Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E5167AD01911EFBD3B8F71762E951A.roa
File: F4E5167AD01911EFBD3B8F71762E951A.roa (raw, json)
Hash identifier: NjHwFF58B22kO6sAKA1K5XAnyz6tM5EVGa+ppL0qiMU=
Subject key identifier: D1:4A:32:A5:82:BD:2F:C7:27:AA:57:C6:7A:34:BC:F1:5C:1F:D7:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E5167AD01911EFBD3B8F71762E951A.roa
Signing time: Sat 11 Jan 2025 12:45:37 +0000
ROA not before: Sat 11 Jan 2025 12:45:34 +0000
ROA not after: Sat 25 Jan 2025 12:45:34 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67056 (0x105f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 12:45:34 2025 GMT
Not After : Jan 25 12:45:34 2025 GMT
Subject: CN=678267f1-a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:ea:de:ba:83:05:34:7b:0f:3b:96:e3:81:
d7:db:c2:99:f2:7f:ed:8b:c8:fc:67:91:ea:c2:94:
90:58:b7:5e:af:4a:78:95:a0:7c:77:b0:16:00:03:
ca:d7:cb:52:dc:00:83:21:80:f8:9f:87:ef:bc:f6:
cd:a5:15:91:ca:ab:18:2b:e6:45:fd:57:74:e6:cc:
e4:3d:32:59:11:b1:c6:6b:c7:5b:87:10:03:ab:52:
59:e4:50:76:21:af:b4:a8:7a:c4:8b:3f:88:5e:f1:
47:09:02:68:64:55:19:a1:dd:1b:36:b8:42:1d:c7:
c5:64:c8:33:b1:4a:a2:34:70:3d:eb:27:ee:5a:75:
2b:f9:df:da:31:78:05:54:2d:ae:72:13:ad:97:2a:
00:46:8c:6d:73:ec:c6:9e:3b:d4:6b:e1:ab:8d:ba:
6f:88:74:0f:5b:65:5a:b6:80:a7:a9:21:f8:49:d5:
d1:a3:39:33:6e:75:4d:aa:ea:99:0c:59:a5:0d:a4:
3b:f1:27:23:44:a1:a8:41:16:71:bf:3d:fb:81:ad:
52:a4:fd:9e:1b:71:b8:3e:5c:df:77:8e:09:1d:b9:
bf:f3:71:45:db:ac:60:c0:85:40:9e:98:59:3f:08:
d0:b9:41:0d:68:69:25:2e:81:d9:e8:30:7d:37:b4:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:32:A5:82:BD:2F:C7:27:AA:57:C6:7A:34:BC:F1:5C:1F:D7:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E5167AD01911EFBD3B8F71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
74:bb:1d:00:f0:dc:0f:82:41:7b:eb:d6:5d:83:01:0b:34:cb:
3f:cb:cd:d1:da:9e:f6:dc:08:58:70:0e:c8:f2:ce:72:08:81:
8f:62:68:8c:14:df:0e:2e:77:15:eb:9b:38:9a:86:7b:1b:9e:
5f:fd:5c:df:1c:60:6f:fb:59:d6:db:b9:7f:23:67:4f:1e:a6:
cd:ef:fc:fa:8d:c4:31:b0:f5:fa:3b:a4:74:c8:84:d8:0d:71:
16:37:03:a6:76:de:de:1e:76:ec:e8:6a:8d:8a:ec:9b:3a:09:
4a:70:eb:eb:bc:f4:7b:8f:04:80:7e:8e:20:79:21:e7:46:ab:
be:fe:b9:32:4a:ee:42:47:96:97:54:2a:e6:eb:21:61:0f:77:
50:5c:90:00:d9:dd:74:e2:a4:07:3f:0e:34:c3:75:4a:20:ed:
9b:52:c5:94:5c:5b:29:d8:84:6c:2b:c6:a6:03:a8:1a:78:fc:
e2:74:2e:42:eb:67:cc:a2:c7:d1:16:c7:a8:a3:2b:fc:f8:91:
77:54:43:75:f2:c6:4f:2e:73:73:6b:94:a3:a7:30:85:22:9e:
93:45:04:ff:e7:75:80:31:07:05:a3:1d:e0:c3:f2:1f:1b:6d:
24:ad:47:ba:f5:65:e5:57:05:55:9a:a1:63:6a:22:06:d8:fa:
34:bb:56:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQXwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTI0NTM0WhcNMjUwMTI1MTI0NTM0WjAYMRYw
FAYDVQQDEw02NzgyNjdmMS1hNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyHq3rqDBTR7DzuW44HX28KZ8n/ti8j8Z5HqwpSQWLder0p4laB8d7AW
AAPK18tS3ACDIYD4n4fvvPbNpRWRyqsYK+ZF/Vd05szkPTJZEbHGa8dbhxADq1JZ
5FB2Ia+0qHrEiz+IXvFHCQJoZFUZod0bNrhCHcfFZMgzsUqiNHA96yfuWnUr+d/a
MXgFVC2uchOtlyoARoxtc+zGnjvUa+GrjbpviHQPW2VatoCnqSH4SdXRozkzbnVN
quqZDFmlDaQ78ScjRKGoQRZxvz37ga1SpP2eG3G4Plzfd44JHbm/83FF26xgwIVA
nphZPwjQuUENaGklLoHZ6DB9N7TscwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNFK
MqWCvS/HJ6pXxno0vPFcH9fvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNEU1MTY3QUQwMTkxMUVGQkQzQjhGNzE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcnYMA0GCSqGSIb3DQEBCwUA
A4IBAQB0ux0A8NwPgkF769ZdgwELNMs/y83R2p723AhYcA7I8s5yCIGPYmiMFN8O
LncV65s4moZ7G55f/VzfHGBv+1nW27l/I2dPHqbN7/z6jcQxsPX6O6R0yITYDXEW
NwOmdt7eHnbs6GqNiuybOglKcOvrvPR7jwSAfo4geSHnRqu+/rkySu5CR5aXVCrm
6yFhD3dQXJAA2d104qQHPw40w3VKIO2bUsWUXFsp2IRsK8amA6gaePzidC5C62fM
osfRFseooyv8+JF3VEN18sZPLnNza5SjpzCFIp6TRQT/53WAMQcFox3gw/IfG20k
rUe69WXlVwVVmqFjaiIG2Po0u1b3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:48 2025 by rpki-client