Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A4B1C2B92A11EF9C1E799B762E951A.roa
File: 62A4B1C2B92A11EF9C1E799B762E951A.roa (raw, json)
Hash identifier: j6+dZN0xUGIjOU4Gt3ytYW6kIJscYFtsUXBhJPHe2Eg=
Subject key identifier: 1A:EB:A6:8F:4E:55:BE:97:B9:06:F7:48:58:F0:C4:9D:15:39:DE:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E33D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A4B1C2B92A11EF9C1E799B762E951A.roa
Signing time: Fri 13 Dec 2024 08:15:17 +0000
ROA not before: Fri 13 Dec 2024 08:15:13 +0000
ROA not after: Sat 25 Jan 2025 08:15:13 +0000
asID: 202656
IP address blocks: 45.199.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58173 (0xe33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:15:13 2024 GMT
Not After : Jan 25 08:15:13 2025 GMT
Subject: CN=675bed15-6d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:2e:ae:e8:11:db:74:50:d2:07:bf:9e:b6:
50:c6:41:db:25:87:59:9c:36:28:9a:f4:36:51:a6:
25:82:56:76:c0:17:91:c8:18:e0:ae:20:b9:5a:43:
a9:c6:59:cb:9d:d3:41:d4:7a:84:90:09:06:18:cd:
bf:41:57:83:98:5b:3a:66:0f:60:d9:dd:af:44:c5:
8c:6f:51:f6:64:5e:aa:34:9d:c2:ac:28:b7:ff:f2:
01:a1:13:2c:11:f5:55:86:47:84:85:e1:36:7b:20:
3a:30:47:fc:38:a1:a2:8f:35:52:b7:26:d5:7d:46:
3d:8b:99:57:26:87:64:74:25:f0:b6:fd:f4:fc:6f:
f3:e0:15:57:e4:7a:79:0d:df:94:5d:3d:2e:b2:36:
03:7e:b8:64:62:cc:4c:a7:5a:f3:c9:94:07:82:46:
a9:51:95:f2:4c:f0:c4:39:cb:2b:fd:5d:d9:91:cb:
52:d3:ee:9e:e5:4f:04:a5:16:fd:2f:ba:3a:d0:18:
77:31:fd:26:65:42:3a:5b:82:5d:56:2b:dd:73:b3:
cb:dd:14:17:41:25:d9:fd:3b:4e:c7:d4:09:93:6b:
05:28:5b:c1:c4:a9:44:a5:f9:b9:13:67:bd:3f:df:
19:4e:00:f4:40:41:41:eb:17:40:e0:cb:c6:97:e3:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:A6:8F:4E:55:BE:97:B9:06:F7:48:58:F0:C4:9D:15:39:DE:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62A4B1C2B92A11EF9C1E799B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.222.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:24:ff:97:34:b4:1c:b8:7a:19:2b:35:25:b4:4a:33:f3:38:
0d:64:bf:47:89:08:73:b7:b5:e1:78:dc:27:96:d7:da:c5:7b:
0e:7f:e4:0c:aa:b7:b5:39:f5:14:2f:60:35:29:c6:0c:40:48:
7d:ab:35:ac:e0:89:b7:4e:7f:3d:5a:44:05:b7:a9:44:a8:ce:
05:1c:bc:db:34:81:94:e0:8d:6e:56:72:18:32:c6:2a:76:ff:
fa:bf:41:6d:1f:68:7d:1b:00:8c:47:3c:04:74:b7:22:81:e1:
57:8a:c5:2d:ee:d4:14:bc:ec:74:fd:20:36:6b:03:2e:51:ab:
e2:51:dd:5a:dd:fe:ee:b5:34:fd:87:75:c4:6d:9c:2a:dd:87:
ab:23:6b:98:ee:77:4a:46:79:b9:d3:55:c5:23:cb:1a:ff:4e:
45:60:00:db:22:38:fa:48:16:8b:6b:2e:aa:19:7b:a6:d6:39:
ce:c6:5c:82:64:67:1d:8b:92:c9:5a:6d:c8:9a:41:7a:a1:6d:
bc:e4:d2:94:4c:38:f1:de:d2:15:72:51:8a:f7:f5:9f:1f:df:
8b:6a:ad:ba:31:64:38:ef:e6:77:d2:3e:0f:a2:79:80:36:a4:
6f:59:40:26:ab:4d:1f:76:2a:5f:c2:68:c2:b0:5f:a3:68:a1:
ff:2a:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:15 2025 by rpki-client