Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72759B40C5CB11EFBAA2455E762E951A.roa
File: 72759B40C5CB11EFBAA2455E762E951A.roa (raw, json)
Hash identifier: 4WAGjWSbkgYXRjZJSl/dvwtxDt4aVFI8Ea/NKA4TfHc=
Subject key identifier: CE:E2:DB:FB:62:58:F2:CA:9D:72:D6:C2:8B:5F:BF:8F:D6:81:04:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F1BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72759B40C5CB11EFBAA2455E762E951A.roa
Signing time: Sun 29 Dec 2024 09:58:26 +0000
ROA not before: Sun 29 Dec 2024 09:58:22 +0000
ROA not after: Sat 01 Feb 2025 09:58:22 +0000
asID: 136744
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61882 (0xf1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 29 09:58:22 2024 GMT
Not After : Feb 1 09:58:22 2025 GMT
Subject: CN=67711d42-2f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:ff:61:15:ee:16:a8:f0:9f:52:fd:9c:0f:
f9:0e:97:ad:85:ea:ab:da:58:1f:4a:75:02:eb:05:
71:5f:37:40:15:a7:a2:bb:d7:58:e0:f1:e1:3c:9c:
2d:af:87:52:33:63:70:b5:38:e3:30:eb:eb:32:2d:
3c:58:37:c5:1a:25:ff:e8:2a:9c:c3:4e:2a:dd:29:
be:b3:ec:5d:4f:49:28:3c:97:07:61:f2:4c:b1:1b:
80:63:9f:c4:a3:76:ea:77:c1:e1:ac:41:d9:df:d1:
7b:99:91:6c:b8:ad:c5:52:9f:6a:81:e3:1f:13:ac:
f1:b9:80:3f:36:77:8c:44:84:dd:9b:ad:b1:68:2c:
19:6b:db:ba:67:68:c1:2a:ac:58:27:0c:a2:eb:1f:
2e:df:31:05:7a:be:88:88:32:85:ea:04:46:4a:06:
d8:c2:35:3c:44:d3:a3:68:50:c2:81:6d:53:6d:06:
3e:01:78:20:71:83:f5:1f:aa:d2:eb:39:bf:1a:be:
7d:9c:6b:d1:d3:11:84:ec:07:1a:b1:35:6b:4d:ce:
b6:65:fd:a5:52:96:9e:c4:44:d1:10:20:ac:7c:a7:
30:b3:eb:45:23:c9:22:90:03:4c:15:c2:69:6e:90:
5f:1e:be:c7:9b:6d:ed:e3:68:2c:f2:9d:c1:5c:2e:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:DB:FB:62:58:F2:CA:9D:72:D6:C2:8B:5F:BF:8F:D6:81:04:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72759B40C5CB11EFBAA2455E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a9:ef:ba:ab:13:89:6e:52:ac:83:e0:dc:a3:66:72:c5:17:
68:36:26:d1:a5:66:85:4d:88:53:2e:5b:78:60:f3:b8:81:8c:
63:7b:86:88:1a:2e:71:7e:5c:3e:97:73:73:01:73:cb:13:c4:
0d:a9:1c:a9:f7:f0:f5:8c:ba:ea:72:54:7a:7c:aa:02:ed:bb:
0c:40:06:6d:e9:2a:56:c4:79:60:90:52:fe:a4:c7:cb:b8:78:
e6:7e:1d:01:e1:f4:e5:63:45:f6:56:11:e3:20:fc:d0:d1:2d:
56:9f:dc:46:da:1e:e7:04:f9:60:54:12:30:d8:66:1d:17:05:
ca:3d:37:2f:d8:c8:ae:aa:ad:9d:0f:a7:ee:57:04:c4:45:e5:
e6:bf:bb:83:f2:3b:a9:ca:d3:c1:01:af:2b:d8:60:e3:a3:d2:
eb:1d:d8:43:28:f1:38:cb:90:db:42:6f:b4:b3:54:f5:44:17:
97:47:3d:8a:b7:65:74:fa:b6:61:f8:a5:8f:fe:c8:aa:4c:ba:
0a:3a:40:db:9c:80:b4:cb:79:85:91:59:69:0c:8e:8f:71:51:
fa:97:9c:89:1a:07:fd:df:a2:1c:58:89:bc:17:53:8c:00:c0:
fe:fd:13:44:df:a5:17:bd:bb:9c:7a:d7:9f:cd:f0:25:48:b4:
a4:aa:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:09 2025 by rpki-client