Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249B2ECACE8711EF9AD34071762E951A.roa
File: 249B2ECACE8711EF9AD34071762E951A.roa (raw, json)
Hash identifier: xB9TRSPHhQCzPr8nVniJAN41gcqix7sCS8EEy2gtjNQ=
Subject key identifier: F1:21:35:C9:3E:38:66:77:60:2D:71:C2:49:B6:7E:A8:B2:48:3D:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249B2ECACE8711EF9AD34071762E951A.roa
Signing time: Thu 09 Jan 2025 12:42:10 +0000
ROA not before: Thu 09 Jan 2025 12:42:07 +0000
ROA not after: Tue 21 Jan 2025 12:42:07 +0000
asID: 137899
IP address blocks: 45.192.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66514 (0x103d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:42:07 2025 GMT
Not After : Jan 21 12:42:07 2025 GMT
Subject: CN=677fc422-5122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:8e:b6:8c:b1:8e:ab:93:7d:87:7d:20:29:
66:70:1b:c6:cf:88:1a:b6:24:21:6a:a0:94:40:0a:
4d:d5:e4:d0:7e:f4:ac:03:91:11:88:9a:1f:a2:aa:
47:2e:c0:70:67:1e:7d:19:b8:4f:83:2e:b5:4a:31:
01:0a:85:59:2c:31:21:b8:1e:ae:b8:82:5a:94:96:
a5:b7:4a:7a:73:7a:e3:70:7d:3d:0a:da:5a:03:c8:
39:68:3a:8e:ed:d6:04:22:58:ed:ea:41:14:35:e7:
37:b9:5d:7f:4e:8b:db:d9:a1:d5:0e:cf:6f:da:61:
76:ac:aa:12:63:0b:60:70:22:ec:94:4e:fd:20:1d:
f4:ed:aa:7c:af:a1:c1:74:e2:d0:d0:b0:7c:f3:c0:
8c:1a:ef:e7:f2:ac:ac:2a:e3:d5:c4:0a:a8:ec:46:
d8:d4:14:5e:2c:e9:cd:31:64:c6:24:b3:f2:4d:62:
24:ce:19:8a:00:07:19:da:1c:1c:bd:95:e8:95:1a:
0f:0f:00:83:61:ee:2c:49:b5:49:e5:5c:37:20:71:
fb:dc:a5:fd:4c:73:63:3a:57:12:2b:0e:89:ab:6c:
d1:0d:ad:f4:ec:70:1e:14:56:4a:05:53:ce:d7:00:
e3:54:48:ad:ac:80:59:1b:44:85:15:64:eb:4f:1b:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:35:C9:3E:38:66:77:60:2D:71:C2:49:B6:7E:A8:B2:48:3D:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249B2ECACE8711EF9AD34071762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:1d:7c:40:3b:ab:15:cd:b1:dd:61:95:06:7a:d7:6f:82:47:
e2:25:7f:c2:18:b5:48:6d:d3:9e:a3:bf:02:ff:93:29:ac:41:
9a:c5:a7:13:71:0a:b9:57:c7:d9:7c:55:8e:40:84:f7:f1:49:
87:e5:0e:6f:90:48:c1:bf:0a:9b:31:09:a9:3f:97:47:07:75:
87:7f:2f:60:d9:c4:56:03:e1:4e:b7:21:6f:cf:f5:23:f8:95:
1c:03:a0:d1:17:76:be:a0:4c:f8:c9:14:0a:11:ee:4c:7c:97:
3d:7f:5d:28:4f:80:be:e8:a7:28:ad:31:f2:08:3a:8d:52:09:
48:f0:57:3e:97:d9:1d:ad:d3:9a:d6:88:d9:b0:43:48:e3:df:
a6:40:e1:41:be:40:2f:30:e9:11:b5:67:b6:58:ce:a8:4d:3d:
25:b7:06:0b:8d:c9:07:a2:7c:cb:09:75:f0:90:dc:78:aa:47:
3a:ec:eb:00:96:0c:d0:f5:1f:47:27:b8:88:49:fe:ff:e5:69:
0d:78:93:bb:e5:17:f5:1e:ed:7c:eb:c2:d6:65:22:a3:d0:fc:
be:76:e1:5a:0b:e7:56:8b:61:02:ea:f0:3f:23:a7:65:ca:f5:
b0:0e:f0:76:36:98:37:0b:42:d8:5c:12:2e:8c:80:1d:85:63:
38:1e:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:39 2025 by rpki-client