Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF552D32D02511EFA3EE54BB762E951A.roa
File: FF552D32D02511EFA3EE54BB762E951A.roa (raw, json)
Hash identifier: t/Xo8i1rNyhqxT7sYFh4Z8NY8DzktblqiF88mFNh2SA=
Subject key identifier: E2:30:29:30:DD:66:33:C8:70:05:39:DB:40:09:2D:49:4B:6C:D9:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010618
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF552D32D02511EFA3EE54BB762E951A.roa
Signing time: Sat 11 Jan 2025 14:11:49 +0000
ROA not before: Sat 11 Jan 2025 14:11:45 +0000
ROA not after: Sat 25 Jan 2025 14:11:45 +0000
asID: 139646
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67096 (0x10618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 14:11:45 2025 GMT
Not After : Jan 25 14:11:45 2025 GMT
Subject: CN=67827c25-a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:97:34:95:33:02:ca:bc:d4:bc:d6:c9:f4:
be:35:a7:f1:9c:78:4d:83:b6:22:55:2d:27:1b:a0:
67:ca:a2:91:f2:10:5a:15:5c:5e:c8:f0:d0:e4:d0:
d9:72:47:04:e4:b3:29:3c:6e:cd:af:a3:f7:6c:a7:
87:cd:12:c4:27:94:1c:62:9a:c8:a1:07:ff:cf:f9:
fd:6d:d8:2a:9a:70:e0:21:b7:09:2a:b9:47:52:10:
4e:cf:dc:33:67:13:98:9f:f2:85:aa:ac:05:d1:5e:
b1:53:da:50:f0:9d:51:8b:10:71:b9:d5:7e:c4:b5:
c6:b2:2e:68:df:f0:9e:05:fa:c3:a3:62:ea:a2:c6:
35:20:c5:66:f1:ae:36:92:74:30:96:3a:cf:d9:ef:
0e:07:af:75:84:f4:13:45:81:c5:68:26:a5:6e:3a:
53:59:1f:4f:f1:15:4f:dc:9c:b2:4f:bc:96:ca:b8:
a1:35:3d:3b:c1:1e:ec:a8:41:27:5e:48:ce:b5:64:
e8:5b:39:56:83:14:bc:96:de:71:53:f3:e8:b1:cf:
fd:80:1a:55:7d:61:00:fd:3a:37:b5:3d:e7:8f:3e:
ca:7a:0e:b4:80:f7:79:07:75:b4:49:f9:dc:b9:6f:
2d:e0:96:88:68:73:66:d6:d7:ec:78:fa:74:74:de:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:29:30:DD:66:33:C8:70:05:39:DB:40:09:2D:49:4B:6C:D9:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF552D32D02511EFA3EE54BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
58:f7:08:63:3a:1c:5a:34:8b:29:bb:3f:c5:23:ce:ec:3e:85:
a7:f4:21:c8:7f:d5:ad:5b:49:5f:7e:c4:c1:97:e8:c0:0b:17:
b8:2a:06:75:86:9b:a3:df:1c:de:55:53:c9:29:45:98:fe:07:
d6:78:6a:74:bb:ef:0d:c7:2c:3a:6a:28:ce:57:83:7d:ec:04:
e4:29:a8:fb:7f:77:11:c9:1d:0c:48:74:b9:cb:e5:6b:40:38:
af:ae:94:52:28:2e:81:43:cc:2e:b4:36:96:5d:12:1c:a7:34:
67:46:e1:e7:55:60:1b:d6:09:2c:59:5b:fb:b1:bb:0b:43:45:
83:72:25:82:fc:2f:5c:4d:56:fe:3d:b4:7e:44:12:0c:10:1b:
4a:78:c8:b6:d5:e2:4b:ef:f9:61:ab:56:80:59:60:7d:c9:7f:
f8:11:fb:08:e7:64:83:a0:81:9e:e8:f5:b3:a3:0c:31:06:0b:
19:c3:84:79:fa:7e:57:dd:99:0f:89:1a:57:d7:39:d9:47:56:
a3:bf:d3:09:d2:9d:65:a6:2f:97:fd:3b:08:dc:41:57:79:fc:
a7:ed:9d:3d:4f:bf:29:9f:7e:df:2c:de:2a:99:0a:79:c5:c2:
d4:62:ab:27:e1:a7:9c:88:29:5f:92:b8:4b:23:2f:70:e9:51:
14:ca:a6:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQYYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMTQxMTQ1WhcNMjUwMTI1MTQxMTQ1WjAYMRYw
FAYDVQQDEw02NzgyN2MyNS1hNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqauXNJUzAsq81LzWyfS+NafxnHhNg7YiVS0nG6BnyqKR8hBaFVxeyPDQ
5NDZckcE5LMpPG7Nr6P3bKeHzRLEJ5QcYprIoQf/z/n9bdgqmnDgIbcJKrlHUhBO
z9wzZxOYn/KFqqwF0V6xU9pQ8J1RixBxudV+xLXGsi5o3/CeBfrDo2LqosY1IMVm
8a42knQwljrP2e8OB691hPQTRYHFaCalbjpTWR9P8RVP3JyyT7yWyrihNT07wR7s
qEEnXkjOtWToWzlWgxS8lt5xU/Posc/9gBpVfWEA/To3tT3njz7Keg60gPd5B3W0
SfncuW8t4JaIaHNm1tfsePp0dN4fZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOIw
KTDdZjPIcAU520AJLUlLbNlYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRjU1MkQzMkQwMjUxMUVGQTNFRTU0QkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcnYMA0GCSqGSIb3DQEBCwUA
A4IBAQBY9whjOhxaNIspuz/FI87sPoWn9CHIf9WtW0lffsTBl+jACxe4KgZ1hpuj
3xzeVVPJKUWY/gfWeGp0u+8Nxyw6aijOV4N97ATkKaj7f3cRyR0MSHS5y+VrQDiv
rpRSKC6BQ8wutDaWXRIcpzRnRuHnVWAb1gksWVv7sbsLQ0WDciWC/C9cTVb+PbR+
RBIMEBtKeMi21eJL7/lhq1aAWWB9yX/4EfsI52SDoIGe6PWzowwxBgsZw4R5+n5X
3ZkPiRpX1znZR1ajv9MJ0p1lpi+X/TsI3EFXefyn7Z09T78pn37fLN4qmQp5xcLU
Yqsn4aeciClfkrhLIy9w6VEUyqb7
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:24 2025 by rpki-client