Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243FBB9CEF9711EDA5A82C874AD9E6FC.roa
File: 243FBB9CEF9711EDA5A82C874AD9E6FC.roa (raw, json)
Hash identifier: r31RgbBV2zzjmEWruh708E1neqzsF+y9jggUXgnbWeU=
Subject key identifier: D8:AD:2C:76:B0:9D:F9:94:30:B0:57:FD:A3:E0:45:C0:6D:78:40:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2038
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243FBB9CEF9711EDA5A82C874AD9E6FC.roa
Signing time: Thu 11 May 2023 00:59:55 +0000
ROA not before: Thu 11 May 2023 00:00:51 +0000
ROA not after: Thu 25 Apr 2024 00:00:51 +0000
asID: 26617
IP address blocks: 45.195.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8248 (0x2038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 00:00:51 2023 GMT
Not After : Apr 25 00:00:51 2024 GMT
Subject: CN=645c3e0a-f023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:8a:92:04:04:14:f3:a9:b4:73:0f:50:09:
18:2d:de:d0:d0:d0:cb:02:ed:7b:11:7e:1a:2d:a9:
66:60:63:04:2f:03:45:84:8b:23:b1:6a:61:33:f5:
fb:3f:f8:17:aa:f6:27:00:18:be:66:32:ac:ac:fb:
7d:62:f4:7d:d5:5c:37:40:b9:85:34:19:fb:36:bb:
6d:81:d9:61:5e:e6:2d:76:88:b1:04:b3:02:1b:d3:
4e:cd:b4:61:25:a9:e1:9e:6e:fa:ec:d9:84:cb:05:
fa:e6:54:c0:3c:3b:30:2a:ea:b5:7c:d6:b6:b2:cd:
0e:d2:80:80:b5:ed:0b:cf:3f:38:6a:77:8e:a9:7d:
81:8c:10:b7:7b:20:2c:78:f4:20:6b:8d:85:0f:bb:
20:db:76:75:5b:5f:03:a0:17:d4:3d:2d:0a:c9:61:
50:48:86:5f:e0:9a:1e:e1:7a:9b:e1:ea:a1:55:e1:
62:29:64:3e:c7:84:ba:d5:2e:63:aa:94:c2:a9:bf:
ce:ac:67:c2:f4:c7:c5:18:e4:78:c8:de:a3:a5:2d:
db:05:18:1e:6b:76:35:03:7c:21:85:42:4a:f1:a7:
7f:0d:87:d2:f7:9a:c2:78:d2:3d:fc:66:70:4a:2a:
dc:30:55:c7:e6:fa:db:d6:35:00:b3:ab:66:64:90:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:2C:76:B0:9D:F9:94:30:B0:57:FD:A3:E0:45:C0:6D:78:40:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/243FBB9CEF9711EDA5A82C874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f8:e0:b9:d3:9d:9a:f4:95:85:17:75:aa:dc:fb:4e:e4:f9:
e3:20:37:5f:6f:d3:b9:09:d9:e3:21:b3:68:4a:ad:d6:ec:02:
66:f5:02:36:9b:b9:59:d9:4c:02:fb:ad:20:2b:af:9a:7c:28:
79:c8:d9:08:49:e7:04:6f:7e:83:60:df:5c:0d:e2:6b:5d:f2:
5f:cb:4d:c7:55:4c:9d:2b:ef:c7:79:fa:ac:78:b4:ad:0a:84:
00:3e:e9:e6:6b:9a:74:c8:72:03:ff:39:a1:7d:38:55:6c:43:
54:25:3d:cb:bc:67:c5:c9:58:93:0e:39:79:18:11:2c:d2:03:
8a:5f:b1:5c:e1:0c:85:37:29:15:c7:d0:4e:97:be:ad:59:89:
bd:a2:c2:bc:64:b3:c6:82:ab:fa:b0:f5:a4:69:2e:1a:47:22:
bd:89:45:07:d8:67:f8:ce:da:d8:45:7b:fc:d4:07:a5:cf:c1:
f4:fc:e4:9a:0d:eb:1b:08:58:dc:03:f5:a4:5c:6f:4c:83:fa:
f0:c8:53:74:c4:83:30:09:38:c7:6b:22:f2:82:b2:7a:85:81:
2f:b6:78:58:27:e8:16:79:14:c4:73:a0:2f:90:1f:50:17:78:
2b:80:52:e6:e3:de:7e:a7:5d:64:5b:ee:35:ae:6c:07:c3:8b:
01:59:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:40:19 2025 by rpki-client