Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B62A66EF60E11EFA6CD0CB0762E951A.roa
File: 0B62A66EF60E11EFA6CD0CB0762E951A.roa (raw, json)
Hash identifier: dddY5fzJ7A1wldgKM8YCC2CHgExOpPw7UZmsK49chbU=
Subject key identifier: F4:8F:BA:27:0D:9C:04:48:94:29:0D:C2:FE:1F:D1:8B:00:C1:91:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B62A66EF60E11EFA6CD0CB0762E951A.roa
Signing time: Fri 28 Feb 2025 19:56:07 +0000
ROA not before: Fri 28 Feb 2025 19:56:02 +0000
ROA not after: Sun 30 Mar 2025 19:56:02 +0000
asID: 138995
IP address blocks: 45.192.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81688 (0x13f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:56:02 2025 GMT
Not After : Mar 30 19:56:02 2025 GMT
Subject: CN=67c214d7-9cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:c4:30:53:bf:bd:50:96:45:9b:4a:25:28:
34:f7:d4:b6:7f:46:67:41:c0:1d:b3:d3:88:0b:5b:
d6:55:4a:2c:d5:f3:3b:59:a3:3c:16:a7:ef:a0:7d:
2a:8e:c9:c4:08:56:24:02:99:bf:e5:65:b1:8b:70:
59:fe:9b:78:0b:2b:04:99:19:d7:3f:98:fd:93:60:
41:b9:b8:4a:54:8f:b9:bb:41:6c:0f:ef:fd:82:bb:
18:e3:c3:47:9c:a5:3b:d9:46:f3:a2:bd:75:be:eb:
dc:ab:25:86:f9:f4:81:cf:aa:86:cc:7e:1d:6e:37:
af:a5:4f:4f:a4:e4:02:ac:f3:0a:ee:79:37:55:02:
c3:81:8a:88:f4:ec:ea:7e:29:d7:fe:00:c2:81:4b:
2d:db:44:d9:86:36:9d:4e:6d:2d:9e:60:a6:bd:4d:
b5:45:55:09:63:d8:c9:7f:51:d6:21:71:e3:f7:17:
c0:20:5f:89:bf:e9:76:c6:0a:be:13:a0:7b:c9:95:
49:36:60:a1:d7:5b:f1:ce:54:df:c6:eb:9f:b9:aa:
42:ea:af:17:d1:0c:b9:a6:50:75:0c:63:ad:3e:0e:
31:89:7e:9c:d3:e2:04:ae:a5:ed:e6:0a:23:85:2d:
55:2e:7f:b6:5f:f0:51:e1:a4:b1:4a:96:30:4a:8a:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:BA:27:0D:9C:04:48:94:29:0D:C2:FE:1F:D1:8B:00:C1:91:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B62A66EF60E11EFA6CD0CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:92:12:e1:31:30:d5:42:67:f5:31:02:08:f2:c2:2d:7c:5b:
d3:ec:41:f2:8c:52:99:9c:b1:d7:7d:de:6d:28:a6:cd:e2:fb:
5f:c0:bb:c9:7e:a8:bf:e6:c9:04:f0:56:62:30:68:ca:4a:1c:
d3:d0:48:35:1e:01:5d:c9:24:3d:c5:8a:16:dd:53:96:6e:78:
27:80:57:79:b1:d7:3b:ba:2a:c6:46:21:34:fa:31:80:82:3f:
b7:5a:35:36:64:ed:25:30:24:05:f5:c5:67:9c:f6:9d:c1:c1:
9b:46:28:23:ca:06:75:98:a1:a2:31:fa:14:99:92:82:65:bc:
a0:96:58:b1:a0:94:ec:49:b0:33:1c:1f:f5:bd:1c:0e:64:19:
41:8a:58:cd:24:0f:07:cb:cf:a9:15:96:e1:56:41:f2:12:3a:
93:95:55:00:b3:a6:f9:6c:cf:11:a6:ca:d3:09:56:9e:38:04:
77:84:e8:59:f1:89:a2:47:a2:bc:81:77:db:14:28:63:f2:1d:
e3:4e:e5:2a:bb:a6:58:88:98:6d:c6:99:19:e4:f8:a4:67:c4:
98:23:4c:70:4e:27:9a:e4:f3:2a:bc:13:e4:49:26:cf:45:19:
9d:05:84:f2:a3:92:02:24:cb:2b:c3:de:4d:8b:9f:e8:b2:e5:
84:19:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:09:40 2025 by rpki-client