Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032D7EFAFCF911EF9F58198F762E951A.roa
File: 032D7EFAFCF911EF9F58198F762E951A.roa (raw, json)
Hash identifier: 6ZpQkr9MSPwvwDF9BWme+XOLJx/t9grzNn/c/8Kv/p0=
Subject key identifier: 41:C5:93:10:F2:24:39:38:80:D9:A9:76:E8:4C:A9:A8:0C:0F:E9:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01448F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032D7EFAFCF911EF9F58198F762E951A.roa
Signing time: Sun 09 Mar 2025 15:13:10 +0000
ROA not before: Sun 09 Mar 2025 15:13:06 +0000
ROA not after: Sat 29 Mar 2025 15:13:06 +0000
asID: 202662
IP address blocks: 45.196.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83087 (0x1448f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 15:13:06 2025 GMT
Not After : Mar 29 15:13:06 2025 GMT
Subject: CN=67cdb006-be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:ed:4f:96:fb:bb:83:62:05:d2:7a:21:99:
9c:45:8f:e5:55:71:e1:d1:2c:ae:f5:4a:c9:37:8a:
54:1d:bf:94:12:b0:e7:a5:53:ca:91:3a:9e:d9:4e:
6f:c7:a7:6f:25:fd:03:9a:92:87:fb:5d:8e:8e:c2:
00:22:b4:99:03:24:b0:41:19:d5:55:47:c9:a5:8a:
59:02:4b:8c:ea:d3:8c:c7:56:d5:2c:ed:c5:23:f2:
c7:39:f1:3f:79:a5:95:43:62:36:52:04:25:e6:a8:
f8:1f:d1:11:b3:73:03:bf:a2:a1:f7:33:36:97:e3:
c5:0d:bb:72:c1:c4:90:e7:1a:39:0e:b0:65:bb:2c:
f0:db:7b:4c:4f:40:5c:e1:45:ec:c4:e2:28:61:97:
e5:8a:e3:a7:97:0c:d6:7a:3d:cd:3d:7a:64:30:e7:
6a:0b:9c:d0:9b:36:c1:09:cb:49:46:31:05:ae:8f:
9a:4f:76:7b:c7:30:99:85:1a:da:7a:8c:05:35:be:
c3:68:67:3a:a4:ad:e3:ec:08:7a:e0:60:76:9d:10:
4f:80:df:df:d4:73:51:eb:37:1a:e2:55:ed:db:19:
bb:cf:6f:55:5f:3b:e7:05:78:f0:eb:ef:75:d7:4e:
c8:63:b5:70:dc:01:33:78:2e:20:10:b8:50:e3:37:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:93:10:F2:24:39:38:80:D9:A9:76:E8:4C:A9:A8:0C:0F:E9:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032D7EFAFCF911EF9F58198F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:94:79:d3:48:59:ce:15:d0:80:0a:a4:38:c3:5d:91:a6:39:
3a:af:39:3d:d5:5c:24:42:c4:b4:f1:42:8f:d5:7c:65:5e:bd:
7a:3d:11:13:e8:74:e4:3a:d4:58:9d:fa:b6:c4:0b:11:58:d7:
16:ac:8e:78:78:fd:86:c6:83:81:86:58:4c:c4:0d:13:da:dc:
f1:31:45:c2:67:73:5b:e2:78:00:1f:9d:f3:f2:be:ee:4f:16:
cb:8a:62:b3:d8:8f:96:a1:33:1c:76:10:3c:98:38:99:c7:57:
d9:1f:fe:35:bf:d0:e3:97:41:97:ec:81:90:b3:2e:10:a8:d0:
13:ff:5f:55:c5:66:dc:19:a6:b5:a2:83:f5:f5:5b:f5:f6:2c:
1a:7f:4a:94:e3:2c:94:d8:b3:07:70:31:00:f7:44:20:7e:82:
9a:29:ec:e2:6e:08:be:5c:6d:b5:67:d5:55:56:82:ca:52:06:
38:4b:15:2a:72:4a:46:75:8d:47:8b:26:f9:a5:6d:33:61:61:
06:71:bb:05:fe:99:c9:7e:7a:b6:e0:18:17:07:7a:e6:0a:b3:
7f:2e:b4:d0:f7:10:79:d6:52:e7:91:b6:53:76:6f:41:9c:bc:
b7:fa:04:d2:0f:69:58:ea:85:f0:da:44:76:c0:b9:dd:ef:fc:
08:4b:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:07 2025 by rpki-client