Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7347D7CACE9211EFA6F8D7B8762E951A.roa
File: 7347D7CACE9211EFA6F8D7B8762E951A.roa (raw, json)
Hash identifier: k+vRBrRxxw4pQPEX6vcUaTyJlOG/149ncW+Uo+ITCJE=
Subject key identifier: 5D:21:BB:83:46:8B:FA:F2:E4:CF:27:8E:98:BC:06:E2:FB:E2:50:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7347D7CACE9211EFA6F8D7B8762E951A.roa
Signing time: Thu 09 Jan 2025 14:03:07 +0000
ROA not before: Thu 09 Jan 2025 14:03:03 +0000
ROA not after: Wed 22 Jan 2025 14:03:03 +0000
asID: 39600
IP address blocks: 45.197.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66552 (0x103f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 14:03:03 2025 GMT
Not After : Jan 22 14:03:03 2025 GMT
Subject: CN=677fd71b-5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:20:9d:2f:f9:2c:ca:e8:0c:ef:a5:b9:04:
77:87:1a:e5:7e:85:dc:4e:79:a2:ee:5e:5b:13:a4:
77:46:8b:32:d2:c7:40:ac:f5:d2:3c:cc:db:5e:f5:
eb:dd:ad:09:e1:8d:2c:cb:f3:de:4a:59:7c:24:f7:
4c:f8:9a:36:b3:21:27:26:7a:b9:71:61:3f:35:09:
b1:fd:c9:f6:ec:12:42:44:c1:66:ad:29:cd:5a:55:
bb:6a:20:6d:a4:36:ba:8d:66:c3:76:20:de:11:42:
77:ea:a7:d5:d6:4f:59:5a:0d:85:0b:7f:ff:51:a1:
09:75:5b:c1:94:97:e3:0d:7b:f8:71:b5:8d:d9:7f:
ec:f0:e7:4f:be:e6:86:ed:d3:85:82:aa:34:15:38:
19:93:08:cc:75:0a:83:b8:b6:ab:09:c8:de:f0:af:
be:5b:cc:88:51:1f:82:84:ba:e1:1f:14:1a:cb:b6:
a7:1a:90:35:a7:14:ab:2a:eb:b0:06:d2:fa:88:17:
34:b5:f4:61:2f:a3:96:15:d1:17:45:a4:27:6e:d8:
53:26:15:6c:18:94:43:76:a7:ff:b1:93:f6:0d:9a:
01:7e:ad:a5:d4:06:aa:e1:be:8a:2f:b2:43:8c:64:
a4:86:aa:24:95:fc:bb:9b:ec:d3:33:6c:d0:cf:7b:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:BB:83:46:8B:FA:F2:E4:CF:27:8E:98:BC:06:E2:FB:E2:50:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7347D7CACE9211EFA6F8D7B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.224.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:62:23:5a:f5:15:b1:68:55:de:a7:ac:f0:1e:c6:49:f8:08:
8f:6e:9d:b8:4b:25:a3:91:17:01:6c:53:16:e5:a0:c5:12:0a:
12:e8:3c:6c:87:a5:b2:91:b6:72:67:08:09:4b:de:32:a9:0c:
21:79:48:41:58:49:c1:ae:38:50:47:d1:9b:d5:24:ed:3b:52:
a5:d1:58:29:b2:cb:71:99:d7:1b:39:64:0a:78:6a:60:be:42:
15:c6:4c:77:b3:23:09:60:8f:22:0f:ca:dd:8f:c3:ca:98:71:
e4:5c:93:89:0c:c7:4a:b0:c1:42:81:4d:b8:62:ac:53:2c:da:
7a:2c:4a:ff:c5:7c:ad:2f:45:8b:2c:cc:68:e0:ac:7a:c1:9d:
f8:87:b6:77:f9:f1:65:7f:74:21:8c:ed:da:80:c6:d4:f2:a8:
ac:91:e2:74:a8:fb:8a:80:60:c4:db:4e:f4:95:00:6d:f3:f8:
34:6c:b4:b5:9b:b7:d5:96:28:7c:6e:7e:ce:d7:56:bd:12:09:
b9:13:2a:66:33:48:0c:86:04:65:fd:d3:27:fa:9e:10:fa:00:
31:8d:f9:01:c8:7f:02:d0:21:6c:de:ae:2f:76:eb:ad:50:12:
fb:ef:1f:a7:76:5a:8e:45:97:a1:a4:70:42:df:e9:6a:cc:75:
ef:cc:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:31 2025 by rpki-client