Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/535B7A62BEA111EFB47B6D75762E951A.roa
File: 535B7A62BEA111EFB47B6D75762E951A.roa (raw, json)
Hash identifier: h73LAhgXxvD8JGcjDpH5QXvs0Hr8RJon35JKXZjYXNE=
Subject key identifier: B4:BD:96:32:DB:57:01:5E:22:05:D6:65:CC:0C:A8:A4:23:00:8B:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E704
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/535B7A62BEA111EFB47B6D75762E951A.roa
Signing time: Fri 20 Dec 2024 07:09:17 +0000
ROA not before: Fri 20 Dec 2024 07:09:13 +0000
ROA not after: Thu 23 Jan 2025 07:09:13 +0000
asID: 202656
IP address blocks: 45.195.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59140 (0xe704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:09:13 2024 GMT
Not After : Jan 23 07:09:13 2025 GMT
Subject: CN=6765181d-ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:78:e6:37:63:b7:ae:62:8c:66:3b:0f:03:
fd:f6:e2:f2:5e:6a:d8:3c:19:c5:f0:c7:06:8f:c0:
eb:ed:a7:6c:ff:d8:b2:b2:a5:2a:04:35:cf:c5:57:
74:66:ef:32:10:91:81:9e:78:68:74:1d:63:98:43:
02:3f:fa:96:1c:fc:9a:cb:a0:b6:39:b4:63:46:ab:
2b:bd:d8:e7:aa:c8:be:c2:95:c4:50:28:b2:5e:d2:
30:6b:e4:e4:50:72:aa:8d:6d:71:f4:f5:4c:bd:8b:
ae:fe:f0:39:40:12:30:5d:6c:6a:56:2a:47:58:43:
a1:a0:12:5f:b5:fb:4b:d5:25:dc:e8:98:e5:c2:81:
48:ff:d1:03:2f:83:c2:ec:57:4e:22:38:46:9f:53:
53:4f:55:18:8d:97:73:de:d5:8b:57:6b:72:70:dc:
9c:db:46:a7:6d:ae:35:1f:9b:52:e4:96:d0:78:09:
bb:4a:39:a6:1a:d7:7e:8c:38:37:7b:b7:28:a6:b8:
c7:2b:23:7a:d2:8e:51:b6:2f:40:79:63:13:d2:d2:
0b:52:67:d3:94:5f:8a:29:19:7d:22:97:e4:c6:2c:
9e:a7:c8:e9:c0:3e:ea:49:2a:5e:17:0f:b5:ae:5c:
ba:a7:ea:25:c9:12:fb:84:cb:2c:90:d5:fd:7e:0e:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:96:32:DB:57:01:5E:22:05:D6:65:CC:0C:A8:A4:23:00:8B:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/535B7A62BEA111EFB47B6D75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.209.0/24
Signature Algorithm: sha256WithRSAEncryption
95:27:4b:13:3d:01:ad:48:21:fc:51:1e:69:73:b0:a8:99:45:
8e:07:b1:1c:f5:95:01:2c:1a:0f:56:b7:f2:80:6d:9b:c3:2a:
bc:f7:14:6b:d9:78:2c:b3:6f:ee:34:36:ec:f7:fb:52:a6:c6:
a8:39:bc:a3:c2:a6:92:33:d3:95:a9:f9:da:d2:20:9b:3d:8e:
d4:1b:4f:6f:d3:e2:d3:31:bd:3d:23:69:ec:fd:21:91:f9:63:
28:18:3a:da:e0:1e:d1:46:c3:66:a8:09:5b:0c:13:5c:58:a3:
c0:fb:48:6f:dc:c6:75:89:23:06:ca:19:10:c6:58:1f:26:c1:
33:c0:18:eb:d8:01:09:b2:32:53:4a:ea:24:23:f0:69:55:67:
bf:a6:74:c3:6b:3c:a0:11:b8:33:b5:5b:35:7f:04:b2:1e:c3:
bd:86:6e:26:0f:55:8c:96:90:3d:69:0d:27:96:18:66:e4:83:
09:59:56:44:46:73:71:2d:ca:d3:91:1e:2c:7e:be:bf:10:c2:
fb:a3:4b:6e:0c:1d:08:2e:92:5f:6d:2a:ed:be:35:52:bd:cb:
ed:20:05:71:38:c1:f2:43:54:f8:cd:48:96:d5:9d:ae:5f:43:
2e:5d:4c:b6:b5:df:33:8d:95:43:3d:09:f8:40:50:0b:e5:93:
22:b7:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:59 2025 by rpki-client