Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D31C80EC36311EF83C34092762E951A.roa
File: 0D31C80EC36311EF83C34092762E951A.roa (raw, json)
Hash identifier: byuhr45ZOwWJqp3jpxZqk7+IEkx1Tm7ZX6sML/sJOPc=
Subject key identifier: EE:85:EA:3E:E8:12:10:7C:31:E2:0A:08:3D:68:B5:75:FC:45:BC:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D31C80EC36311EF83C34092762E951A.roa
Signing time: Thu 26 Dec 2024 08:26:06 +0000
ROA not before: Thu 26 Dec 2024 08:26:02 +0000
ROA not after: Thu 30 Jan 2025 08:26:02 +0000
asID: 984
IP address blocks: 45.195.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60541 (0xec7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 08:26:02 2024 GMT
Not After : Jan 30 08:26:02 2025 GMT
Subject: CN=676d131e-1fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a4:bf:1e:90:ea:5c:a4:13:53:d9:96:fd:83:
11:90:2f:fd:6b:74:28:40:34:20:d1:66:1c:f4:9e:
c9:45:15:60:90:e5:e6:9c:45:7e:60:a7:c1:ff:3a:
a0:e6:1c:44:7d:1e:50:35:c5:cf:54:42:5a:af:2b:
cc:08:be:c5:ef:83:cf:73:5b:72:ad:21:5a:d4:0e:
e5:20:f3:5c:23:49:43:9b:b9:a5:bc:1a:9a:fe:2d:
58:32:19:76:e2:77:cc:61:8d:9e:10:3d:ed:33:77:
4d:ef:5a:ac:74:0c:59:71:90:2d:52:54:6a:a7:d6:
c8:f9:80:ac:40:28:ce:9e:72:53:b5:e3:c5:90:0a:
58:62:68:c4:84:2f:c4:fd:28:83:54:84:fa:4d:f3:
b8:cb:f9:3a:53:bb:8f:5e:4e:e3:40:b6:6b:13:8e:
30:7d:90:be:91:7d:d8:59:26:4f:1d:d2:c7:7a:34:
88:df:43:26:65:66:8b:81:61:9c:79:54:a1:95:1d:
80:bc:eb:fe:ab:73:6c:eb:ca:48:81:65:84:20:7a:
b6:a9:6a:d7:bd:ca:da:89:cf:9c:2e:d0:50:37:f3:
86:f6:a3:0d:08:75:68:e6:75:f9:40:16:8c:d9:b4:
83:3c:a6:92:3a:1d:0a:00:2e:f0:5a:ec:bf:67:af:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:EA:3E:E8:12:10:7C:31:E2:0A:08:3D:68:B5:75:FC:45:BC:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D31C80EC36311EF83C34092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:c9:69:08:64:93:ec:c1:a8:a4:e7:1d:0b:24:33:d2:38:26:
fd:3d:db:0d:60:69:d7:f0:0d:94:87:0e:c1:07:8c:5e:19:87:
87:b2:d4:fa:b7:2f:8a:92:9b:2b:fb:6f:97:42:2a:95:19:1d:
80:55:19:50:b6:ca:33:bd:59:d9:77:67:16:d8:e8:f8:14:e1:
d4:e0:65:9a:6d:9a:98:ff:f4:3e:ad:82:2f:5b:eb:1e:74:27:
f9:77:8d:6a:92:4e:15:4e:40:0f:b6:26:c3:cd:16:d7:c4:86:
dd:e9:8b:94:a7:d9:7a:87:56:1f:f0:03:48:6d:5d:9c:34:36:
8e:50:54:22:e7:70:41:cb:d6:35:cf:14:9c:f9:3d:e8:d8:12:
8e:97:40:b8:d9:08:07:08:26:dd:61:70:a9:99:31:86:a4:d8:
6d:33:97:2d:cd:d0:dc:90:28:f0:77:d2:ef:b9:a5:c0:9a:ff:
50:18:57:0e:c9:01:1c:1d:cc:16:37:08:a6:da:19:9d:42:8e:
c5:52:91:52:61:e1:3e:99:85:d4:f7:fb:e7:26:ac:ef:e1:c0:
a9:50:68:3d:c6:c6:47:d0:a4:26:5a:c9:50:f8:0c:27:a1:0f:
f0:a5:8c:d9:69:9f:bc:f9:a2:e6:0b:33:56:4e:af:a1:e3:ce:
b3:23:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:58 2025 by rpki-client