Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83F7A49EBF9F11EFB96240AE762E951A.roa
File: 83F7A49EBF9F11EFB96240AE762E951A.roa (raw, json)
Hash identifier: jpgdg2Jus6Xhh3zt4MuPaIef8pIshu75JR0mcsni0Go=
Subject key identifier: 79:64:D4:04:E9:1B:02:11:FB:6F:6D:BA:58:CC:7A:BE:73:DF:43:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83F7A49EBF9F11EFB96240AE762E951A.roa
Signing time: Sat 21 Dec 2024 13:28:51 +0000
ROA not before: Sat 21 Dec 2024 13:28:47 +0000
ROA not after: Sat 25 Jan 2025 13:28:47 +0000
asID: 203020
IP address blocks: 45.198.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59340 (0xe7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:28:47 2024 GMT
Not After : Jan 25 13:28:47 2025 GMT
Subject: CN=6766c293-2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:c2:98:89:48:e9:20:62:0e:90:b4:89:04:
45:e9:5e:c8:4b:a5:a2:4d:d8:39:09:82:03:65:4f:
78:99:79:a5:c8:ac:82:98:27:9d:2f:25:93:ee:84:
fa:70:05:07:c9:38:6f:f1:68:1b:97:db:4f:4b:ce:
5c:58:31:fa:c7:39:6a:2a:b6:df:2b:21:f7:74:a9:
2d:8d:3c:04:a5:78:65:5e:56:4a:d3:0d:fb:c2:97:
ef:39:dd:96:7b:ba:5b:d1:6e:1a:f0:90:b7:fa:25:
80:8a:9a:77:36:a0:37:e8:27:38:fd:3b:2e:6e:35:
18:3a:fb:2e:82:52:4e:95:14:ae:03:d1:c8:e7:c6:
5e:31:d7:f5:b2:e5:42:56:65:f6:7b:16:03:91:f5:
72:23:83:17:e5:5a:86:70:ef:0f:2e:5c:f7:57:e8:
20:a2:bb:57:38:01:d5:ac:99:18:3c:c7:17:75:a4:
f9:1e:a5:d8:57:7a:fd:cc:91:b2:81:6f:a1:b3:d3:
4d:2c:f1:bc:a3:42:e4:2b:97:51:42:40:fd:80:33:
de:6f:34:bc:b9:f2:eb:df:e0:cc:3d:05:5f:07:7f:
8b:e9:8b:a4:fb:46:dd:13:71:50:3a:e5:ea:ac:fc:
cc:98:48:cf:62:65:86:10:45:7d:2a:0b:53:07:7a:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:D4:04:E9:1B:02:11:FB:6F:6D:BA:58:CC:7A:BE:73:DF:43:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83F7A49EBF9F11EFB96240AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.196.0/22
Signature Algorithm: sha256WithRSAEncryption
16:38:77:2d:05:b3:77:1d:c0:c6:37:cc:74:c0:e1:86:fc:ff:
62:2a:dd:4a:8a:af:0b:3b:52:c9:07:6a:10:23:20:19:5e:3c:
3a:8c:44:be:cf:86:e4:45:ee:78:33:6b:be:99:2a:82:e4:c5:
ac:b0:cf:09:fe:a2:a0:20:32:38:87:50:db:83:bc:5b:cd:95:
c7:35:df:d6:42:26:61:6e:8b:54:e5:85:16:ab:b5:63:c9:a3:
41:ba:b5:04:f3:3f:6a:95:87:7f:13:ca:38:38:68:6d:4e:b8:
bb:8f:a1:a8:42:33:92:e4:ee:b9:62:de:17:6d:39:d4:f0:79:
0e:94:68:64:d5:0c:e7:b4:ff:c6:b4:5b:b7:8d:bf:80:39:a3:
a0:b3:5f:a9:c6:42:30:91:ec:45:07:92:1d:bd:6f:9a:8e:fe:
d1:af:b0:25:9c:eb:bc:a0:49:af:86:a9:c7:b5:bc:6f:b8:c0:
f4:47:fc:18:0b:dc:40:68:01:55:95:8f:ff:b8:88:7b:4b:8b:
1f:f0:96:2f:02:e5:97:2c:e4:c9:60:a2:6b:19:2e:0c:82:9c:
f6:fb:ab:ff:fb:b8:26:86:94:5c:fe:da:01:74:f9:39:05:b2:
08:77:50:29:9b:e3:e3:b0:05:66:22:a4:b0:2d:86:18:47:ae:
03:16:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:21 2025 by rpki-client