Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8421CC6862C311EEBB9C522B4AD9E6FC.roa
File: 8421CC6862C311EEBB9C522B4AD9E6FC.roa (raw, json)
Hash identifier: jsVA3k6rihYGNWVdmwiFIbV1+KkKg9DUvJTsImWa8do=
Subject key identifier: 11:49:06:03:AA:FE:B7:41:CF:4D:B1:6A:F6:5F:FE:9D:2D:1A:FE:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3D71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8421CC6862C311EEBB9C522B4AD9E6FC.roa
Signing time: Wed 04 Oct 2023 14:37:17 +0000
ROA not before: Wed 04 Oct 2023 14:37:14 +0000
ROA not after: Sat 14 Oct 2023 14:37:14 +0000
asID: 9009
IP address blocks: 45.192.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15729 (0x3d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 4 14:37:14 2023 GMT
Not After : Oct 14 14:37:14 2023 GMT
Subject: CN=651d789d-06c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:84:12:57:83:55:0c:7c:2d:16:6d:7a:0a:
07:65:f1:95:93:26:9a:e3:fe:a7:d8:ed:5b:37:7e:
dc:fa:f1:b5:95:37:da:97:a6:a6:7e:01:00:cf:64:
a6:e8:a6:7d:15:11:41:40:78:fc:9a:c5:0e:c4:6f:
7e:d6:f7:3e:92:49:3f:fc:82:9c:29:48:25:96:f3:
2f:76:6f:d2:93:15:c3:2e:8d:f3:33:85:92:d5:39:
ec:98:98:6d:e6:ed:61:d9:3b:b4:56:a0:71:31:eb:
45:4e:e2:41:24:66:6d:45:72:db:50:21:1c:de:51:
6e:12:87:d9:e4:92:2d:a4:b0:49:8f:d4:18:b5:db:
3a:96:0e:4c:e7:82:2a:8e:67:28:fa:b5:bf:1e:6e:
11:08:8e:63:62:1a:e6:c5:91:ff:7b:fd:88:84:aa:
49:43:1d:a6:3a:ae:a1:3b:3c:50:99:a0:07:aa:3a:
0f:c6:43:7f:ca:15:ad:12:20:b5:77:e3:2e:8d:e9:
74:c9:03:58:a9:4f:5e:dc:fe:9c:08:2a:1d:64:c5:
ea:53:86:ad:4b:5c:fa:02:e0:03:e8:45:dc:aa:08:
38:01:e8:11:9c:b2:84:8c:56:73:fa:00:26:92:d5:
52:dd:91:97:aa:be:71:87:03:b3:95:2a:4b:1e:ce:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:06:03:AA:FE:B7:41:CF:4D:B1:6A:F6:5F:FE:9D:2D:1A:FE:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8421CC6862C311EEBB9C522B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
76:28:0a:00:9e:c2:64:5b:37:d0:99:9a:35:b9:e1:32:44:61:
0f:88:47:09:7e:32:33:72:e8:86:a4:f0:97:50:ab:4f:17:75:
3c:de:d9:7a:12:60:29:5b:fd:a4:2a:1e:db:eb:9b:f9:cc:2f:
01:8d:b7:89:b2:04:37:15:8f:34:fe:85:3a:b4:6e:f9:21:ca:
b5:ec:eb:72:b5:5f:88:26:25:32:dd:fd:9f:21:74:2c:77:7e:
1c:6a:e3:a2:16:8b:28:95:28:99:c1:d3:66:c1:1d:13:44:15:
dc:d1:c3:18:02:48:d5:f9:7d:58:70:b4:6b:8a:94:1c:d9:7e:
62:96:61:46:0c:91:3f:55:0e:8c:96:56:be:9b:ce:00:2b:ab:
a8:b4:8f:e2:c6:3c:81:67:a5:26:3b:3f:c2:b3:58:08:72:78:
02:38:52:04:58:dc:56:30:4b:a8:05:c9:26:78:83:44:35:c9:
41:89:2e:6c:41:f9:46:b1:68:99:f4:81:95:b5:88:bd:e8:13:
4e:cd:23:1c:de:92:55:e3:07:12:0c:87:6f:19:aa:f3:a5:6d:
46:32:5e:07:04:c2:0e:7f:6b:7c:46:d8:03:af:ed:90:e7:f9:
1d:6b:ea:e6:48:86:17:57:7e:01:d5:7f:45:02:b3:69:a0:8c:
d6:52:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:17:16 2025 by rpki-client