Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A51D743C6E11F0A308CBC9DAE4EC9C.roa
File: 27A51D743C6E11F0A308CBC9DAE4EC9C.roa (raw, json)
Hash identifier: tkQFCgzBKf9PwiITVLde357vdNKBzwQFTwCyEc6bm80=
Subject key identifier: 53:4A:CC:B6:2D:48:82:D1:95:09:78:5C:81:CD:2D:C9:5F:A9:D5:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01589E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A51D743C6E11F0A308CBC9DAE4EC9C.roa
Signing time: Thu 29 May 2025 09:20:26 +0000
ROA not before: Thu 29 May 2025 09:20:21 +0000
ROA not after: Mon 02 Jun 2025 09:20:21 +0000
asID: 212552
IP address blocks: 45.195.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88222 (0x1589e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 09:20:21 2025 GMT
Not After : Jun 2 09:20:21 2025 GMT
Subject: CN=683826da-9202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:76:e5:12:df:03:a6:26:c9:71:93:62:25:
6f:1e:c8:d1:b6:59:d5:4f:13:96:a5:c1:08:d1:47:
23:fd:e0:84:30:ec:3b:50:a4:6f:a8:88:80:32:2f:
53:b7:14:54:9e:6b:f1:ef:73:ec:23:2b:2b:49:ad:
a0:3d:80:4a:74:ac:31:91:f1:d7:91:3f:e8:e7:31:
69:91:4a:17:fe:6f:69:38:af:2b:5f:82:8f:1f:ae:
35:8a:4c:35:23:cd:00:3f:6c:46:4b:5c:5a:c3:5f:
d6:a4:0e:1e:c6:61:ab:f7:96:40:8e:df:2e:16:99:
c5:00:d0:80:2e:fb:12:23:aa:cf:cf:fa:9a:4b:d5:
bb:6a:c0:af:95:48:bb:92:14:00:23:3a:8f:6f:2e:
39:d8:bf:13:e2:33:77:46:24:b9:59:33:10:03:a3:
99:34:92:e9:06:d1:ae:60:b3:7e:26:04:8d:9b:a3:
d1:c5:7b:49:82:c8:38:7b:b2:6a:3f:4a:89:bf:15:
4a:c3:3b:f1:5c:28:67:e8:96:38:b5:84:ea:35:b8:
ca:02:d5:8c:54:9a:6d:7c:39:50:ff:a8:8e:16:15:
5f:e3:36:e5:e1:4b:44:27:d8:3a:a4:ce:ad:52:53:
6b:59:85:3a:4a:ed:4d:fc:86:c4:63:42:bb:44:3d:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:CC:B6:2D:48:82:D1:95:09:78:5C:81:CD:2D:C9:5F:A9:D5:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A51D743C6E11F0A308CBC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.200.0/24
Signature Algorithm: sha256WithRSAEncryption
17:86:f5:4d:c3:fb:25:e4:03:ac:43:7b:e9:a0:dc:a0:0b:e7:
97:e6:bb:ce:e2:59:6f:fc:38:c7:2d:18:02:d6:eb:77:ed:8b:
58:e0:e4:e1:4a:95:c8:86:94:15:fc:9f:3c:7c:26:58:21:38:
19:d2:ac:12:8a:4d:9b:38:af:0c:76:a9:6a:e6:0e:12:d1:10:
24:b6:e7:cb:19:21:d5:85:db:95:f2:df:d4:d4:d3:a4:f2:00:
5a:c2:0b:36:b4:07:9a:de:c0:d4:40:27:30:4b:3e:2d:c5:94:
41:59:d8:b0:16:b0:2b:cc:ce:ff:d5:25:3c:53:1c:a3:8d:2c:
7d:ea:94:9e:57:9a:e2:b2:23:ca:61:bb:51:41:ef:4c:7c:54:
5c:46:21:56:e2:90:db:0c:eb:51:4a:1a:77:7c:dd:94:e9:b7:
12:5a:fb:39:d0:5c:fa:2f:4e:c0:a9:bc:4e:66:d6:c9:d7:ad:
18:4f:18:e0:2f:7e:a8:8c:05:92:56:1d:0e:67:1c:44:64:f2:
f6:ea:d2:bf:cc:61:ea:23:b9:84:2d:3d:0c:33:2a:13:36:66:
1b:3c:40:59:c2:5c:55:e4:b5:ba:3d:96:b8:a9:b4:25:f3:89:
1a:aa:c9:c4:51:70:5b:72:f6:7f:53:0a:21:6d:a4:7d:63:c9:
34:bd:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:15:35 2025 by rpki-client