Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3566DF3CCABE11EFBDAFB94F762E951A.roa
File: 3566DF3CCABE11EFBDAFB94F762E951A.roa (raw, json)
Hash identifier: ulKjjmtjvDKRCMJ5+RLEgwzSezBwRVXSe0CSXD4G+Ts=
Subject key identifier: 9F:F0:B2:34:AE:8B:99:F1:7D:25:39:E5:8A:FF:09:DE:9E:99:0A:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F70A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3566DF3CCABE11EFBDAFB94F762E951A.roa
Signing time: Sat 04 Jan 2025 17:06:16 +0000
ROA not before: Sun 05 Jan 2025 17:06:12 +0000
ROA not after: Thu 16 Jan 2025 17:06:12 +0000
asID: 5065
IP address blocks: 45.195.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63242 (0xf70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:06:12 2025 GMT
Not After : Jan 16 17:06:12 2025 GMT
Subject: CN=67796a88-b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:83:19:30:b7:ab:c0:f7:7d:e8:5e:0e:65:
40:13:ae:8e:22:55:55:c4:d3:be:1a:0d:aa:d0:f5:
60:a5:e2:de:1b:4a:15:92:b2:a4:3e:3a:e3:f3:c5:
9e:12:0f:ce:1f:6f:17:03:90:fa:20:dd:89:40:7a:
1e:53:ff:35:3b:36:1d:3d:b3:ce:aa:d9:dc:c7:06:
7d:9b:2a:da:f0:0b:90:fe:72:4c:eb:28:27:6a:8b:
fe:56:47:da:be:16:e5:98:ee:0a:5c:98:6a:b6:92:
42:25:b2:a4:73:6e:76:73:91:1f:ec:17:27:9e:bb:
38:b3:f6:a8:13:8a:63:e2:75:22:84:3b:c3:57:76:
53:6c:fa:0a:f0:af:31:39:de:9f:79:7a:3e:d3:09:
d5:e0:6d:9a:91:f7:34:5f:a7:15:f7:aa:92:f6:83:
76:04:ef:90:83:16:07:e2:78:e3:e3:d8:a0:5f:6c:
6a:13:04:5a:9b:13:74:c4:96:4c:4b:49:5a:f8:2e:
8b:64:f8:73:ba:bb:25:22:88:e9:5c:5b:23:0e:e9:
75:2d:97:03:2f:13:25:fd:8d:f4:86:a0:7f:95:64:
3a:69:9d:d3:1b:71:73:93:4a:5c:1d:0a:67:4e:fd:
2f:56:7e:16:8c:c2:2e:a4:d3:61:84:15:80:e3:dc:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:B2:34:AE:8B:99:F1:7D:25:39:E5:8A:FF:09:DE:9E:99:0A:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3566DF3CCABE11EFBDAFB94F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
05:ed:12:2e:48:20:51:86:59:9e:63:13:b1:c9:da:2a:ce:2d:
3b:ad:52:55:c4:4e:df:77:1f:0e:04:23:f6:de:50:28:72:6a:
9e:d6:40:fb:7f:f4:da:e4:01:d5:4a:4d:41:cd:61:0e:13:a2:
41:d7:34:66:50:df:7b:fc:1f:76:33:be:71:97:08:ae:2f:3a:
f7:eb:a6:c7:c4:b3:ff:c8:16:78:99:f9:15:15:cf:cb:7a:fd:
31:6c:a1:15:6f:dd:1f:f6:b8:9b:b4:8f:1e:49:2f:ac:fd:ec:
01:01:f9:87:37:72:69:c4:fc:0b:65:f3:e7:8c:38:ec:35:48:
5e:03:44:a5:62:28:72:7a:ea:41:d6:71:13:e1:9b:68:e4:aa:
ff:ff:b3:19:4a:7b:7a:2c:50:5c:e1:a1:b0:1c:96:0e:38:5b:
89:b3:40:e1:72:9c:0b:a7:d4:61:3f:15:77:18:41:bb:be:86:
e8:f0:ed:06:97:1f:a0:70:a1:5b:07:b1:83:e3:ed:81:c8:3a:
a7:7e:f4:02:69:50:20:88:d4:18:eb:94:7f:0e:f4:52:65:aa:
9b:5d:1c:bb:59:b9:01:50:31:7b:d5:e5:92:86:43:c2:79:9f:
95:2e:77:91:93:d6:fb:f7:7c:15:2c:14:15:db:dc:2a:cd:ba:
53:a0:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:55 2025 by rpki-client