Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB81D90C36311EF86018592762E951A.roa
File: 3BB81D90C36311EF86018592762E951A.roa (raw, json)
Hash identifier: +s0x7vsvShvjOjFzjOcC8gp/rH+5D7thYZ85ZdlKsyo=
Subject key identifier: 0D:9F:CF:5E:43:07:AC:37:7D:06:AD:AA:F9:32:29:AE:51:DF:21:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB81D90C36311EF86018592762E951A.roa
Signing time: Thu 26 Dec 2024 08:27:24 +0000
ROA not before: Thu 26 Dec 2024 08:27:21 +0000
ROA not after: Fri 31 Jan 2025 08:27:21 +0000
asID: 395793
IP address blocks: 45.192.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60543 (0xec7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 08:27:21 2024 GMT
Not After : Jan 31 08:27:21 2025 GMT
Subject: CN=676d136c-45b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:47:1e:bc:b2:85:ed:8a:54:b6:37:ec:00:
96:6e:26:19:7d:85:da:54:e9:cd:3c:9d:ac:7e:05:
9a:9e:e4:4c:fa:e8:7d:4b:d6:a5:8d:61:e3:97:74:
fe:07:a4:57:49:33:df:58:48:f3:6a:db:f7:c1:45:
c8:38:f0:62:ac:23:44:a1:54:c7:68:91:e3:2f:8c:
7c:55:c1:c8:6a:af:67:31:0c:7b:5e:de:99:6e:6c:
08:80:68:fb:24:9e:52:15:bf:30:1f:c8:9f:6a:5b:
9a:6d:e4:e7:18:e7:20:ac:0e:0f:23:5d:15:54:ec:
d8:2c:78:41:c2:44:50:77:8c:0a:43:c9:07:6b:66:
52:c1:ae:28:55:fe:86:c7:61:1a:46:b3:78:70:6b:
27:a9:95:15:01:5e:1b:63:7c:2a:9b:80:17:5f:9d:
3b:45:f0:4e:1c:89:e7:ac:f7:4e:ca:9c:69:bf:4b:
fa:e1:9d:32:ea:3f:c8:71:3e:a6:88:c3:47:24:a1:
97:2a:4f:f1:34:5d:22:3b:87:15:11:17:74:89:a5:
da:96:87:06:0e:67:d1:09:08:04:1f:27:10:1b:7e:
a2:f7:84:ab:c6:fe:22:58:89:5d:45:bb:f3:f5:ce:
29:e7:c3:5b:61:2b:72:2d:3f:16:6c:7a:a6:23:9f:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:CF:5E:43:07:AC:37:7D:06:AD:AA:F9:32:29:AE:51:DF:21:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB81D90C36311EF86018592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.166.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:f7:2e:e6:5b:8c:a4:3a:b7:56:2c:89:69:12:f4:32:03:
8c:80:65:b2:8f:c3:f6:d0:48:da:aa:11:d3:78:1d:87:8c:dc:
67:83:c9:3d:16:e7:f4:af:13:0f:2f:ae:e9:df:ce:2b:96:fb:
9e:b2:5b:88:6b:90:23:b3:8a:65:b4:d3:03:a3:f7:88:af:8d:
93:54:f0:cd:e2:39:12:b5:3b:1f:41:b4:ed:fd:c2:0f:45:ca:
b6:51:c6:97:9d:06:3f:6d:26:a2:85:19:20:8f:3f:4b:31:bc:
7e:36:7f:f8:45:30:64:06:04:d5:6a:99:fd:8e:f6:3a:62:76:
e2:a6:bf:7e:00:ca:55:a4:13:d4:c1:11:48:43:29:d2:b0:32:
25:f5:3b:32:b2:20:38:bc:57:99:d2:0a:ec:c7:7c:e9:4d:15:
8a:4f:d0:06:38:e1:3a:1c:9d:e3:5e:a0:16:b8:7b:9c:f7:ee:
52:12:d8:9c:6c:bb:6c:f2:00:3c:fa:5c:b8:42:71:85:87:00:
a1:1b:f3:ec:bd:65:c5:36:3a:38:e3:b9:6f:81:24:08:30:85:
6a:06:4d:02:fb:0b:98:55:a4:f8:c9:ec:0b:54:08:b4:86:d1:
37:d0:00:33:60:82:ad:aa:db:d9:be:54:e5:a4:96:f0:19:23:
08:a5:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client