Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C8F628CF3611EF945FB34E762E951A.roa
File: 12C8F628CF3611EF945FB34E762E951A.roa (raw, json)
Hash identifier: 7DAoKcEpgHhSHooLPQsimbhZ6CU+h29M4xWNH4d+sXs=
Subject key identifier: 2C:0C:3C:5B:B7:1E:14:96:C5:FE:75:C5:BE:4C:8C:E4:E6:AE:53:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01052D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C8F628CF3611EF945FB34E762E951A.roa
Signing time: Fri 10 Jan 2025 09:34:22 +0000
ROA not before: Fri 10 Jan 2025 09:34:19 +0000
ROA not after: Sat 01 Feb 2025 09:34:19 +0000
asID: 39600
IP address blocks: 45.197.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66861 (0x1052d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:34:19 2025 GMT
Not After : Feb 1 09:34:19 2025 GMT
Subject: CN=6780e99e-3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:5f:f9:25:86:08:b2:66:68:69:16:f6:9a:
68:d3:50:9c:70:eb:46:86:22:a7:c6:7e:1a:ad:24:
6c:0b:48:a2:50:43:ae:e1:d1:d6:84:23:5a:6b:d9:
29:ff:2f:44:8f:79:61:be:63:a5:a9:7f:e5:50:5b:
4a:0b:a3:9d:d9:48:1d:db:27:f4:41:aa:fb:c4:d3:
25:54:5c:54:9c:03:07:ca:29:d5:4d:88:ad:f0:7d:
a7:b7:1c:c2:c2:28:76:cc:0f:70:37:5c:65:1c:ca:
9f:24:be:56:5c:e5:be:ca:3b:6f:31:67:90:97:b4:
7b:82:58:e6:fd:b8:fe:0f:04:12:17:fe:08:80:54:
cd:af:e3:99:74:98:a9:6e:db:d0:49:28:b7:d1:03:
6d:1a:b7:b4:ea:c8:61:0a:34:48:ed:c5:9b:e6:1e:
93:1e:d7:e7:a3:3f:56:58:a7:3f:f7:fa:41:bd:f0:
26:b3:61:4d:15:2d:14:8f:bd:25:a9:60:ba:ce:67:
04:71:1d:08:3c:56:47:46:4b:5e:57:40:6f:91:90:
17:39:85:0c:52:3d:ba:e7:1e:36:72:05:cb:85:9c:
ad:dc:bb:cc:d6:1d:9c:b7:dd:b9:44:b4:e1:bf:1f:
d9:d8:33:0e:06:ac:09:54:08:10:05:be:50:ba:3d:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:3C:5B:B7:1E:14:96:C5:FE:75:C5:BE:4C:8C:E4:E6:AE:53:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C8F628CF3611EF945FB34E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.232.0/22
Signature Algorithm: sha256WithRSAEncryption
35:82:57:a6:af:e4:14:95:63:39:71:66:38:67:d6:f0:aa:a5:
21:9d:f1:05:a2:bd:98:e5:03:f3:8e:74:78:d4:33:52:78:78:
ab:ce:39:ca:fe:f2:dd:ae:08:8a:85:bd:8c:e1:34:04:73:3c:
96:f7:e2:05:fb:02:93:e9:40:53:95:15:2a:d1:cf:43:46:22:
e8:03:aa:7f:de:b9:14:fc:d4:60:f4:33:a2:dd:97:30:11:11:
7c:9e:e1:dd:98:d5:5a:da:02:31:e5:9f:4a:cf:f3:82:58:4c:
8c:36:0a:24:e2:71:ba:d0:2e:e8:b7:1e:c4:a9:e6:3b:0d:fc:
3a:fc:f7:ee:21:a0:9f:3b:2a:07:b9:3f:fc:8f:66:a3:87:6b:
b8:21:cb:88:23:64:c2:e5:46:4a:06:c2:23:6d:ca:26:79:81:
71:ef:f3:0c:d6:92:39:f9:32:11:c2:fa:3c:6d:e6:fd:74:ad:
a0:d2:7a:d2:7e:73:15:ce:08:c4:f0:e5:23:13:68:8e:e0:50:
08:c3:97:fc:03:93:f8:48:90:dd:1d:73:cb:cb:74:b7:a8:5f:
c2:32:71:3e:57:f5:2a:c7:fe:48:02:3c:58:ff:f8:23:ed:ec:
7e:d7:1e:51:6e:b5:3c:91:24:c9:98:80:ba:43:64:7e:29:c2:
7e:01:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:26 2025 by rpki-client