Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5C7246BEAF11EFAA0D8E4D762E951A.roa
File: 2C5C7246BEAF11EFAA0D8E4D762E951A.roa (raw, json)
Hash identifier: euJrvfF9IbZo+xbAqTAH88VMrnhxI/nuw2U7ZaYTmb4=
Subject key identifier: 05:88:9F:CB:76:3E:BE:5F:EF:E5:63:C0:6B:F7:6C:7D:84:51:07:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E737
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5C7246BEAF11EFAA0D8E4D762E951A.roa
Signing time: Fri 20 Dec 2024 08:48:24 +0000
ROA not before: Fri 20 Dec 2024 08:48:21 +0000
ROA not after: Sat 25 Jan 2025 08:48:21 +0000
asID: 6079
IP address blocks: 45.198.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59191 (0xe737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:48:21 2024 GMT
Not After : Jan 25 08:48:21 2025 GMT
Subject: CN=67652f58-77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:5e:8d:a2:21:cf:c4:ab:91:a7:40:28:37:
a6:35:ec:49:ac:d5:e2:32:87:4d:c7:16:88:66:89:
0b:1a:30:a9:57:c2:ba:ef:96:ea:94:30:17:91:ba:
ca:0b:be:c3:57:6c:4e:f1:ec:d0:19:6a:d1:3c:5e:
d1:23:99:4e:17:e1:f8:62:8f:39:42:bf:2c:49:cf:
2d:01:6b:12:7d:10:7b:fd:5d:92:d9:45:97:b0:96:
75:6e:79:c9:cb:8a:af:59:0a:ef:2c:56:70:b6:f3:
5d:c6:21:c4:3c:14:55:61:8d:2a:bd:d7:ba:85:9b:
72:7a:8e:ae:c5:81:fa:a6:26:53:92:dd:6b:0e:ca:
5d:46:84:af:6d:d5:aa:e2:ac:6e:bc:54:c7:ab:38:
3e:36:e8:88:0e:0b:19:44:3e:f0:01:38:8e:0c:30:
ae:da:da:93:70:3e:68:42:f5:48:63:7c:1c:61:d2:
29:cc:50:c1:90:1b:30:02:34:a6:2a:7c:36:4e:58:
5f:8c:4f:21:24:2e:d0:d1:fa:e4:6e:e3:24:03:81:
9f:04:55:bb:9c:15:a4:94:6b:66:d2:db:87:3e:fa:
b4:00:14:a0:0a:5e:18:fa:69:b1:39:1a:9e:0e:49:
4d:74:b0:9d:e6:8d:f6:46:4a:0a:70:3c:88:79:0c:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:9F:CB:76:3E:BE:5F:EF:E5:63:C0:6B:F7:6C:7D:84:51:07:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5C7246BEAF11EFAA0D8E4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:46:87:94:23:3a:9e:b7:7e:72:13:c4:22:d9:6f:9c:56:5e:
3a:0b:f4:04:68:ee:8d:7e:a9:6c:0e:b8:c2:f7:d7:13:16:4c:
e1:70:16:8e:79:d4:7b:13:24:f2:35:25:11:7d:ed:68:aa:f7:
b6:1c:71:5c:61:22:cb:61:b2:87:73:d9:95:4f:41:9f:a3:b0:
e8:40:12:2f:80:63:c3:9c:cf:35:c0:bf:34:b0:6b:eb:5c:a3:
65:b6:7e:5d:68:c7:5a:b2:26:03:8d:d8:aa:b5:97:74:27:4b:
3e:92:c1:92:67:13:41:ec:bf:c7:ac:d8:b8:5d:f1:e7:50:34:
19:fa:48:dd:13:55:62:5d:f2:f3:6a:f9:9c:d0:06:0d:56:67:
62:fd:0a:c0:59:a9:b5:69:e0:7c:2a:e2:bc:ea:2e:f0:de:8f:
54:1f:75:6c:3c:71:76:7e:d1:c0:94:a3:a9:ea:d8:b8:fa:6d:
a2:33:a4:6b:ec:56:ba:96:a2:41:d4:26:06:01:86:40:b9:ff:
6e:5a:93:da:eb:45:8b:7b:b9:91:5e:88:d8:0b:86:9b:82:df:
87:fd:ca:07:18:ac:90:df:b0:61:6a:32:47:5b:75:52:eb:48:
7c:93:75:24:9a:37:f3:07:ab:cd:48:69:ba:af:2f:25:b1:f8:
a7:f6:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:51 2025 by rpki-client