Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474ADB62BDD611EFB626DA78762E951A.roa
File: 474ADB62BDD611EFB626DA78762E951A.roa (raw, json)
Hash identifier: isE+5CK5rgwDxRZoJigQjS8osEP3e9Huyiaa0Pf4ue0=
Subject key identifier: 25:2F:F9:16:D1:F6:0A:DD:00:CF:E1:31:CD:D0:90:E4:64:56:A4:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E59D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474ADB62BDD611EFB626DA78762E951A.roa
Signing time: Thu 19 Dec 2024 06:55:49 +0000
ROA not before: Thu 19 Dec 2024 06:55:45 +0000
ROA not after: Thu 23 Jan 2025 06:55:45 +0000
asID: 202656
IP address blocks: 45.199.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58781 (0xe59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 06:55:45 2024 GMT
Not After : Jan 23 06:55:45 2025 GMT
Subject: CN=6763c375-917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:50:7a:b2:79:25:b8:5a:3c:92:06:11:57:
24:1c:f8:5c:f8:c0:11:42:24:a6:30:ff:f4:ce:ff:
95:8b:f2:bb:a6:ef:35:7e:da:a1:09:b6:5b:23:3a:
35:67:2c:c1:47:31:9f:ad:f3:e2:dd:3f:ff:4c:2c:
d8:d8:10:6c:dc:69:d0:ef:9f:54:28:48:59:f4:93:
4c:b5:0b:87:6d:45:f7:51:bc:4c:96:66:37:bf:80:
d6:96:e9:f5:7e:9f:ae:ff:a8:15:d4:8d:8c:54:4b:
83:db:56:92:9b:e7:7c:b8:4d:28:1a:d4:28:51:1a:
f2:6e:de:e3:e8:9a:65:58:63:b4:c4:20:eb:17:79:
8b:e1:0b:5d:e1:ce:b6:3a:a7:d7:cd:69:c6:fe:c6:
78:61:1b:63:51:32:7a:6e:89:21:71:ed:c9:12:82:
79:73:61:5c:ea:9c:4c:7c:85:0a:a1:3a:25:3c:ab:
09:c5:20:65:fc:5b:9d:25:2c:57:f8:5c:3e:13:13:
7e:21:9d:6c:a4:03:9d:73:02:c4:e4:98:6e:72:79:
77:b4:41:77:ca:71:10:5d:e8:d0:18:8d:14:2e:97:
e0:51:bd:b2:39:9e:7a:38:08:be:f6:03:d9:29:8b:
95:53:61:f7:cb:cd:c6:2b:5f:fe:44:d2:3c:d0:d9:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:F9:16:D1:F6:0A:DD:00:CF:E1:31:CD:D0:90:E4:64:56:A4:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474ADB62BDD611EFB626DA78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.136.0/24
Signature Algorithm: sha256WithRSAEncryption
38:96:48:62:a8:4b:ba:2b:6b:46:62:ce:d0:f6:b9:da:70:08:
38:b8:a1:bf:8f:53:5f:1e:cf:11:3d:b7:ef:ac:42:56:d9:cd:
45:74:98:40:14:dd:a3:0a:9f:08:d0:21:d4:3e:52:53:6c:75:
e4:1a:47:9c:eb:1b:5f:89:ac:e5:4e:63:a6:5c:a9:ff:22:75:
bc:68:fe:88:71:91:bb:57:b9:84:03:71:76:a3:2b:23:45:be:
c2:a9:3d:81:f4:92:67:bd:95:3a:a8:55:01:05:91:1a:b4:1b:
1a:05:dc:fe:7c:12:d6:45:68:6a:db:aa:29:40:38:7f:ac:24:
5a:37:9a:c2:68:1e:b3:b8:91:ef:1b:4c:f2:9d:70:90:cb:14:
e9:aa:29:9b:d7:db:4c:be:d8:2a:49:c3:df:92:d1:b4:a7:02:
25:23:ad:cb:a8:a0:d9:7a:d5:63:a9:bf:85:35:16:42:1e:cc:
84:52:98:54:f2:11:c1:11:72:97:f9:5f:b3:e7:e0:5c:9e:f1:
10:52:c2:cd:fe:cb:23:85:8e:e5:21:34:66:9f:33:5a:b2:a5:
58:88:a5:f0:c4:94:ba:e3:51:23:aa:55:38:f5:ae:30:bd:b7:
50:66:05:48:30:ca:7e:94:c6:92:2c:d6:fc:77:9a:09:3b:36:
ac:22:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:02 2025 by rpki-client