Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A22EE12CF3711EFA7787655762E951A.roa
File: 3A22EE12CF3711EFA7787655762E951A.roa (raw, json)
Hash identifier: tu0Y6aGDAB32gk2rpKY9NQeNgsf19CqU7fYWW3dIA3Y=
Subject key identifier: 61:D9:C5:92:E7:BD:BB:6B:0E:B2:8E:37:4D:07:17:89:CF:89:DD:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A22EE12CF3711EFA7787655762E951A.roa
Signing time: Fri 10 Jan 2025 09:42:38 +0000
ROA not before: Fri 10 Jan 2025 09:42:34 +0000
ROA not after: Sat 01 Feb 2025 09:42:34 +0000
asID: 39600
IP address blocks: 45.197.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66869 (0x10535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:42:34 2025 GMT
Not After : Feb 1 09:42:34 2025 GMT
Subject: CN=6780eb8e-213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:c0:a1:71:cb:46:d1:3b:ba:8b:2f:db:7a:
18:99:81:fa:7f:8a:12:42:9c:62:08:35:3e:af:29:
9d:dd:ab:d7:5b:4c:2f:26:38:4c:00:4b:ee:79:c1:
ea:0d:05:1f:1c:c0:fd:07:82:27:5e:71:5a:e7:b8:
ad:96:fe:77:27:5c:e0:ce:92:44:80:cd:4f:b9:79:
7d:39:b9:52:57:d4:2d:ca:9e:13:de:7f:f7:86:59:
81:75:b3:ac:c1:b3:42:39:9c:65:1b:19:5a:f1:c2:
99:c6:fd:98:45:50:d0:35:03:5e:b9:df:7d:59:4d:
4e:4d:0a:a7:63:e5:ee:40:c4:73:fe:c0:b2:7a:27:
47:34:5b:e2:33:8c:4c:42:6b:6a:ac:34:ff:58:89:
1e:14:f1:0a:fe:f0:40:e1:be:c3:6c:33:ae:bd:f7:
19:6b:bc:03:2c:83:ac:f3:5b:d9:ab:68:d5:7e:80:
39:01:d3:bb:3e:13:26:29:57:ca:80:22:99:58:aa:
fb:0a:83:09:a8:9a:52:63:13:4e:c4:c5:40:3d:eb:
87:60:52:ea:5b:e9:68:29:fc:b3:2f:d2:17:bc:2f:
58:67:83:28:6a:59:77:f6:50:b2:8b:fe:51:c9:6c:
82:a9:c8:43:1f:3f:f0:6f:58:f2:3a:9f:2e:06:a8:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:C5:92:E7:BD:BB:6B:0E:B2:8E:37:4D:07:17:89:CF:89:DD:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A22EE12CF3711EFA7787655762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:f0:5f:e9:65:f0:56:51:1d:f8:5f:0f:13:f2:31:58:9e:40:
a5:41:8b:d4:c8:71:04:cd:ee:41:dc:65:c7:e6:25:5e:6e:05:
b5:2c:01:f5:e9:05:d7:ef:12:38:8a:f2:02:a3:4b:1e:d3:fc:
7c:99:67:30:99:e0:44:98:71:b3:8e:dd:84:e6:2d:88:05:06:
17:27:a9:7b:5e:71:46:52:ce:da:49:55:25:3f:82:f5:a9:0c:
25:b3:ef:9d:3f:24:c5:f6:90:9a:2e:cf:03:39:a0:cc:2b:84:
ed:a3:fd:49:08:ba:a7:a4:c2:b7:d1:9e:c2:94:df:36:3d:27:
73:92:42:a2:b5:a2:20:c3:f5:b0:22:b0:0c:4f:bc:da:89:25:
b7:5b:87:5b:de:27:7b:08:91:d3:66:7e:d1:a2:3d:dd:53:db:
01:2f:c2:ef:e5:4e:34:f4:28:04:79:00:f2:e8:cd:4b:1e:82:
67:9e:5f:ac:3f:e7:8c:4c:4a:bb:f0:da:2b:f6:4d:c0:ac:45:
94:91:0d:ed:ab:7f:61:50:81:d8:8d:ea:3b:d2:87:7d:c5:e1:
9b:e6:82:81:69:4f:f1:03:66:de:6f:50:65:aa:fe:b9:2e:5c:
99:84:58:57:06:4c:cb:fc:98:02:a6:23:90:d2:dc:77:29:e1:
2b:51:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:13 2025 by rpki-client