Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EEDCCECE8811EFA9F1A079762E951A.roa
File: 72EEDCCECE8811EFA9F1A079762E951A.roa (raw, json)
Hash identifier: 7S7S8CI617aAapE3jgJo/mN1733SmoyFmPdTovp6OCM=
Subject key identifier: 2D:EA:DC:68:C0:17:AB:B4:DF:BB:F8:56:CC:E0:5C:E0:45:43:BB:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EEDCCECE8811EFA9F1A079762E951A.roa
Signing time: Thu 09 Jan 2025 12:51:31 +0000
ROA not before: Thu 09 Jan 2025 12:51:27 +0000
ROA not after: Tue 21 Jan 2025 12:51:27 +0000
asID: 137899
IP address blocks: 45.192.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66522 (0x103da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:51:27 2025 GMT
Not After : Jan 21 12:51:27 2025 GMT
Subject: CN=677fc653-56e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:3a:0e:d1:33:bc:cb:44:bc:97:ba:e6:92:
4d:a5:b5:07:a0:39:e3:a2:2e:91:8a:0c:eb:11:09:
75:44:a7:57:ae:51:46:63:f8:f0:67:5a:3c:3f:e1:
2d:05:ed:0f:3b:0b:95:8d:1d:ff:d9:48:76:bc:5f:
ab:9d:9c:45:41:64:b0:e5:56:79:29:0e:92:0a:c3:
07:97:35:bc:bf:68:98:dd:68:21:5b:e7:09:a5:c9:
a6:63:af:22:8a:00:f1:ed:f1:6d:1c:e1:03:f4:d9:
a6:ab:96:4f:c4:75:ea:94:5c:4e:fe:a7:1b:8d:e4:
6d:70:28:e9:c8:99:05:23:eb:9d:28:e8:5b:15:7e:
80:4d:89:3a:3b:4f:de:16:36:88:ae:91:f9:a7:5a:
33:01:05:97:26:c4:02:08:65:78:7c:c5:91:90:a0:
a2:13:30:0d:fa:25:79:80:8e:50:51:ed:85:73:23:
44:7b:09:1d:5f:5e:74:40:39:30:4c:fa:a1:f1:d3:
9e:8c:c4:08:74:23:98:fb:e8:3c:ed:00:26:17:30:
88:f4:d9:82:43:f1:1b:7f:5c:9b:dd:c3:a1:ba:04:
9f:62:87:89:81:e9:59:c2:e4:3d:ba:c6:1f:47:12:
62:cf:d0:07:b1:36:af:41:59:02:5d:92:7d:99:c8:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:DC:68:C0:17:AB:B4:DF:BB:F8:56:CC:E0:5C:E0:45:43:BB:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EEDCCECE8811EFA9F1A079762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.104.0/22
Signature Algorithm: sha256WithRSAEncryption
32:99:a8:51:9d:06:1f:6d:e7:d6:9e:7e:a4:3b:80:0b:01:9d:
5c:03:99:d5:2b:1a:2b:73:91:9d:d9:b0:00:d7:91:fb:a9:fd:
64:69:94:52:b2:3c:3d:6a:32:cb:9f:ae:9f:63:88:f5:48:82:
27:be:e2:da:60:e3:f1:a5:51:83:92:a9:fe:90:c3:be:0d:2e:
17:32:ff:40:24:3a:7a:a6:82:aa:9b:72:40:2a:ad:c2:e8:b6:
ec:b4:f8:9f:e6:62:f3:e0:7d:a9:5c:07:32:a7:3f:c9:19:35:
dc:99:f7:0e:e1:f1:a8:25:0c:20:cd:2d:fe:b6:32:8c:f4:cf:
41:92:31:c4:c2:fc:b3:96:d3:2b:cc:ff:15:70:35:cb:3d:05:
97:14:e4:c8:67:b1:62:ac:41:5d:ed:90:5e:e0:67:58:3c:e5:
a7:b8:62:86:23:1a:b8:9d:cd:1f:4f:62:39:91:18:8b:87:dc:
f5:05:eb:5d:d3:21:db:cf:47:e0:30:2b:12:40:3c:c2:ed:61:
6a:07:d3:27:e4:c3:a8:fc:38:86:81:c0:80:87:cd:ff:9e:d8:
6a:c2:3d:87:44:37:a4:cd:df:52:59:41:91:d5:c8:fe:75:8b:
e8:32:f2:cc:26:a1:eb:ad:83:c8:38:a9:c9:e6:21:40:13:7f:
ee:0d:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:57 2025 by rpki-client