Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492792D6C29511EF8D06127A762E951A.roa
File: 492792D6C29511EF8D06127A762E951A.roa (raw, json)
Hash identifier: mUVGKSI77ULV/yPahegGaCKdfXKOMvKmfjLA34bDQac=
Subject key identifier: E9:00:6C:58:20:C8:26:0C:97:A7:12:7B:11:18:E1:DF:94:E0:14:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492792D6C29511EF8D06127A762E951A.roa
Signing time: Wed 25 Dec 2024 07:53:10 +0000
ROA not before: Wed 25 Dec 2024 07:53:07 +0000
ROA not after: Wed 29 Jan 2025 07:53:07 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59831 (0xe9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 07:53:07 2024 GMT
Not After : Jan 29 07:53:07 2025 GMT
Subject: CN=676bb9e6-98eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:b6:05:15:00:26:0a:9c:c6:50:10:3e:0e:
52:c3:ad:08:69:b5:96:44:51:57:c0:c6:40:38:da:
a3:76:9b:12:ab:51:99:38:69:90:4b:07:d6:c7:0d:
07:4b:49:0b:79:45:88:01:1a:92:35:24:8d:2a:6c:
e1:af:8a:50:79:68:6a:fb:a1:1b:1c:8d:c0:95:d4:
af:37:ad:d6:78:88:c8:23:71:d6:25:60:30:c0:05:
f9:1d:9a:c2:80:1e:75:38:76:27:a6:fe:bf:c6:74:
56:09:ab:02:2c:c8:3f:61:34:ef:f5:83:8e:72:0c:
be:d6:fe:5d:c5:d2:83:a8:6d:d2:c0:b9:d0:db:82:
a9:27:94:c8:c6:92:28:0b:78:b0:0c:62:3f:67:e9:
01:35:d1:6f:18:b5:52:f1:c6:ab:04:56:d5:fd:f2:
8d:ef:96:23:23:4a:c7:fe:22:5f:cf:bf:f2:54:ae:
b3:bb:ba:2b:f1:1d:93:53:c5:80:4f:c6:94:73:27:
98:a0:e9:c8:45:9e:15:75:bf:53:5c:8c:e3:cd:9d:
0c:68:1d:d5:9d:67:ee:6d:aa:ce:24:33:db:88:95:
f0:86:a4:fb:1a:4d:ca:48:a6:52:59:38:02:1a:36:
cc:ce:da:96:27:67:6b:76:90:2c:12:5b:b1:8c:9b:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:6C:58:20:C8:26:0C:97:A7:12:7B:11:18:E1:DF:94:E0:14:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492792D6C29511EF8D06127A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a4:e8:83:ee:cb:f4:1b:12:7e:12:30:2e:f0:ca:53:8c:23:
1c:b0:c6:b2:be:88:82:b1:87:c6:35:4c:85:67:4f:63:27:71:
33:5d:47:06:67:dc:b0:3e:f0:2b:d6:a3:81:21:ec:e9:49:e6:
f9:e5:ac:d1:c4:75:f0:9f:6d:b2:68:84:3c:04:8e:5d:3c:6e:
99:cf:5d:54:73:c6:26:66:3d:37:bd:41:d5:2c:81:65:10:98:
5a:2d:e9:66:8b:ba:d7:e5:2e:17:08:04:4f:e3:4a:4c:9a:ae:
ba:e4:4b:9f:e9:25:ea:be:e9:4e:33:32:e0:d3:e9:94:75:34:
3b:fd:bc:c0:a5:90:eb:10:70:e3:ed:95:d1:b3:32:7b:16:5b:
20:5f:67:e0:f2:a7:fa:c9:6a:b1:10:c8:bc:4c:2a:82:a5:f8:
80:7e:1a:8b:17:a4:11:52:30:9c:71:4a:06:03:74:f8:38:b4:
df:68:a3:b6:ec:1c:11:f9:76:46:1b:7b:bd:f6:1c:29:a1:d7:
c6:43:e3:12:7d:fc:dd:c6:9f:7c:13:9d:6c:36:7d:fb:e1:7d:
43:d1:a9:fb:03:0e:dc:51:63:04:ae:23:b2:58:ce:1d:b8:a0:
df:53:29:ac:01:18:f5:a9:76:bc:10:8f:5a:9e:ec:1b:75:2e:
36:8d:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:00 2025 by rpki-client