Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0160D4DECAC511EF88012F7A762E951A.roa
File: 0160D4DECAC511EF88012F7A762E951A.roa (raw, json)
Hash identifier: j0TQ+nPnV9N+VP9K+RcmY4gDE7mA7sgHsfSuIqSaeZI=
Subject key identifier: A8:CF:97:74:CF:89:A5:BB:8B:53:46:6F:83:15:08:6B:D8:26:5C:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F72C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0160D4DECAC511EF88012F7A762E951A.roa
Signing time: Sat 04 Jan 2025 17:54:55 +0000
ROA not before: Sun 05 Jan 2025 17:54:52 +0000
ROA not after: Fri 17 Jan 2025 17:54:52 +0000
asID: 21859
IP address blocks: 45.196.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63276 (0xf72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:54:52 2025 GMT
Not After : Jan 17 17:54:52 2025 GMT
Subject: CN=677975ef-2189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f6:4e:9a:1d:88:14:41:4e:aa:1b:18:71:63:
46:c2:43:fb:f9:23:12:e2:69:4c:7d:21:ba:77:4b:
33:08:e5:77:22:6e:cf:8a:cf:fb:f4:e1:bc:4f:3f:
48:14:70:62:af:85:9b:53:56:98:d8:ed:d3:06:73:
0f:35:42:b6:2e:bb:44:31:f1:24:69:35:9a:74:9b:
ab:55:62:23:3a:aa:11:09:ec:92:6b:27:b1:5c:db:
48:e8:49:d4:13:f6:89:df:4a:a4:6c:01:91:59:2d:
ca:4a:80:49:ae:18:0a:57:ec:3d:8e:7b:f5:b0:fb:
72:ba:42:51:5d:7b:db:c4:7a:1a:e2:4f:10:d6:9b:
c9:d7:1f:b3:9d:d4:87:d8:98:a8:38:85:f0:55:4c:
25:8f:e6:19:5f:db:79:fd:4f:ac:7d:29:bb:2d:9a:
63:aa:a8:c8:21:9c:e5:29:19:14:c2:8d:7f:d9:45:
af:82:36:9a:f9:6d:6a:67:5c:fe:98:6e:18:45:96:
5f:d1:1f:55:bd:da:33:7f:82:5a:03:d8:69:10:39:
f2:5e:49:55:5a:ba:5e:d0:11:ea:a2:30:fb:e8:5c:
41:c0:c4:5b:8b:0a:92:69:80:ad:65:7c:fb:ff:85:
1f:72:ba:f7:4f:eb:37:88:42:eb:49:37:c3:43:d6:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:97:74:CF:89:A5:BB:8B:53:46:6F:83:15:08:6B:D8:26:5C:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0160D4DECAC511EF88012F7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.138.0/24
Signature Algorithm: sha256WithRSAEncryption
37:51:7e:a1:fc:af:71:1b:55:c2:e1:42:ff:23:9b:b1:0d:ba:
13:74:c1:92:91:d9:af:bc:45:1d:2e:b5:0a:53:0f:47:d1:17:
94:0c:4a:58:2c:fd:b5:99:75:e8:c8:de:c4:73:a0:c4:e0:0d:
bd:ff:e1:3d:99:98:01:74:27:98:b5:18:d2:1a:3a:e0:6a:56:
60:e2:5e:cc:02:24:a4:49:0c:fe:c9:67:65:8a:8b:e1:a9:bf:
4b:d4:fa:74:50:d3:b9:a8:75:ec:5f:af:97:fb:bc:68:0f:21:
91:92:28:2c:fe:a7:41:6e:11:1c:b1:9b:6c:19:62:bf:dc:c3:
a7:1f:ed:6f:f8:5a:f4:cf:69:c0:5a:7f:83:9a:4d:5a:22:1d:
f9:41:c1:db:80:c6:3e:a8:b2:21:8a:69:10:cd:80:9c:76:73:
bb:c7:67:92:4c:09:1f:46:ce:23:30:59:c8:48:05:fe:6e:fd:
62:74:d0:9e:1b:9a:d3:88:7d:2a:8b:ee:ca:08:25:28:4e:db:
be:68:f6:81:7a:41:77:20:a7:dd:2f:99:06:40:0e:d8:aa:05:
5e:45:a1:a4:1f:4b:cc:fd:35:db:6b:f5:92:44:7a:47:cc:16:
67:71:d7:84:13:d1:08:32:1e:49:bd:58:c5:ac:bc:83:c5:76:
fc:c5:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:27 2025 by rpki-client