Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B751EFCBF9C11EFAB29F09A762E951A.roa
File: 3B751EFCBF9C11EFAB29F09A762E951A.roa (raw, json)
Hash identifier: XLcCtmhgHUOftULOqdrkiKhIzfPRHyyMbscUHy1++cg=
Subject key identifier: 80:7C:68:06:5B:6E:1A:3D:9B:E2:DB:A6:52:FD:5E:6C:70:07:C4:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B751EFCBF9C11EFAB29F09A762E951A.roa
Signing time: Sat 21 Dec 2024 13:05:21 +0000
ROA not before: Sat 21 Dec 2024 13:05:17 +0000
ROA not after: Fri 31 Jan 2025 13:05:17 +0000
asID: 984
IP address blocks: 45.198.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59310 (0xe7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:05:17 2024 GMT
Not After : Jan 31 13:05:17 2025 GMT
Subject: CN=6766bd10-2120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:72:3e:8a:d2:d2:14:99:90:80:79:3f:96:
c6:45:3a:80:5d:7c:96:1e:7f:23:71:a6:f9:0f:d0:
d9:3a:30:b8:b7:4d:66:a1:45:48:9c:dc:21:e8:7c:
37:e5:bf:84:1f:b3:11:d2:f8:7e:23:52:3d:50:ad:
50:bf:18:6b:d7:68:f2:5b:a6:48:2a:cf:af:8d:94:
72:6f:77:59:08:b1:1d:df:2c:ac:df:64:92:24:d2:
fe:77:d5:85:27:08:44:9e:20:d5:ca:32:ed:aa:28:
d4:0f:03:e9:33:32:7e:93:95:c6:91:da:91:a7:ae:
a4:93:16:5e:df:6a:70:0b:e1:5c:74:5d:12:62:e9:
ef:78:15:87:e4:3f:ea:0b:6b:ae:93:f3:2d:41:c2:
27:8a:25:b4:95:68:1b:f2:75:32:0c:dd:1a:3f:0c:
ae:20:ea:f7:c5:29:2d:25:a4:d3:51:b7:85:da:b6:
02:0e:2e:33:ac:f0:41:d2:5c:14:3b:cb:9c:c0:a3:
3d:0f:54:e5:f1:fe:fe:72:08:cc:2d:89:5b:37:5a:
b1:e7:2e:b6:a5:64:76:8d:77:07:89:87:2b:d5:53:
d8:d5:fe:4b:61:dc:cf:8a:5a:45:db:60:1a:0d:34:
b6:d5:ea:db:d6:3c:bb:5b:74:be:0b:6f:9b:1e:7a:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:68:06:5B:6E:1A:3D:9B:E2:DB:A6:52:FD:5E:6C:70:07:C4:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B751EFCBF9C11EFAB29F09A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.28.0/23
Signature Algorithm: sha256WithRSAEncryption
25:cd:51:18:4f:50:85:2e:f6:88:58:44:42:cd:e6:dc:f2:2e:
a8:27:f5:dc:f9:9b:3f:1b:fe:30:35:1b:af:88:1d:11:e8:7e:
b6:9a:71:06:a6:cc:8d:88:d0:02:a2:1a:e3:64:2d:a0:29:e1:
6c:09:56:c6:90:a7:6f:36:cf:82:49:ce:fd:07:62:31:4d:47:
01:7e:5b:41:b6:00:a5:67:f6:c1:d9:ea:91:6a:76:54:61:7c:
32:16:08:7b:01:53:af:11:45:5e:d6:7f:46:f2:29:73:c3:88:
c3:11:08:1c:9f:e4:44:83:1a:30:65:1e:05:5d:7e:8a:95:0e:
f5:32:23:2d:d9:d2:68:7c:2a:4a:b9:7a:10:cd:6b:8a:cb:8c:
39:ae:56:a7:76:96:51:a4:5d:c9:76:34:d2:9d:01:ea:96:e9:
c9:40:94:a6:4e:a5:97:af:31:a3:c3:44:ba:9b:70:74:ff:88:
ad:ab:b5:8a:a3:39:e7:d9:d5:14:a0:ab:dd:12:ac:73:a5:56:
df:db:09:5e:09:79:00:79:22:54:c3:9f:65:98:2f:42:c8:5f:
29:e4:58:f4:e4:48:c0:c4:1b:5d:b8:76:1f:19:b8:5c:ea:6a:
8d:da:09:e6:c9:7f:11:24:ac:31:db:fe:86:73:1c:c4:56:4d:
9d:da:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:44 2025 by rpki-client