Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C81CFE413CE11F0B99AC56B762E951A.roa
File: 8C81CFE413CE11F0B99AC56B762E951A.roa (raw, json)
Hash identifier: YpQaf5+UNGa/3D2Trbq+ZWLAAqMG2gDTZx93jcneIio=
Subject key identifier: A9:A5:11:D4:A7:AB:99:87:9A:DD:34:44:28:7A:FE:F3:01:56:81:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C81CFE413CE11F0B99AC56B762E951A.roa
Signing time: Mon 07 Apr 2025 16:37:09 +0000
ROA not before: Mon 07 Apr 2025 16:37:05 +0000
ROA not after: Mon 12 May 2025 16:37:05 +0000
asID: 137899
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84628 (0x14a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 16:37:05 2025 GMT
Not After : May 12 16:37:05 2025 GMT
Subject: CN=67f3ff35-cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:cf:18:a0:bf:84:69:b7:de:c7:c1:3b:bc:
26:6e:3a:b2:6f:36:e4:44:e2:d2:eb:24:e2:b9:b5:
1b:93:31:b6:63:14:ba:8b:ed:39:9b:6d:da:5b:4a:
e4:a9:3e:24:3a:4a:69:8f:dd:3c:b4:cb:72:dc:33:
24:5d:4d:7a:16:6a:29:b1:3a:9d:dc:22:a5:b2:4e:
e9:b7:24:27:3c:fb:b1:b9:98:c7:8b:2f:a1:a1:87:
7a:19:16:08:45:09:0c:d3:93:65:78:f4:97:47:27:
30:84:16:1b:56:80:1b:34:f2:45:a9:3d:d0:82:f8:
75:d0:ea:0f:0f:7a:8e:eb:17:19:95:7a:44:c3:46:
b7:63:cd:42:68:4d:fd:ae:dd:a4:4d:16:a6:f2:6d:
d9:06:22:58:53:d3:3e:16:bb:05:ad:ed:49:fb:c0:
c6:66:d7:dd:d7:9e:21:a6:7b:0f:f0:ec:ec:f9:f1:
c6:d7:ed:90:30:85:08:31:1e:3f:94:35:3e:a6:cc:
68:27:00:c3:8a:57:d8:3b:b0:0d:6c:6b:3b:cb:a0:
cf:5e:f8:8c:32:f2:3d:64:96:ce:cf:a2:f0:99:26:
39:5e:7a:7c:64:e7:2b:fc:0f:96:a6:3c:0a:60:68:
44:17:2b:65:a8:98:11:bf:30:e3:ef:b6:24:1d:61:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A5:11:D4:A7:AB:99:87:9A:DD:34:44:28:7A:FE:F3:01:56:81:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C81CFE413CE11F0B99AC56B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
51:50:2d:19:c8:ea:32:ad:20:08:27:1a:d7:1c:e7:42:65:36:
03:b9:48:89:8a:d9:4d:47:04:93:d8:35:e2:f1:c5:fe:ac:96:
9b:43:6a:9f:a5:ef:52:1c:89:c4:36:5b:f6:1d:95:2c:52:da:
95:07:93:d0:eb:79:37:f4:25:0d:32:35:66:90:8c:dc:c2:18:
c5:24:13:da:43:9f:ad:56:98:19:df:84:d4:7b:d5:af:95:cf:
8f:c0:20:21:fa:02:8b:64:24:e2:03:6b:d3:1d:e0:b6:af:b8:
c2:0f:56:92:29:92:f4:5e:26:9a:19:b8:0a:ec:17:b2:da:93:
6e:1e:05:2d:fa:37:45:48:9e:a1:09:b2:d1:dc:c4:c2:7f:65:
a7:7e:fb:4c:93:5f:82:67:53:cd:36:d9:76:b2:9a:23:10:3d:
e1:38:b5:75:59:08:66:46:c8:67:6d:6f:84:f1:a9:92:61:cd:
82:00:2b:25:fd:80:f6:a7:bb:78:f8:1f:81:82:56:58:bd:77:
ff:4c:a1:46:18:db:cc:53:e7:c9:12:ba:39:d0:b9:49:da:ad:
85:5e:0b:d2:67:ed:c3:6c:66:a6:d1:a7:a9:ce:46:59:51:d6:
55:f8:41:38:1a:85:9c:71:64:eb:0b:df:e0:12:f0:c0:53:68:
af:a5:03:da
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUqUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTYzNzA1WhcNMjUwNTEyMTYzNzA1WjAYMRYw
FAYDVQQDEw02N2YzZmYzNS1jYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvzHPGKC/hGm33sfBO7wmbjqybzbkROLS6yTiubUbkzG2YxS6i+05m23a
W0rkqT4kOkppj908tMty3DMkXU16FmopsTqd3CKlsk7ptyQnPPuxuZjHiy+hoYd6
GRYIRQkM05NlePSXRycwhBYbVoAbNPJFqT3Qgvh10OoPD3qO6xcZlXpEw0a3Y81C
aE39rt2kTRam8m3ZBiJYU9M+FrsFre1J+8DGZtfd154hpnsP8Ozs+fHG1+2QMIUI
MR4/lDU+psxoJwDDilfYO7ANbGs7y6DPXviMMvI9ZJbOz6LwmSY5Xnp8ZOcr/A+W
pjwKYGhEFytlqJgRvzDj77YkHWGjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKml
EdSnq5mHmt00RCh6/vMBVoGNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzgxQ0ZFNDEzQ0UxMUYwQjk5QUM1NkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcBgAwQFLc/AMA0GCSqGSIb3
DQEBCwUAA4IBAQBRUC0ZyOoyrSAIJxrXHOdCZTYDuUiJitlNRwST2DXi8cX+rJab
Q2qfpe9SHInENlv2HZUsUtqVB5PQ63k39CUNMjVmkIzcwhjFJBPaQ5+tVpgZ34TU
e9Wvlc+PwCAh+gKLZCTiA2vTHeC2r7jCD1aSKZL0XiaaGbgK7Bey2pNuHgUt+jdF
SJ6hCbLR3MTCf2WnfvtMk1+CZ1PNNtl2spojED3hOLV1WQhmRshnbW+E8amSYc2C
ACsl/YD2p7t4+B+BglZYvXf/TKFGGNvMU+fJEro50LlJ2q2FXgvSZ+3DbGam0aep
zkZZUdZV+EE4GoWccWTrC9/gEvDAU2ivpQPa
-----END CERTIFICATE-----
Generated at Mon May 12 19:51:32 2025 by rpki-client