Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398C11ACCAC011EFAA7A805C762E951A.roa
File: 398C11ACCAC011EFAA7A805C762E951A.roa (raw, json)
Hash identifier: v9tREFYHiJKp/4Q0lH5RLSWgaSRR/NWjwUFo1PHfUgE=
Subject key identifier: 4D:9F:F3:2A:42:DE:7F:C7:C1:72:57:9E:48:34:03:CA:99:53:61:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F718
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398C11ACCAC011EFAA7A805C762E951A.roa
Signing time: Sat 04 Jan 2025 17:20:42 +0000
ROA not before: Sun 05 Jan 2025 17:20:38 +0000
ROA not after: Thu 16 Jan 2025 17:20:38 +0000
asID: 395793
IP address blocks: 45.194.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63256 (0xf718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:20:38 2025 GMT
Not After : Jan 16 17:20:38 2025 GMT
Subject: CN=67796dea-c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:89:19:5f:50:0f:0a:0b:23:4d:02:14:80:
9c:84:e8:54:68:8a:2b:28:5e:e7:56:11:0a:b9:10:
60:a3:fe:cc:ed:13:b8:ef:2e:ac:15:cc:8b:3e:cb:
aa:c4:41:50:41:1d:8a:61:45:e0:40:a2:8a:5a:e8:
d9:1b:76:e0:43:a7:18:c4:9e:8d:f2:e0:10:0c:8d:
b5:98:6c:fc:94:9c:ce:bf:89:17:5a:5c:ea:f9:75:
07:e8:a4:db:e4:62:35:ec:58:ef:e8:66:b7:89:c6:
19:fc:e6:75:87:5f:d1:69:08:49:2c:da:eb:77:7c:
5e:bb:f9:79:6d:fa:a3:87:10:dd:23:e0:69:fd:50:
f6:43:a6:81:42:b2:59:c6:31:c8:77:10:05:7d:1d:
6f:b3:f9:85:8c:7b:ca:fe:ff:79:f7:8c:b6:b6:7c:
af:50:3c:0d:b3:57:11:8c:20:c5:60:a0:09:e6:94:
1e:d1:18:bb:8f:10:9a:b5:d0:9e:cd:2b:51:02:5b:
1d:e8:57:d2:85:3d:a4:b7:bc:67:ed:97:c4:1c:af:
80:0a:f4:48:e3:f4:17:e4:c0:57:80:d2:55:64:41:
62:fd:a3:2e:7d:3d:a6:dd:61:00:d1:d8:ff:1e:d9:
33:9b:5b:1d:b0:c7:07:09:88:4a:a9:98:73:e3:5c:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:F3:2A:42:DE:7F:C7:C1:72:57:9E:48:34:03:CA:99:53:61:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398C11ACCAC011EFAA7A805C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.114.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:07:88:3e:d9:3c:f5:dd:1a:e6:78:9b:0d:4d:ca:72:63:fd:
b3:3f:b1:5f:18:70:49:0f:f8:e2:81:30:d7:da:28:85:d9:5d:
46:42:4b:4c:21:d0:85:18:55:ac:84:92:c4:00:d6:2c:74:e8:
fb:94:a6:82:1b:84:79:e5:62:c0:d7:f8:2a:de:dc:c2:15:cb:
5f:e9:d7:83:6b:02:62:d1:43:14:7b:01:63:b4:4c:dc:9b:bb:
2c:90:dc:80:0e:ae:62:a5:25:78:c3:10:a2:0c:25:e1:f4:29:
ab:23:41:7e:e1:b6:c9:cb:12:ec:50:b6:7b:7c:6b:3d:4f:8b:
2e:da:66:9c:86:b4:f6:68:5b:dc:4e:79:af:2d:ab:02:79:c5:
d0:c2:ce:d1:53:89:a8:fc:3a:52:b7:0b:4e:52:dd:7e:04:f4:
30:83:ce:ec:c7:f5:0e:ac:62:b1:8e:ba:b9:da:3b:d9:88:9e:
95:69:01:ac:7a:b4:1c:a7:d2:37:20:91:d7:b2:54:a3:83:8a:
ef:85:68:c9:2f:90:fa:06:d5:a2:aa:b6:dc:8e:d1:eb:f3:59:
2a:dc:13:10:72:8c:a8:9b:55:ed:f5:16:8d:5d:e1:b4:3e:a6:
13:77:da:7e:2a:55:9c:35:22:16:d3:81:7f:a5:59:b1:09:ce:
86:bd:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:57 2025 by rpki-client