Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2C68AEC1C211EF878290AB762E951A.roa
File: 2E2C68AEC1C211EF878290AB762E951A.roa (raw, json)
Hash identifier: 4gXiOnP5mAovCNHHzqIYSNrwKNNhouAFV/iNId28n34=
Subject key identifier: 04:50:C4:8C:74:64:86:43:A7:83:E8:02:82:BD:E4:81:DE:CD:83:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E85B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2C68AEC1C211EF878290AB762E951A.roa
Signing time: Tue 24 Dec 2024 06:42:02 +0000
ROA not before: Tue 24 Dec 2024 06:41:58 +0000
ROA not after: Tue 28 Jan 2025 06:41:58 +0000
asID: 398993
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59483 (0xe85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 24 06:41:58 2024 GMT
Not After : Jan 28 06:41:58 2025 GMT
Subject: CN=676a57b9-79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:34:a4:23:57:61:41:e8:be:54:52:ec:3c:
86:9f:ab:27:ba:93:6c:f5:d7:f8:3d:d9:0f:7b:c7:
a6:ec:09:bf:9a:63:95:b5:57:75:a9:ae:0b:b3:14:
73:47:b5:c4:90:8c:15:80:15:72:c0:41:e9:89:1e:
50:99:f4:e8:db:8b:69:f0:3d:bd:80:62:c5:aa:d1:
25:3c:43:c0:7f:5e:24:71:e8:fd:f7:5d:c2:58:34:
c9:9a:aa:c9:cb:d0:6f:0a:47:71:21:97:af:fb:d8:
22:6e:06:37:0d:ea:84:73:26:06:2a:01:cb:cc:1d:
e4:e5:2c:27:37:d6:76:bb:4c:a7:e5:15:6e:59:9d:
86:26:8e:ab:e2:9d:44:86:4c:a1:00:62:92:8b:c9:
75:34:cc:47:9b:7e:87:d1:d6:4d:85:a2:66:7d:8d:
e7:96:1f:4c:9f:30:ef:3d:ed:4d:5f:6f:fa:a3:88:
a5:ee:11:d0:76:39:8e:ea:20:48:40:ef:da:e3:4f:
d7:5c:16:24:39:d9:f1:f0:9d:a1:14:bc:60:99:b0:
13:06:86:12:ea:18:25:97:73:d5:be:b0:c4:ec:29:
89:48:55:52:e9:00:35:9d:21:e0:fc:eb:25:95:d2:
9b:43:1f:4a:56:e2:41:79:5c:e7:61:70:e2:8d:1b:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:C4:8C:74:64:86:43:A7:83:E8:02:82:BD:E4:81:DE:CD:83:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2C68AEC1C211EF878290AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
43:cf:1e:d6:4e:aa:03:58:93:8a:a7:75:7d:ef:c5:77:5b:36:
71:96:d2:f6:65:3b:4c:f3:e2:b2:05:c9:56:bf:7d:4f:4c:fa:
86:a1:4b:a3:04:b5:f9:75:d0:b5:16:79:3b:fb:9b:98:6b:44:
5e:1a:7c:38:e7:96:ae:ef:25:18:f3:f9:ed:9e:b9:54:e8:4b:
49:ad:5a:28:a0:7c:18:b8:bd:c6:77:e7:52:80:ff:de:fb:dd:
e0:3e:f8:69:fd:04:76:0e:62:9b:bc:25:4b:b5:39:25:3d:04:
9e:06:69:48:65:12:27:ab:92:53:59:d8:09:85:dd:bc:68:09:
bc:36:f3:4f:d7:c4:7b:f0:3a:75:bd:45:9a:20:a1:ab:52:d3:
4e:d7:b0:48:76:de:a8:6a:78:90:ec:66:87:3a:de:a8:30:12:
e0:41:a9:5d:7d:98:a7:dc:df:ab:fb:ca:c6:af:be:55:42:05:
9d:30:9f:2d:cf:11:1e:b8:96:55:e3:f5:1f:cf:55:ba:dd:a1:
ef:ae:ff:24:66:8d:f3:20:80:71:a3:47:90:17:8b:a8:10:9c:
27:64:f4:f8:fd:d0:c0:00:a2:33:ef:db:fc:77:d4:17:d3:bc:
23:2c:b4:61:c0:4f:2c:fd:3c:9f:80:f2:81:6e:ef:a4:52:09:
26:76:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:07 2025 by rpki-client