Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6BD5ACF6411EF968F726E762E951A.roa
File: 54E6BD5ACF6411EF968F726E762E951A.roa (raw, json)
Hash identifier: MQC5r6EGmZc/D3Z9wjZtCrMJ762urpR0IuFv1qfEVsI=
Subject key identifier: 44:B0:60:FC:57:57:4D:02:E3:90:37:B7:31:65:33:63:0A:1E:18:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010575
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6BD5ACF6411EF968F726E762E951A.roa
Signing time: Fri 10 Jan 2025 15:05:30 +0000
ROA not before: Fri 10 Jan 2025 15:05:26 +0000
ROA not after: Tue 21 Jan 2025 15:05:26 +0000
asID: 209242
IP address blocks: 45.194.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66933 (0x10575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 15:05:26 2025 GMT
Not After : Jan 21 15:05:26 2025 GMT
Subject: CN=6781373a-557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:e6:ff:d2:fc:51:da:79:84:e7:40:e5:ee:
e6:c3:f4:06:d4:4e:d3:6b:c3:4d:01:08:cd:6b:a1:
44:4b:8f:79:2d:4e:3e:be:1b:bb:a6:ba:57:99:c3:
30:26:46:58:02:d7:cd:7c:78:4b:16:b0:3e:ba:dd:
bf:dc:d2:12:c4:bc:d3:53:57:34:6f:b1:ed:2e:0e:
96:e0:32:c5:23:38:2e:7d:10:b2:66:f6:2d:06:76:
01:20:32:e4:ca:fc:02:f9:ff:49:51:21:e2:bc:bf:
87:0a:40:6c:b6:98:9f:a7:56:5e:93:90:2a:32:1f:
37:ed:c4:d1:41:6b:b5:d8:43:0b:7c:b3:b6:2c:3c:
a2:66:6b:27:02:17:28:94:4f:47:6c:06:3f:16:13:
65:3d:a0:9c:2a:41:27:b9:59:1d:c6:bb:3f:41:97:
1d:04:1f:e7:26:5f:ca:6d:9d:a6:47:dc:69:0f:a8:
11:91:67:c8:9c:76:f2:08:24:36:a8:1c:19:58:5f:
de:6c:b2:1d:d2:59:41:69:5d:c4:9c:23:af:db:b1:
6a:57:c7:bb:26:d2:6d:0d:f5:b3:d7:d3:b8:e6:97:
19:71:20:53:cb:e8:bf:84:8e:72:09:1d:27:ee:44:
1d:1b:96:ad:7a:4b:bd:9c:d2:e7:48:41:0a:1a:92:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:60:FC:57:57:4D:02:E3:90:37:B7:31:65:33:63:0A:1E:18:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6BD5ACF6411EF968F726E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
52:94:3b:c8:f2:e0:bf:89:96:a9:09:17:5e:d0:e4:ba:48:01:
1a:a2:73:6e:b3:02:f5:02:a1:b7:af:23:0e:17:19:0f:df:6f:
ac:89:39:b8:01:12:5a:9e:4f:30:d6:ba:79:61:94:c7:e1:7b:
f8:4f:05:55:c5:5e:85:76:fd:6c:2a:13:df:f3:f7:19:c7:ca:
be:30:cc:f2:51:b2:33:60:ed:85:b3:73:70:b9:52:9e:66:9d:
1c:9c:c1:72:5a:fa:b6:aa:9b:33:e2:9b:bc:8a:08:5b:5d:0e:
1d:a6:2b:67:af:d8:0f:74:3e:d3:0f:d1:97:fc:9c:5d:b7:ad:
72:ce:1e:06:c7:4c:43:73:c6:c8:43:54:0d:4b:da:eb:d8:a8:
8c:dc:cd:c7:dc:a0:42:f0:7c:75:7c:db:0d:04:91:e5:8c:67:
8e:63:39:fd:44:cd:a7:1b:77:0d:03:f1:09:18:d4:8b:f7:25:
f4:c5:27:ae:5e:f2:ef:e8:db:e5:e9:91:f4:97:d1:b5:ce:6e:
93:f0:17:11:a6:08:b1:57:4d:ec:fe:f5:84:49:d9:b1:58:cc:
92:3a:ec:9e:ac:2f:be:b5:bd:78:fb:67:e6:7e:eb:08:92:27:
de:84:95:cb:f3:7a:46:f5:dd:5d:54:fb:22:9f:91:19:49:cf:
75:49:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:55 2025 by rpki-client