Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB16A6F47A11EFB33D495B762E951A.roa
File: 10EB16A6F47A11EFB33D495B762E951A.roa (raw, json)
Hash identifier: 51VTO71KU5SQCYbzWUthFW55bdFxCf81ImDZ7va1yIA=
Subject key identifier: A4:AF:76:CE:28:CF:8C:55:B1:1F:AF:69:33:4B:1E:97:BF:20:75:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01372D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB16A6F47A11EFB33D495B762E951A.roa
Signing time: Wed 26 Feb 2025 19:44:18 +0000
ROA not before: Wed 26 Feb 2025 19:44:14 +0000
ROA not after: Sun 23 Mar 2025 19:44:14 +0000
asID: 62240
IP address blocks: 45.192.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79661 (0x1372d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 19:44:14 2025 GMT
Not After : Mar 23 19:44:14 2025 GMT
Subject: CN=67bf6f12-71e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:72:ce:f9:c4:d5:c8:4a:86:77:1c:55:7f:
89:6b:70:7e:95:98:4a:c1:31:33:b6:1e:25:4c:e9:
47:f2:a4:14:dd:4e:5b:93:2b:09:28:0a:81:1d:44:
2e:b2:cd:e5:f6:df:3e:a8:36:bc:55:6a:15:c8:42:
5c:4a:10:82:a8:ca:95:8a:4d:33:ea:93:b2:8e:b4:
61:0b:ce:9e:cd:c1:0e:f7:c9:ea:df:f6:7d:bd:20:
8a:1f:e4:2f:6c:df:c4:b2:4f:a1:0d:e4:3c:56:8d:
69:17:a9:0d:35:a7:89:1c:c2:a6:c8:a5:48:95:d3:
20:8d:ce:86:f7:80:74:1a:7f:d4:b4:bf:42:d8:22:
fc:d1:41:55:ce:4e:97:0c:8d:d8:83:d7:54:c4:e9:
be:63:c7:a4:a1:6b:fb:1f:ae:93:a2:36:de:6f:20:
df:6f:23:1a:5a:6d:98:ec:2b:64:ff:1c:06:a2:85:
8d:17:39:c0:8f:3b:3a:68:89:0d:7e:37:1d:96:6b:
fb:fa:18:6d:d8:80:4f:f8:14:0c:26:67:07:bd:82:
7d:0f:2b:05:8e:38:90:80:6f:d2:bd:5c:11:68:09:
bf:a9:eb:cb:7c:22:47:6d:17:93:9f:68:fd:d4:7f:
5d:12:49:89:66:72:78:fa:b6:83:9c:80:c8:94:22:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:76:CE:28:CF:8C:55:B1:1F:AF:69:33:4B:1E:97:BF:20:75:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10EB16A6F47A11EFB33D495B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.41.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d3:f9:7e:f0:bb:d2:05:6d:fe:ce:8a:ec:b2:cb:49:d5:16:
56:6a:7b:22:a0:ea:c8:5a:b6:60:5a:b7:2b:14:24:23:0b:d8:
91:11:10:9e:ac:23:6b:73:fa:f3:0f:9d:51:65:5d:fc:1b:16:
8b:37:15:af:3f:9a:fa:a6:cd:bf:1d:a0:1c:42:8a:8d:fe:60:
a3:25:05:4c:6f:7b:19:47:20:c1:4a:b9:ec:2a:ba:d5:d9:6b:
ca:09:71:8f:f1:9b:3d:38:b0:a4:cf:d8:80:1f:1b:9e:7a:e2:
6a:1b:af:e3:ec:1b:53:e9:bb:a7:68:fb:6c:9a:c9:ce:98:33:
26:73:5d:2f:2a:a4:75:81:2a:37:8f:5b:bd:25:6d:30:a0:2d:
aa:09:fa:24:70:61:8a:31:2b:42:a3:6d:36:ae:89:af:bd:5a:
a4:55:48:56:31:fd:87:6e:34:16:7e:1c:e3:a4:8e:51:2d:03:
5a:74:50:fd:53:dd:af:c5:b2:3e:b4:3b:b8:c2:c8:64:36:65:
2b:09:0f:43:6e:9d:3b:29:ac:70:e8:be:50:1e:d2:60:80:3a:
1a:9c:73:e8:8b:da:c6:45:12:81:c8:a1:d5:6e:61:36:4f:5a:
be:88:a0:30:e4:37:d7:25:4f:32:d2:f3:70:2c:0a:fe:74:c6:
96:d5:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:54:31 2025 by rpki-client