Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C6F292C1C211EFBCD67EAD762E951A.roa
File: 84C6F292C1C211EFBCD67EAD762E951A.roa (raw, json)
Hash identifier: I34WTTBsXnzcn1XQcpcdnZZiudnrUidZmuHWgCGrNoY=
Subject key identifier: 57:DC:BF:2A:51:B0:93:AA:93:56:5B:2C:98:7E:14:BC:E3:25:CD:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E85F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C6F292C1C211EFBCD67EAD762E951A.roa
Signing time: Tue 24 Dec 2024 06:44:27 +0000
ROA not before: Tue 24 Dec 2024 06:44:23 +0000
ROA not after: Tue 28 Jan 2025 06:44:23 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59487 (0xe85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 24 06:44:23 2024 GMT
Not After : Jan 28 06:44:23 2025 GMT
Subject: CN=676a584b-46ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:09:34:b1:76:81:be:fc:8e:29:e8:aa:58:2c:
59:a4:7f:1a:c3:8d:e7:76:64:9d:9f:27:42:eb:36:
b5:7e:a5:fe:09:7d:c0:8c:7b:4b:68:3b:e1:b0:64:
28:81:12:b8:19:71:c7:82:dc:33:b6:7f:6e:e6:58:
56:50:ba:dc:fe:f6:47:23:de:eb:2e:e0:5b:5c:88:
67:cb:2f:0b:a9:4a:05:5f:9b:cb:30:1e:ba:44:d4:
f1:b3:78:79:2b:f2:5e:00:0b:69:4b:94:28:a5:4d:
7c:56:a8:85:79:29:d2:80:09:cb:f1:da:08:af:0f:
e7:a1:b3:6d:47:13:13:71:9d:fb:3d:3f:a6:6d:76:
0e:41:49:54:cd:51:8f:b1:cb:a1:1a:a1:24:0a:21:
40:57:9d:2e:b4:62:d7:30:66:5e:ea:18:cd:d2:9c:
eb:c9:e9:78:e8:47:8c:58:b7:70:a7:11:d1:39:ab:
ad:eb:58:a5:39:42:75:61:66:ca:cc:15:af:c9:69:
3e:60:0d:90:92:c6:c3:de:6c:a2:6c:4e:e6:09:d8:
e8:83:5d:b2:82:25:e1:de:b7:d4:1a:96:80:0c:d4:
ef:7c:07:ff:31:06:90:36:55:92:99:63:8e:c7:97:
f2:e6:39:4a:04:af:18:af:1d:e5:85:88:d6:db:b9:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:BF:2A:51:B0:93:AA:93:56:5B:2C:98:7E:14:BC:E3:25:CD:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C6F292C1C211EFBCD67EAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:00:39:47:75:33:d6:4f:e8:b5:19:17:72:f1:52:58:6f:46:
f4:65:08:b2:44:ca:aa:99:d5:ef:66:53:46:19:6f:4c:6c:ed:
eb:1e:09:93:4a:c5:f2:9b:95:7d:13:18:fa:c2:73:b4:4a:40:
3b:f6:72:39:e1:57:6a:62:7e:cd:fd:73:b0:80:fc:df:5e:0c:
08:53:b4:79:b7:bb:66:1a:f2:61:02:c6:70:a4:6d:7b:34:f8:
c5:38:cb:7a:c4:64:99:b7:3c:2f:0b:a6:08:b2:d2:57:16:85:
ca:ec:60:b7:76:43:fc:ef:bb:c0:12:a9:0d:0e:25:ee:4e:b9:
af:a4:92:6a:9e:34:85:ea:f8:c5:c7:f9:54:81:fb:e3:ed:8d:
cb:ac:94:f2:19:e2:c9:19:c0:80:14:e7:d4:96:98:92:c0:3e:
52:27:36:9f:dd:d6:14:4f:9e:6f:a5:d7:ca:72:8e:5f:55:3d:
6d:a9:7e:63:de:e7:6f:e0:58:c9:a6:73:4c:d4:57:cf:2e:90:
a7:c2:c9:2d:db:47:55:98:88:b4:61:4c:0b:4f:23:62:bb:a2:
29:45:60:02:21:59:59:11:39:d0:81:55:3b:81:1d:ff:bd:9b:
a8:c1:f8:50:59:c4:07:04:cf:99:a8:d2:2c:15:65:62:90:c6:
80:21:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:43 2025 by rpki-client