Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DB8ED4F87711EFB9A8F595762E951A.roa
File: 14DB8ED4F87711EFB9A8F595762E951A.roa (raw, json)
Hash identifier: JBm4gCX9g7M2wVwi2andF6wiuVH06G17jEa6QzcqPYc=
Subject key identifier: 3F:D9:E1:E3:E0:DA:B7:D4:8A:F3:E0:57:C2:C0:9E:81:EF:A5:B6:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01426B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DB8ED4F87711EFB9A8F595762E951A.roa
Signing time: Mon 03 Mar 2025 21:33:01 +0000
ROA not before: Mon 03 Mar 2025 21:32:56 +0000
ROA not after: Sun 06 Apr 2025 21:32:56 +0000
asID: 20473
IP address blocks: 45.195.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82539 (0x1426b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 21:32:56 2025 GMT
Not After : Apr 6 21:32:56 2025 GMT
Subject: CN=67c6200d-07f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:b5:30:db:5c:a4:ee:0e:b6:66:91:3c:1a:
2a:d2:0f:5a:79:c7:dc:a1:3f:40:18:6b:25:13:b3:
52:3e:37:b2:aa:49:39:37:78:4c:cc:6f:ac:e2:67:
f9:46:49:2b:9d:e9:80:30:fa:88:1c:1b:cb:b7:fe:
1b:2f:8b:f1:d1:3a:89:b5:6c:6a:04:60:15:bf:28:
53:cb:bb:13:22:41:95:52:36:9c:7e:fd:26:44:85:
d9:4f:eb:12:87:71:07:e7:ab:2e:07:d5:5b:5c:08:
cf:b5:24:e9:da:9c:51:86:63:4f:bc:15:4f:ab:cf:
60:e7:73:6c:ef:96:9c:41:5f:46:3b:67:03:3f:4e:
50:d3:6d:72:2d:15:56:ea:dc:1d:88:4d:ce:55:b4:
45:c5:97:bf:1e:c5:e0:fd:af:99:76:94:9c:8e:f4:
24:f2:9c:96:88:8a:df:be:20:70:f0:4d:0f:ef:ec:
41:27:50:42:f5:e4:85:14:52:f9:05:c1:e8:16:8c:
31:b3:d8:3f:ea:84:14:40:1b:82:53:ac:65:6c:a4:
0c:da:ca:cd:f5:be:5b:e2:25:d1:98:3e:d8:ca:20:
fb:e8:82:b2:43:77:1d:44:ef:b9:66:13:0d:bb:1e:
e0:1c:09:fc:27:42:fd:fd:38:29:96:c4:b6:5f:ca:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:E1:E3:E0:DA:B7:D4:8A:F3:E0:57:C2:C0:9E:81:EF:A5:B6:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14DB8ED4F87711EFB9A8F595762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4f:7b:9f:0a:2c:99:7c:f6:79:e5:32:f1:09:f5:1f:69:8c:
8f:6c:b6:f1:be:eb:72:9d:90:7a:92:cd:d1:8c:14:2a:c6:65:
54:5c:fc:ec:5a:9e:0f:c4:f7:5a:30:28:b3:cc:9d:51:c8:fc:
12:f5:5c:a3:ab:52:ca:87:4e:f9:7c:09:41:1f:64:86:61:ac:
49:51:f3:d5:ac:01:c1:7a:e9:09:47:68:6b:cf:23:20:ed:a9:
53:ab:76:f1:5d:7e:63:4b:1a:bb:53:2c:66:b4:75:6f:dd:81:
3d:11:71:51:b4:98:f0:a6:85:b5:39:ab:d7:54:30:1c:e7:39:
1e:84:bb:e9:60:31:e8:fc:1c:38:8f:60:40:a4:55:e4:5d:eb:
e5:65:24:d8:0d:d9:b6:81:9d:1e:d1:2a:07:73:90:84:e4:27:
15:7f:a2:21:e8:e4:c6:ff:c6:45:af:58:31:8a:50:e8:9f:71:
91:25:26:5e:6e:25:6b:dd:ca:16:42:05:39:d5:1a:08:b9:c9:
66:11:65:f3:f5:db:2d:0c:bc:3f:c4:6e:8f:ef:e4:1f:c7:9d:
6a:6b:82:b4:60:c5:1d:58:65:c5:b9:85:60:26:3b:31:22:87:
32:e5:6c:3f:18:f9:6c:93:90:05:00:0a:2c:34:5d:cc:36:21:
c4:df:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:36 2025 by rpki-client