Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0162CB5ACE8911EFB1E3CF7D762E951A.roa
File: 0162CB5ACE8911EFB1E3CF7D762E951A.roa (raw, json)
Hash identifier: Ghrm/DfhC6ehUTIsj2qtv4+ODMImZIjUt9RBKhUlcWQ=
Subject key identifier: 63:28:0B:DD:3E:1B:C6:2E:47:73:62:A7:AF:07:86:E9:23:9D:8B:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0162CB5ACE8911EFB1E3CF7D762E951A.roa
Signing time: Thu 09 Jan 2025 12:55:30 +0000
ROA not before: Thu 09 Jan 2025 12:55:26 +0000
ROA not after: Tue 21 Jan 2025 12:55:26 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66526 (0x103de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:55:26 2025 GMT
Not After : Jan 21 12:55:26 2025 GMT
Subject: CN=677fc742-0330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:1d:3f:bc:d7:41:3b:66:90:9a:90:b9:b4:
06:ca:8b:a9:e8:a7:81:98:b2:2f:b6:fd:16:de:c2:
4f:e7:3d:c1:49:4c:aa:db:41:de:a9:31:13:d7:a4:
de:78:f4:9a:c3:db:ad:71:d0:b4:8a:70:94:a3:1b:
4d:a4:28:9a:03:d2:d9:13:70:46:32:fe:d1:f7:9c:
c6:7e:97:fd:d0:7c:bc:33:b7:52:3e:0a:dc:2b:94:
f1:42:ab:7d:b5:d1:11:de:b5:0c:15:87:e4:3d:c8:
50:aa:2d:2f:12:31:d8:ad:d3:de:02:77:6f:a8:1e:
cf:a0:2c:03:03:df:b7:e4:8e:6c:19:09:08:c3:31:
22:57:15:9c:92:d6:4d:76:07:f9:47:41:04:26:6c:
ac:f3:1d:f8:ee:5a:cb:c5:40:28:8a:19:a6:9f:41:
7e:1c:03:4a:0e:fc:a9:03:22:21:d0:87:12:32:84:
8d:38:eb:7e:71:5e:6e:51:ef:66:1c:eb:b9:a1:24:
99:59:ac:5e:19:db:cf:0f:35:96:c3:39:26:9f:e7:
e0:8a:4e:67:13:2f:27:e4:1f:03:9b:83:d1:16:8f:
dc:3f:08:fc:0c:1c:5d:39:71:15:da:12:d6:9d:dd:
c1:a6:df:66:03:eb:97:6b:b5:bd:ab:2a:bf:5a:bb:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:0B:DD:3E:1B:C6:2E:47:73:62:A7:AF:07:86:E9:23:9D:8B:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0162CB5ACE8911EFB1E3CF7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
61:14:35:41:e4:df:4f:62:bd:6b:74:13:92:b7:38:4e:6e:4b:
42:31:da:97:35:63:11:84:6d:bc:06:79:39:bb:77:11:95:44:
64:bc:99:87:f2:1e:df:1d:38:13:7d:d2:72:d9:cf:92:2c:6a:
ea:9d:95:40:7e:8c:4c:4b:1f:33:6e:26:c7:54:56:66:bd:f5:
18:c5:66:8a:d1:e7:56:c5:20:61:17:9b:3c:93:55:23:94:34:
8d:1e:2c:db:d6:b3:1e:2b:fb:b8:ac:39:03:8e:61:79:a7:75:
bb:c5:a7:72:63:9a:f5:ee:f5:1f:f2:b5:62:4b:e0:81:54:d5:
5c:7f:7d:19:eb:21:a0:e0:5d:c9:36:3d:26:5e:2c:95:34:f1:
fe:1d:db:80:fc:d7:1d:fb:b5:bb:55:c2:68:a9:fa:60:8d:b5:
67:93:c6:3a:24:eb:8b:02:a1:2c:37:f8:48:39:59:2c:d3:d6:
64:fd:e2:09:18:e4:c4:59:15:c4:9b:57:68:7d:3f:0f:31:58:
a8:dd:c6:1d:e5:1c:69:ad:83:2a:f1:c6:a9:b1:39:08:18:be:
79:1f:9e:d3:cd:a1:57:a5:d5:05:9a:b6:44:7f:e7:12:b9:e4:
1b:a9:bc:b5:3d:3f:0e:47:c5:4c:98:e0:51:32:33:ff:7d:a6:
36:1d:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:18 2025 by rpki-client