Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BBB3D6C8EC11EFA6F8ED44762E951A.roa
File: 27BBB3D6C8EC11EFA6F8ED44762E951A.roa (raw, json)
Hash identifier: lMu1B9/bUwV8h8zsdd1Bvw3JCPgn4t0WCEPs2RBZ6eo=
Subject key identifier: 95:FC:3E:8E:F9:D1:9A:39:E9:08:1B:57:43:1B:CC:03:FE:38:D8:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F330
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BBB3D6C8EC11EFA6F8ED44762E951A.roa
Signing time: Thu 02 Jan 2025 09:30:08 +0000
ROA not before: Thu 02 Jan 2025 09:30:04 +0000
ROA not after: Wed 05 Feb 2025 09:30:04 +0000
asID: 61112
IP address blocks: 45.192.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62256 (0xf330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 09:30:04 2025 GMT
Not After : Feb 5 09:30:04 2025 GMT
Subject: CN=67765ca0-aceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:4f:98:74:c9:2e:95:78:4d:47:3c:ba:4e:
b4:bf:f5:a9:1f:79:e0:1e:fd:7b:7d:4d:08:5a:3b:
b7:b3:4b:27:9b:d8:fa:62:96:bb:15:ae:60:20:8e:
ee:40:50:da:d2:4b:ba:47:ca:1a:88:5d:75:2f:31:
d2:2a:a1:81:cc:18:3d:5a:cc:96:cb:cb:85:28:c4:
e6:e5:bc:21:9e:b6:d8:6b:7c:7e:22:c8:24:d1:e5:
c4:ef:5a:3b:71:d8:5c:83:a3:02:6b:e2:1d:6a:30:
7d:12:d3:2d:3c:f3:a5:51:3e:e7:8c:ab:fb:2c:f4:
00:43:89:c2:fc:aa:f7:1c:77:41:2f:b6:79:77:c3:
e1:3e:d9:91:6f:6a:62:7a:b2:bf:28:a7:50:64:3b:
b9:15:d6:68:ea:9b:d2:84:e7:f5:7d:ea:70:aa:05:
08:78:58:46:03:04:23:5f:eb:7c:44:2a:89:69:fd:
cf:ea:2e:d9:d3:e0:c2:9e:1a:3b:1d:78:ff:cb:c8:
0d:7a:af:de:a8:f2:04:f9:89:7e:0c:61:93:13:9b:
3b:fa:f0:70:47:16:1c:cd:32:5b:3d:32:bd:67:c9:
d0:69:9a:49:99:30:91:08:0d:08:21:9b:e9:85:59:
3b:27:63:d2:46:84:66:67:e8:ee:ca:c6:b7:69:b7:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:3E:8E:F9:D1:9A:39:E9:08:1B:57:43:1B:CC:03:FE:38:D8:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BBB3D6C8EC11EFA6F8ED44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:af:85:d7:e1:e2:d2:26:0b:c3:c3:74:35:c4:4a:24:10:07:
c3:10:10:ce:11:d5:09:25:ee:70:17:fe:c8:cd:dc:8a:73:01:
fa:8c:2f:e1:fe:10:5f:d2:9a:da:49:b7:a0:11:1e:e3:a1:96:
9a:d4:fc:f4:d3:7b:0c:0c:7e:18:28:4f:82:ea:2f:a8:03:a4:
15:69:65:fa:51:c7:2f:a3:34:38:21:25:af:fe:eb:5f:0d:12:
ed:43:a9:b0:b1:a7:86:de:7f:35:f9:00:54:3a:f5:e6:83:c7:
22:f5:40:0c:f9:d5:d6:8b:47:fc:27:75:d0:bc:a1:18:51:4e:
83:fe:96:21:3b:dc:e2:c5:ba:8d:f6:2c:2b:f3:7c:80:95:2d:
43:2e:4b:cb:e9:0a:73:ef:c2:03:6b:71:b4:90:6f:6b:03:d9:
4a:f1:bd:92:8b:9c:97:85:61:a0:f0:06:a1:1c:75:56:5e:ca:
0d:41:40:ab:17:bc:a4:e2:c9:10:2a:9e:48:a9:f2:d8:b5:59:
3b:68:a1:33:26:e0:94:e9:04:86:ca:47:96:d3:3d:70:39:27:
06:74:5e:42:b2:e8:e9:c2:9c:7b:29:47:26:1b:53:8b:71:c9:
fc:6c:17:80:33:f4:10:7a:f2:5a:d8:d6:19:bd:e0:d0:6b:44:
44:7a:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:43 2025 by rpki-client