Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17F4850AF5BE11EF9C056294762E951A.roa
File: 17F4850AF5BE11EF9C056294762E951A.roa (raw, json)
Hash identifier: 61ClOGu2pPMZEkEbgYbRpEyHZ+pbtJ/oW1Z0D9d6je4=
Subject key identifier: 52:BA:B9:CB:FB:19:E6:EB:C0:39:31:BC:DD:46:04:A0:42:48:03:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17F4850AF5BE11EF9C056294762E951A.roa
Signing time: Fri 28 Feb 2025 10:23:47 +0000
ROA not before: Fri 28 Feb 2025 10:23:43 +0000
ROA not after: Sun 30 Mar 2025 10:23:43 +0000
asID: 138995
IP address blocks: 45.192.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81167 (0x13d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:23:43 2025 GMT
Not After : Mar 30 10:23:43 2025 GMT
Subject: CN=67c18eb2-ef0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:34:61:5f:0b:d5:17:5e:9c:9b:e8:42:68:
de:43:21:0d:66:ba:cb:c5:fc:20:5c:3e:01:42:78:
88:6c:bd:eb:6e:da:f9:26:54:c2:42:52:49:24:aa:
f7:b9:59:57:e5:5d:0c:f5:e6:39:0e:3e:6e:55:91:
cf:f5:39:38:80:65:08:d6:8b:00:41:1d:a2:14:e9:
d3:85:83:2d:d3:be:3a:de:c2:e1:62:f3:9a:36:11:
d9:41:19:93:0a:89:0b:c3:d8:01:24:fe:13:58:50:
5f:ab:6d:e8:d8:1d:1f:8e:0d:e9:40:97:26:8a:26:
19:0d:c7:f5:f3:c9:29:0f:be:5c:d7:f4:bd:4c:6b:
64:fb:56:b1:6b:53:ab:1b:ac:44:59:6b:57:14:4d:
b3:39:9e:aa:d8:0a:d6:82:24:1e:09:50:7e:af:b3:
e4:b4:6c:d1:72:63:44:70:0d:8a:89:b8:8a:73:33:
9c:88:e3:f8:2d:b8:ae:dd:a1:e6:96:9b:93:1d:a2:
d7:ba:fb:58:c9:a3:35:6d:9b:8c:a8:4b:e9:cb:08:
96:19:0b:2b:e5:b3:b7:53:8c:f8:d0:09:50:6b:c8:
f1:07:0a:7b:ea:c6:c2:32:24:93:22:1e:66:26:ba:
c6:da:56:1d:9a:2c:fa:1e:bf:50:62:a9:1a:05:89:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:B9:CB:FB:19:E6:EB:C0:39:31:BC:DD:46:04:A0:42:48:03:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17F4850AF5BE11EF9C056294762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:87:b0:05:f9:1e:7f:11:30:bf:63:e9:85:e2:1d:c5:fb:62:
ab:87:6e:f0:0f:e5:09:50:ab:9a:81:8d:e8:f9:d6:eb:b4:52:
c1:ef:f7:43:37:5e:ab:79:61:01:01:ac:f2:88:1b:7b:34:15:
bd:f5:f1:e4:12:74:09:d3:15:ec:a2:0c:bb:a1:bc:e1:d9:e0:
83:e1:a3:9c:a9:fc:a0:b6:42:00:1e:0a:38:b0:02:a4:67:e6:
cb:41:bf:08:39:a2:46:ef:a1:fd:85:be:83:52:43:9c:dd:60:
9b:6b:be:91:44:8e:e0:49:f3:4b:bf:01:4f:79:59:b2:a8:60:
cb:64:98:82:1c:a6:17:44:bf:42:36:5e:68:07:28:d9:f0:50:
b2:3c:8d:f5:95:18:74:3b:49:b1:07:29:01:a5:7d:9c:ef:f5:
11:b0:f5:c6:23:32:7d:f3:b9:fb:8a:8c:ec:c7:db:66:83:06:
f7:c2:9f:97:f5:cb:2e:43:67:06:15:6c:ef:0d:e3:3e:10:b9:
dd:50:79:e4:a7:42:33:5e:90:e9:84:85:f0:35:07:42:41:7d:
6d:c2:9f:10:e1:bc:1a:e6:4b:0e:aa:70:ac:37:47:89:98:9d:
10:74:55:18:23:bd:58:9d:b9:7c:4a:b4:04:83:17:03:da:60:
97:77:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:09 2025 by rpki-client