Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C50C4D6094611F0B03A0A67762E951A.roa
File: 3C50C4D6094611F0B03A0A67762E951A.roa (raw, json)
Hash identifier: x8DSaxuCC72z6LEk0sDJkAqJKCMJ1gPq0iqvYz1eYp0=
Subject key identifier: 03:B1:A5:94:13:01:24:A8:8D:DD:15:FF:98:5E:15:0D:22:8B:EE:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C50C4D6094611F0B03A0A67762E951A.roa
Signing time: Tue 25 Mar 2025 06:56:11 +0000
ROA not before: Tue 25 Mar 2025 06:56:08 +0000
ROA not after: Thu 03 Apr 2025 06:56:08 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83939 (0x147e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 06:56:08 2025 GMT
Not After : Apr 3 06:56:08 2025 GMT
Subject: CN=67e2538b-c934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:44:9a:ee:c7:06:0b:82:5b:f7:eb:19:38:
f8:ae:fc:5c:b9:80:bd:cd:40:52:53:bc:0d:fd:cc:
7f:59:48:c9:6f:7a:f4:75:20:6e:96:23:7d:c2:25:
00:4c:ba:1e:6d:77:33:2b:66:ff:14:e4:1c:c7:be:
88:19:e0:be:37:bc:90:df:a5:cb:8f:79:30:41:44:
92:60:33:ac:81:d8:12:d3:84:0b:37:a8:25:1d:48:
eb:7b:ed:1d:48:dc:30:fe:c0:c8:c5:65:9c:9f:f3:
4b:5a:90:23:40:1d:a5:84:fd:32:f4:bc:69:6b:72:
b7:29:42:fa:d3:ae:99:78:ac:d9:39:33:cb:22:49:
14:84:c1:cd:4f:ab:1c:61:64:e0:d1:aa:af:ec:38:
d5:14:46:5a:fa:da:15:52:8b:58:9b:b0:ba:dc:77:
a3:9f:f8:35:3a:42:26:92:e0:f9:59:96:21:cf:26:
73:cf:3b:7f:48:68:0c:58:fd:64:2f:3c:78:75:2b:
f8:f4:cc:df:dd:52:c4:8a:6a:48:1d:5d:93:93:02:
14:62:2f:68:62:01:30:cc:1e:39:a2:16:0b:38:d8:
2f:af:b7:df:1a:25:da:a8:f2:50:e7:15:7e:dc:5a:
26:1b:ae:70:2d:55:26:a1:5e:93:21:da:00:74:5b:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:A5:94:13:01:24:A8:8D:DD:15:FF:98:5E:15:0D:22:8B:EE:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C50C4D6094611F0B03A0A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
a8:0d:4c:37:4c:69:90:bd:31:aa:28:f5:c2:53:98:3c:31:a7:
ec:8c:14:e7:29:6d:87:2b:8b:8c:c5:7c:a2:b8:0c:b0:30:cf:
3d:e2:f1:36:20:89:b4:06:c3:45:97:49:df:b3:96:aa:8d:ab:
08:a1:bb:a0:19:f5:3e:70:51:6e:f5:4a:93:b0:6e:08:11:55:
76:1a:6f:a9:29:f4:67:59:49:8d:72:00:9e:05:f8:f7:1e:a1:
9c:6e:de:50:78:cf:83:b7:dd:e5:ff:34:21:dc:b2:85:f7:a5:
0f:98:f6:f4:95:29:01:bf:eb:99:9f:ba:a6:75:a5:11:61:12:
34:dd:0c:3c:62:67:a1:aa:db:d5:1b:16:f8:01:0f:e8:49:64:
08:d6:30:b1:90:7d:36:6a:92:49:84:e9:89:4d:98:72:1c:ff:
11:ee:fb:83:b9:a5:86:17:9d:04:8b:cf:c3:c3:3d:2b:de:aa:
dd:53:db:1a:e4:be:b1:f6:9b:22:2b:12:86:e9:35:90:56:11:
cc:aa:a2:a6:cf:c0:d4:e9:58:34:8e:a1:9d:3e:b1:16:a4:40:
af:04:c5:1c:a3:ae:de:4c:74:5f:62:1e:56:97:66:3e:56:9a:
6a:d9:7d:c0:09:c1:d7:b7:46:00:26:6b:50:78:f5:e5:b7:95:
30:53:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:37:43 2025 by rpki-client