Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829DFFB2CE5911EF80FE3953762E951A.roa
File: 829DFFB2CE5911EF80FE3953762E951A.roa (raw, json)
Hash identifier: mwfzht+jc1QpUkDNfhwENfq6n/SUUG+8bp1ZYXn0Ks8=
Subject key identifier: 43:F5:DC:A4:E9:72:8F:C4:AC:0A:9F:3A:D1:32:CF:83:23:1A:3A:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829DFFB2CE5911EF80FE3953762E951A.roa
Signing time: Thu 09 Jan 2025 07:15:31 +0000
ROA not before: Thu 09 Jan 2025 07:15:27 +0000
ROA not after: Mon 20 Jan 2025 07:15:27 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66292 (0x102f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:15:27 2025 GMT
Not After : Jan 20 07:15:27 2025 GMT
Subject: CN=677f7793-50b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:a5:48:21:7b:f1:60:34:a0:45:7c:52:23:
9b:03:b2:65:bd:99:81:a5:ea:a9:a7:32:79:be:2d:
7b:cf:33:64:0a:20:c5:72:2c:eb:b2:7f:9c:ef:41:
02:fa:26:a2:e3:a1:e2:e9:5a:96:c4:7e:17:4a:97:
19:57:23:9a:da:cb:2c:8e:26:2c:b5:cf:22:72:76:
9e:cc:69:2a:b5:19:6c:59:54:74:c5:9c:45:c9:42:
33:10:3a:fb:e3:ba:b8:56:af:1c:84:3d:46:6b:a7:
3a:c7:29:a7:69:54:ce:41:97:e0:89:4c:73:1c:31:
33:c4:67:2a:7c:43:0c:a0:37:37:d9:55:66:7b:8c:
85:39:fa:67:19:2d:98:5f:c7:37:eb:1e:c4:dc:8e:
1a:b6:ce:d1:5d:8f:a7:94:e1:02:34:7d:c1:ff:f0:
9f:ec:e0:b9:8d:09:62:71:2b:ff:05:b2:04:c6:c2:
5e:3f:14:7d:e5:bf:44:ec:23:28:df:05:2c:f5:b9:
b9:15:94:33:2d:8f:76:24:60:bd:45:5f:be:fd:6d:
ae:44:b8:f6:0f:f9:0c:41:2d:18:96:8b:0d:92:05:
d2:34:f3:04:4b:d3:59:34:2e:62:05:be:c3:a7:84:
46:4b:27:26:b1:42:a9:24:e3:b3:d8:a6:e2:a5:4a:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:DC:A4:E9:72:8F:C4:AC:0A:9F:3A:D1:32:CF:83:23:1A:3A:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/829DFFB2CE5911EF80FE3953762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
02:95:f4:3a:6c:59:c8:b1:c6:ad:bf:d9:35:10:6c:e8:43:5b:
b2:13:b2:c2:fc:b3:ce:99:fe:75:3b:bf:73:f3:9e:56:2d:55:
61:bf:ed:aa:ec:88:a9:b2:da:0b:8b:de:24:db:58:3a:e7:7f:
90:dc:b9:58:fc:1a:8d:81:2a:7e:1d:7c:1f:9c:f1:da:1b:4a:
79:39:02:b6:e0:9c:8e:ae:37:28:a2:b8:18:15:5d:3c:44:85:
4a:6d:fe:9b:ae:80:aa:ca:ae:3f:52:02:fb:01:23:6a:40:c5:
cb:b6:2e:2f:05:8d:88:28:c6:f0:fa:33:00:b0:db:a6:68:bb:
77:85:8b:6e:40:97:10:2a:08:73:15:fc:9e:16:03:2b:ef:ed:
3a:b0:07:3a:91:36:28:f8:7f:33:f0:fb:ad:49:3e:cd:c7:6a:
f1:b0:cf:58:6f:4f:12:16:48:52:45:e7:1b:22:ca:63:4d:9a:
92:1f:f0:db:59:dd:bc:8d:73:ed:25:b9:d4:68:ad:27:30:3f:
1d:ed:f2:5e:6e:95:ce:29:38:58:ec:db:c6:e8:23:b5:5a:ca:
5d:fd:35:5b:88:6b:93:d3:4e:d1:f3:4b:80:2d:46:7f:ae:be:
a2:f8:b7:83:60:39:32:70:1b:e0:24:4a:10:f6:2f:5e:23:eb:
e1:f1:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:31 2025 by rpki-client