Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/064ECAEEF47511EFAD3FD1B7762E951A.roa
File: 064ECAEEF47511EFAD3FD1B7762E951A.roa (raw, json)
Hash identifier: nck+x4Nw01j5Ks7BLkVvmKr/gJKOcUVYK38hkcpgZXk=
Subject key identifier: 5D:EA:F9:FD:78:BE:2D:A9:02:E9:23:D8:7C:63:FB:31:09:56:BB:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/064ECAEEF47511EFAD3FD1B7762E951A.roa
Signing time: Wed 26 Feb 2025 19:08:13 +0000
ROA not before: Wed 26 Feb 2025 19:08:09 +0000
ROA not after: Sun 23 Mar 2025 19:08:09 +0000
asID: 62240
IP address blocks: 45.192.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79579 (0x136db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 19:08:09 2025 GMT
Not After : Mar 23 19:08:09 2025 GMT
Subject: CN=67bf669d-8544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:06:3f:90:e0:90:a6:14:57:64:62:f5:14:
c6:f5:e9:c8:d2:5e:28:e2:8b:b2:6f:36:fe:93:83:
97:c7:08:0c:7a:64:c4:18:cb:e5:43:92:54:d6:5b:
ff:5e:3b:0b:b0:52:af:3e:0e:85:41:57:66:87:3b:
25:65:fa:18:9d:7c:9b:1d:84:49:55:3b:77:00:23:
5b:9b:79:bf:9e:05:f1:6a:57:37:84:e8:82:ae:74:
70:28:6a:25:90:dd:14:df:2f:57:f6:fc:9e:3e:64:
80:4e:96:be:04:bb:6c:86:0f:20:ba:a5:2c:97:ac:
b5:5c:88:3d:26:e1:0a:51:12:0a:07:6e:7f:d2:e3:
81:37:58:ee:82:c3:b0:4a:d1:b1:b0:c9:90:75:8e:
bc:5e:1e:d8:f3:a2:c5:eb:d8:b6:f6:89:83:e2:0f:
da:5e:02:4c:e9:8f:ff:12:0f:3d:9a:c2:41:48:6f:
12:0b:3f:17:d8:70:c5:a9:23:7b:0e:fc:a0:3e:04:
ed:09:43:fb:46:ef:c5:49:99:9a:20:d0:59:dd:4c:
b4:b1:29:9d:18:11:e7:aa:e4:6e:8c:c2:ca:05:53:
76:b0:e4:b5:13:9c:3f:9c:f7:de:5c:d2:7d:fe:8c:
05:90:49:1b:d4:d2:61:47:f8:38:7c:75:1b:7d:a1:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:F9:FD:78:BE:2D:A9:02:E9:23:D8:7C:63:FB:31:09:56:BB:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/064ECAEEF47511EFAD3FD1B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.35.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1d:9d:1b:8f:fc:ba:ca:c1:ec:25:d4:9f:b1:e6:89:6e:96:
76:53:2d:0d:96:b9:95:ac:ea:40:d4:1c:03:84:bc:92:4c:a9:
6b:fd:d3:f2:8b:b5:40:0f:dd:80:0f:f8:ac:b3:0f:83:8b:85:
dc:33:40:5e:bf:0a:74:e7:07:d0:09:ce:2a:01:0c:7b:fd:cd:
9c:46:42:78:d4:06:13:46:56:3e:2c:fb:b5:71:9b:3f:c3:17:
56:de:3d:01:b6:61:f7:8f:fc:c0:41:d7:3b:6c:1e:ec:91:21:
cb:a9:2e:bc:a1:d9:b3:8e:31:71:9c:2b:f8:d8:de:0c:9c:6d:
65:59:eb:1b:2b:5f:7f:79:19:e8:52:4a:86:30:b2:8e:7d:b4:
66:dd:7a:29:91:d2:31:5a:9c:8a:71:5e:78:c1:51:17:8f:2a:
6a:1f:06:47:24:fe:81:ce:f4:b2:ee:75:15:6b:7c:f4:ef:00:
5d:e2:ab:cb:9b:5d:e1:06:01:85:53:ac:7d:46:83:b6:7b:4a:
99:47:da:11:c8:1d:d0:e3:c5:bc:19:5e:53:02:f2:8b:ed:74:
83:76:e3:8e:eb:2b:ce:48:ac:63:7a:bb:24:a7:4c:84:a3:37:
ce:3b:8c:6a:a6:93:24:2f:24:58:63:ff:06:2a:e2:f4:3c:48:
e3:b2:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:50:40 2025 by rpki-client