Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B21BCEF5C411EF98091BBF762E951A.roa
File: 76B21BCEF5C411EF98091BBF762E951A.roa (raw, json)
Hash identifier: kwcCExsHEgzk5zrHN6uD3X1NYaRkLT0UKTFTZP7azZU=
Subject key identifier: AA:4F:29:46:8B:3B:40:92:B2:33:5B:4B:57:8D:2D:68:A0:B9:2E:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B21BCEF5C411EF98091BBF762E951A.roa
Signing time: Fri 28 Feb 2025 11:09:23 +0000
ROA not before: Fri 28 Feb 2025 11:09:16 +0000
ROA not after: Sun 30 Mar 2025 11:09:16 +0000
asID: 138995
IP address blocks: 45.192.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81189 (0x13d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 11:09:16 2025 GMT
Not After : Mar 30 11:09:16 2025 GMT
Subject: CN=67c19963-2e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7c:8f:a9:51:4c:72:a2:11:ec:66:0b:7d:49:
e4:66:6e:42:8e:28:44:60:dc:af:63:82:15:63:5f:
ca:fe:be:83:68:2c:b2:2b:8b:f3:85:4c:ec:7f:4d:
22:b2:0e:22:77:96:5e:20:33:04:05:27:bd:24:34:
05:d7:17:c4:85:c0:60:d4:ac:2d:97:aa:1e:63:6a:
ca:a2:77:59:35:82:c4:8f:e0:5c:32:55:dd:b5:08:
9a:d6:c5:43:97:6c:5f:80:20:2b:4a:4d:01:59:51:
c3:b5:a0:8e:71:3a:21:1a:7f:31:f3:eb:5e:c6:50:
61:fb:1a:10:b1:06:cd:55:87:e2:af:65:0d:ca:0a:
21:c9:fb:06:64:b7:7f:96:64:a6:52:65:b5:54:0c:
04:46:b7:7b:45:18:f9:93:14:5c:7f:3b:b1:aa:ec:
6b:18:e2:43:37:d0:87:9e:06:00:85:3b:ca:66:4e:
66:ce:c3:8d:3d:db:3c:d4:3a:53:93:b1:da:05:42:
b3:73:0a:28:48:6f:cc:3f:79:56:d7:db:b3:35:53:
69:61:a7:fc:b8:c1:ad:21:ce:0a:c7:35:d8:26:fa:
f6:70:a6:3d:ce:13:58:d7:ae:89:cb:b6:6a:d8:f3:
7e:a8:29:40:16:f9:0e:76:65:82:00:20:81:ef:d5:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:29:46:8B:3B:40:92:B2:33:5B:4B:57:8D:2D:68:A0:B9:2E:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76B21BCEF5C411EF98091BBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.218.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1d:dd:cb:b1:cb:62:5f:e4:c7:01:e7:e1:58:cd:5e:36:61:
d4:e6:4a:77:43:8c:2f:81:d8:e0:96:7f:61:0e:3e:7e:bc:7f:
48:6b:1c:b5:28:bf:1f:ae:c9:42:bf:33:cb:8d:98:12:94:f3:
c5:12:2b:95:c8:1b:7f:96:c6:e9:7f:94:5f:e3:8f:27:9e:d2:
1b:19:73:79:ae:49:16:63:cc:da:83:fe:2d:6b:a7:d7:fe:e1:
50:0f:e5:8e:4b:97:49:cb:cb:6c:c2:1c:4b:ca:1c:dd:76:bd:
5e:54:b5:e9:30:30:50:cb:68:bc:56:81:b6:1c:d9:41:db:27:
a7:92:a8:b7:b1:db:5f:2f:72:a1:e1:a7:77:5e:fd:7d:ce:55:
2f:fb:e1:de:12:d9:52:69:52:d9:de:2c:f1:d8:19:29:47:ae:
ae:8c:46:09:30:67:7b:8d:2d:c0:a3:e4:12:8d:c3:43:5a:11:
8d:4c:9a:23:9d:8b:52:6a:c8:4b:2c:d0:33:8f:dd:ca:bd:11:
00:af:3a:6e:cb:4a:cd:13:63:35:07:1f:1f:5f:94:c4:f6:58:
20:85:23:d7:51:bc:ed:36:99:24:74:1b:bc:7e:8f:55:cf:75:
e7:1a:57:41:f8:13:a7:d1:bd:3d:f6:23:ef:26:2e:cb:d2:97:
bd:36:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:16 2025 by rpki-client