:97:
79:87:23:89:72:a0:8e:53:19:17:dc:4a:5e:c5:f2:
fb:6f:52:95:0f:47:fd:b5:01:12:3e:78:08:77:fe:
1b:c4:8b:63:04:16:db:9c:cb:97:59:65:cf:aa:e0:
6c:a0:b1:cf:2e:59:04:fb:7e:5b:58:c9:80:50:51:
8e:29:e8:15:c7:49:19:12:37:14:83:78:f4:8e:dc:
b8:b2:93:9c:d6:cc:37:e2:3b:67:ec:a3:f2:1c:dd:
81:25:7f:11:94:38:73:b5:4b:8c:08:eb:22:e2:e9:
6f:04:82:ce:ba:1b:0c:cc:34:64:10:49:73:1f:87:
72:ad:b2:00:8f:3d:2f:89:7a:13:d3:82:ed:f8:82:
b9:89:08:77:b1:e3:59:a1:68:89:06:c4:14:eb:ee:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:57:FF:D4:9D:A6:11:7E:9D:E9:95:51:D4:2C:27:6E:90:93:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F32E9672C29411EF8980F077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6c:19:32:7f:51:e3:95:70:ab:ba:f5:bc:b2:6a:58:4f:48:
ca:95:bc:77:7f:3e:ba:22:c6:f2:00:99:fb:d7:3f:e8:ef:90:
5c:a9:62:b3:b8:95:5f:62:44:d0:f6:ad:6e:b5:f4:dc:2a:35:
e2:96:9e:46:9b:33:24:75:64:ea:2d:f9:45:41:96:08:b8:20:
12:65:53:ba:cb:63:c0:5d:84:e4:a2:89:5d:f6:9b:33:ad:69:
1a:19:aa:8c:a6:e8:22:06:0c:66:6d:5f:c0:d8:d8:30:20:b1:
fc:ca:21:b5:da:72:7c:ad:da:06:8e:5e:67:ed:5f:0e:82:2a:
22:bd:9f:28:9c:9b:40:15:92:5d:03:38:46:d5:71:bb:e7:c2:
b9:6e:f1:14:d0:4c:3a:4c:22:28:d0:04:7e:f2:e0:14:d3:2f:
d5:ac:e5:6d:89:8f:57:34:c1:64:01:22:d8:12:f5:35:dd:23:
af:f7:c7:f2:24:2d:37:de:fe:9e:62:b8:c2:97:23:0f:0c:39:
ee:9e:50:84:21:51:53:1a:27:fb:6b:cc:16:37:79:9f:33:ff:
21:9e:a1:4d:00:fd:4a:bb:b9:a0:dc:03:b6:ef:45:e5:5b:6a:
ea:f4:7a:cf:4e:66:55:98:07:49:97:f2:3b:cb:84:03:a3:62:
ad:e7:54:ee
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOmzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDc1MDQzWhcNMjUwMTI5MDc1MDQzWjAYMRYw
FAYDVQQDEw02NzZiYjk1Ni1lNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbRWcv5H1Uc5J/aMkIDe+jUC8WmRnxhn1U1JCPzJEvoGtYUvnT0gxAEk
75VKt4JV5IqpzZA+R8NxcUnFKcpqncOwSLDz35Ie6cLqf2paUpRAg9jbb6KuwhQk
a0hkzs8qd/hetRQ9eJd5hyOJcqCOUxkX3EpexfL7b1KVD0f9tQESPngId/4bxItj
BBbbnMuXWWXPquBsoLHPLlkE+35bWMmAUFGOKegVx0kZEjcUg3j0jty4spOc1sw3
4jtn7KPyHN2BJX8RlDhztUuMCOsi4ulvBILOuhsMzDRkEElzH4dyrbIAjz0viXoT
04Lt+IK5iQh3seNZoWiJBsQU6+4RzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBgQ
V//UnaYRfp3plVHULCdukJPpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzJFOTY3MkMyOTQxMUVGODk4MEYwNzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIpMA0GCSqGSIb3DQEBCwUA
A4IBAQCObBkyf1HjlXCruvW8smpYT0jKlbx3fz66IsbyAJn71z/o75BcqWKzuJVf
YkTQ9q1utfTcKjXilp5GmzMkdWTqLflFQZYIuCASZVO6y2PAXYTkoold9pszrWka
GaqMpugiBgxmbV/A2NgwILH8yiG12nJ8rdoGjl5n7V8OgioivZ8onJtAFZJdAzhG
1XG758K5bvEU0Ew6TCIo0AR+8uAU0y/VrOVtiY9XNMFkASLYEvU13SOv98fyJC03
3v6eYrjClyMPDDnunlCEIVFTGif7a8wWN3mfM/8hnqFNAP1Ku7mg3AO270XlW2rq
9HrPTmZVmAdJl/I7y4QDo2Kt51Tu
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:52 2025 by rpki-client