Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012FE3C6C47911EFAD060778762E951A.roa
File: 012FE3C6C47911EFAD060778762E951A.roa (raw, json)
Hash identifier: /uQN2sRAaB0+ojAgDdc+vdEN6UW1eLzVDWw8dvKdv6s=
Subject key identifier: 0A:11:CE:18:7B:6D:F4:7A:C5:B8:23:6C:AA:81:4B:F3:FB:D1:8C:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012FE3C6C47911EFAD060778762E951A.roa
Signing time: Fri 27 Dec 2024 17:35:46 +0000
ROA not before: Fri 27 Dec 2024 17:35:43 +0000
ROA not after: Sat 01 Feb 2025 17:35:43 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61684 (0xf0f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:35:43 2024 GMT
Not After : Feb 1 17:35:43 2025 GMT
Subject: CN=676ee572-1ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:c4:d3:f3:37:e5:e3:9f:a7:b5:e3:4a:85:
fe:a6:4d:66:05:a3:0c:bf:45:0f:56:de:16:cc:5b:
57:da:6d:78:18:99:49:ba:aa:e0:14:e6:70:09:74:
6a:26:f6:b5:a4:9d:cc:5d:3f:a1:b4:cd:fc:d4:ec:
b8:87:0d:e8:87:33:3f:ca:48:f1:98:fc:c9:9b:cc:
c3:7a:34:43:f7:d0:02:79:f1:e3:eb:23:1f:27:8b:
97:e0:1b:fc:ee:27:f5:1c:0f:c9:1a:bd:22:dc:4e:
55:10:b5:fc:1f:e5:81:82:de:9d:85:52:e4:a8:80:
4f:6a:32:8b:3e:7a:03:3b:79:19:86:6f:25:c2:0e:
d2:d8:12:65:be:5e:07:6c:aa:0a:8c:39:54:f1:3d:
43:e2:b9:6e:48:f6:5b:8a:94:45:df:8e:e5:20:34:
21:75:99:7e:6c:c0:ce:89:fd:23:c5:2b:e9:83:09:
04:2e:04:5d:a0:43:6c:02:60:ef:cb:49:7c:d4:8c:
2e:df:d8:f7:b0:a1:ee:f8:c3:59:28:b5:f6:66:ca:
d9:32:33:3f:6a:8c:f2:2c:03:2a:01:fb:ac:73:47:
ce:83:de:76:02:2a:c7:47:de:54:75:9e:8d:a4:1e:
6d:70:77:d9:37:67:b4:03:3b:53:7f:a2:e6:f4:5b:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:11:CE:18:7B:6D:F4:7A:C5:B8:23:6C:AA:81:4B:F3:FB:D1:8C:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012FE3C6C47911EFAD060778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:08:6d:5e:07:7a:f3:cd:68:e7:70:e2:32:e2:ba:d2:bf:08:
6c:0d:e6:f0:f9:db:be:3d:5a:35:bc:90:a8:77:d0:24:72:b7:
c0:75:a6:2a:d8:91:fe:aa:4f:a5:ac:5d:f6:26:e5:1f:31:29:
c2:57:1e:cf:5c:c2:21:2b:f7:47:8b:7e:a3:ae:a9:cc:fa:97:
7a:3c:67:1c:c7:b8:c6:77:44:8a:6c:5e:ee:5c:f6:9d:68:29:
08:46:42:3e:9f:85:fa:de:7d:5c:1d:7a:99:16:2a:91:bd:43:
8f:cb:1d:af:ec:3e:24:96:d3:44:ff:ed:88:88:0d:03:e8:3b:
76:91:92:f3:2f:46:01:6e:40:ad:58:7d:58:c1:34:03:8c:91:
1a:40:37:f9:21:21:67:30:60:74:0d:cb:5c:89:07:22:f7:d9:
a3:96:dd:f3:0c:cf:a9:5e:4e:ed:15:76:ea:5a:a3:03:16:a4:
a9:63:f7:17:45:c6:2b:2e:85:05:ae:f1:14:08:58:2f:f0:5b:
17:dc:7e:b7:9a:39:20:e8:02:31:4e:3a:7b:de:a5:57:86:41:
b1:ce:01:3c:df:0c:0e:76:a2:3f:1b:0e:ca:47:f6:12:81:2d:
35:28:e6:d3:1d:75:b0:2b:4a:9a:a4:44:fe:a9:4c:08:77:9b:
55:53:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:12 2025 by rpki-client