Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8E2E0CC81511EF837B6C5F762E951A.roa
File: 7C8E2E0CC81511EF837B6C5F762E951A.roa (raw, json)
Hash identifier: lpkkt9xIfnzYC1a0TUnUybuAbnnvMEXy6cwQBeryS9U=
Subject key identifier: E2:CA:B2:E2:8C:01:DA:E3:4E:CF:3F:A2:2F:BC:C9:4F:E9:A7:CB:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F2B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8E2E0CC81511EF837B6C5F762E951A.roa
Signing time: Wed 01 Jan 2025 07:53:29 +0000
ROA not before: Wed 01 Jan 2025 07:53:24 +0000
ROA not after: Tue 04 Feb 2025 07:53:24 +0000
asID: 42831
IP address blocks: 45.196.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62132 (0xf2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 1 07:53:24 2025 GMT
Not After : Feb 4 07:53:24 2025 GMT
Subject: CN=6774f479-61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:f9:9c:c9:b8:b9:6b:aa:3a:0a:4c:0b:9b:
a0:09:fc:01:dc:3e:4b:da:20:1b:eb:ca:ea:8e:73:
44:6c:c1:0c:5d:07:8a:a6:ad:78:83:75:46:e1:6d:
e1:70:37:db:b4:82:ed:46:05:17:b7:94:6c:6f:60:
15:30:5a:9a:6c:c1:55:08:00:75:f9:d2:cc:71:87:
a5:eb:00:ce:6c:af:60:f9:94:76:df:3b:b2:b9:dc:
13:64:14:95:11:c2:b3:4b:21:9f:c4:09:88:a7:54:
b3:a5:96:50:1e:47:4f:14:a5:0e:9d:1f:71:91:e4:
69:7e:c6:a2:65:ac:cd:53:44:e0:3f:be:c1:e5:4b:
58:33:56:cc:b1:7d:cf:2f:29:49:64:3b:e1:e4:e6:
23:b6:80:c0:7e:8b:66:0c:8a:b3:ea:d1:4c:05:cd:
41:cf:71:ba:7f:e3:76:cf:13:83:1c:21:dd:b1:7d:
94:7e:7a:29:4f:ca:bc:ba:de:64:ce:6b:3a:7d:c5:
29:54:fd:5d:7f:77:48:1c:ac:aa:d6:3f:cf:5a:cc:
30:de:6f:64:0d:e2:e7:28:59:3c:bd:db:28:ad:12:
60:48:b4:37:54:0d:2e:ff:16:5a:ff:75:a1:8d:80:
d6:04:32:0d:09:23:4a:be:3d:cd:93:10:86:9c:6c:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:B2:E2:8C:01:DA:E3:4E:CF:3F:A2:2F:BC:C9:4F:E9:A7:CB:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C8E2E0CC81511EF837B6C5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
75:e2:34:f9:27:de:8b:69:1e:16:84:7a:c9:70:ca:b7:f1:65:
01:2f:64:53:db:c7:97:c1:27:1e:06:15:05:16:7c:52:e2:4f:
65:c3:02:db:24:fc:3c:e9:62:ca:ad:01:40:93:37:17:e7:0b:
f1:c1:5f:34:1a:7f:f2:66:01:07:84:08:e6:98:21:1c:a5:90:
fb:c8:7d:98:f9:ef:08:ce:7b:9a:dc:d5:22:ae:26:97:b7:fb:
78:2f:dd:ec:6c:56:92:31:87:8a:aa:6b:1b:c0:7c:55:01:ca:
a8:be:b9:bc:80:8f:30:1d:16:40:b5:ef:d9:51:51:60:33:a9:
ad:0b:52:08:bd:4a:60:f0:48:91:89:ee:d9:b6:1e:d2:fd:b1:
b7:98:c1:a5:6b:7b:98:9c:6b:bf:13:bd:b4:11:74:2d:f1:c4:
9c:9b:fe:b0:e6:02:72:7e:51:f7:a6:61:ef:71:31:9c:d9:4c:
f9:eb:a7:ea:17:db:fb:19:6d:3e:f5:88:d9:f2:7c:56:c2:66:
f3:a9:ca:2d:62:38:4b:02:18:28:94:67:a2:e2:c0:d6:10:46:
15:ac:74:01:0f:de:9c:fa:f9:0c:a6:a7:40:73:b7:03:22:b6:
3f:22:91:b8:9e:06:31:9a:f3:7b:83:10:9e:00:52:8d:7e:ad:
eb:a0:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:21 2025 by rpki-client