Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F986076CF3711EF9C975057762E951A.roa
File: 7F986076CF3711EF9C975057762E951A.roa (raw, json)
Hash identifier: Egi8E8qIvmowNDYRXk9eQcvxxkt4DdtSxiZKXlX3mhk=
Subject key identifier: 00:C5:82:2F:41:77:F1:47:C3:D4:3F:B5:45:87:70:3F:19:3B:F4:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F986076CF3711EF9C975057762E951A.roa
Signing time: Fri 10 Jan 2025 09:44:34 +0000
ROA not before: Fri 10 Jan 2025 09:44:30 +0000
ROA not after: Sat 01 Feb 2025 09:44:30 +0000
asID: 39600
IP address blocks: 45.197.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66871 (0x10537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:44:30 2025 GMT
Not After : Feb 1 09:44:30 2025 GMT
Subject: CN=6780ec02-f03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:c7:80:ef:cc:e9:15:41:54:a5:5f:ee:00:
81:15:33:4e:b2:f0:b0:53:49:ac:62:c6:85:93:db:
67:a1:c8:c7:1e:55:a5:fb:a6:77:ce:ba:ca:c3:ee:
c0:de:1c:ba:4d:d3:92:ad:dd:dc:ec:74:9e:c6:79:
98:01:d8:e0:94:8e:52:fc:e8:0a:4d:ba:b1:d5:eb:
7c:ea:b2:ba:9d:22:4e:d4:d5:a4:df:d8:79:9b:e4:
77:1f:f7:05:2d:31:81:60:6f:b0:71:3c:e5:ed:d8:
88:0c:b4:0b:39:ff:0d:04:d4:73:a3:86:b6:70:ca:
2e:f3:bc:e3:84:72:90:79:5c:ff:8e:b5:62:a5:12:
4d:51:e0:c6:e7:3b:e0:33:5e:5c:36:91:f2:9f:14:
eb:7b:f3:f3:41:87:c4:00:2b:c2:83:c2:89:24:26:
12:7d:38:9f:3f:bf:08:3b:ae:cd:87:94:e2:6f:30:
f6:24:3e:90:ca:e0:72:c9:f2:40:0e:da:13:ca:a7:
b9:21:ac:d6:d1:c8:1a:b3:1c:c4:91:43:23:f7:80:
8a:a5:d1:97:c2:b3:be:67:e8:14:f3:1f:dd:98:53:
ea:b2:71:2f:60:ba:a6:1b:46:d0:69:e5:48:4f:5e:
c6:ae:81:76:39:35:6c:bc:17:9d:6b:d9:ce:41:1e:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:82:2F:41:77:F1:47:C3:D4:3F:B5:45:87:70:3F:19:3B:F4:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F986076CF3711EF9C975057762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.228.0/22
Signature Algorithm: sha256WithRSAEncryption
93:1c:03:b6:69:ef:71:d4:99:df:0f:82:72:0a:fd:3e:47:5a:
08:94:00:8c:d0:26:e1:68:92:f1:70:37:ce:cd:32:9a:d7:84:
5a:9a:6b:48:0b:19:ca:3a:d7:15:ca:20:11:81:8b:59:9f:e1:
c5:46:16:ea:43:ad:ba:37:12:9a:ca:10:ce:77:32:59:a7:91:
69:1e:70:59:71:74:cb:c3:92:a8:dd:15:be:e9:41:87:81:1c:
0d:59:71:e9:fc:36:a4:00:93:0f:f7:46:5b:e4:35:13:e3:77:
2a:6d:dd:2e:c5:65:9b:00:b2:c0:ae:9e:40:7e:6f:8f:89:85:
14:42:31:a5:5a:d6:7b:7d:23:5a:e8:9c:94:2e:6e:a7:3c:90:
f8:60:57:08:d1:c2:be:bd:34:2e:01:5c:63:02:52:4e:28:ee:
72:9e:c8:39:45:23:81:a8:01:73:b0:98:da:3a:b2:0b:3d:14:
39:7a:fe:46:a8:20:04:1a:89:ff:8d:07:3b:7b:b3:fd:e1:8e:
0f:d6:0c:b1:c1:ae:b8:cc:c7:4d:83:7e:b3:c0:8f:81:c4:cc:
0e:20:ee:90:82:76:fc:e6:b5:28:82:c3:1e:cb:a2:19:45:02:
a9:58:41:18:ab:76:71:97:4b:69:d2:1f:99:2d:76:9e:d4:6f:
7c:c1:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:40 2025 by rpki-client