Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852A8954CE8A11EF83F97886762E951A.roa
File: 852A8954CE8A11EF83F97886762E951A.roa (raw, json)
Hash identifier: oU6+AwlbsvW95Hcp2SdBj7TGkXpe8dtsXUgKHKXsXB8=
Subject key identifier: FE:C1:A9:1B:6A:4A:79:22:69:1F:87:34:D5:A4:71:24:1D:AB:2C:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852A8954CE8A11EF83F97886762E951A.roa
Signing time: Thu 09 Jan 2025 13:06:21 +0000
ROA not before: Thu 09 Jan 2025 13:06:17 +0000
ROA not after: Tue 21 Jan 2025 13:06:17 +0000
asID: 142032
IP address blocks: 45.192.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66538 (0x103ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 13:06:17 2025 GMT
Not After : Jan 21 13:06:17 2025 GMT
Subject: CN=677fc9cd-fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:dd:17:08:79:f6:ad:33:eb:b1:0b:cf:39:
c3:45:55:16:b8:51:a3:7a:ac:e0:2b:2f:ad:50:16:
12:0c:03:13:4a:87:52:57:18:28:fe:02:14:8a:d4:
5e:29:ce:9f:39:0e:58:1d:47:dc:c4:59:fa:3d:e8:
2c:9b:8d:6e:36:a3:ca:12:1a:ac:d3:6f:58:d7:10:
e5:f2:57:23:cc:60:3f:a0:04:71:b4:9c:ef:da:0b:
d7:fe:87:3b:f9:40:d9:24:89:7f:3c:2d:2a:d1:5f:
ba:96:de:24:27:75:ac:18:8d:5f:9d:10:94:67:f0:
8c:ab:c6:53:1a:9a:e7:35:51:cc:ac:5a:7c:07:ee:
b7:db:2d:c7:62:2d:ea:ff:bc:d7:48:e5:34:65:f4:
27:20:77:78:8e:5e:04:b6:b4:e9:64:22:00:28:43:
72:6d:ce:00:8e:3d:80:ca:fe:7f:2e:9b:60:9a:d9:
8b:a0:4c:fd:0d:c6:75:a1:82:1e:55:f7:34:65:f2:
cc:78:b5:3a:17:f9:e9:f1:cb:39:a1:08:58:dd:a3:
84:73:6e:8d:d3:f3:3b:8c:3c:52:69:ce:b4:7b:04:
81:af:7c:af:b3:2b:ec:cf:4e:21:bd:02:16:e7:d5:
82:77:d1:8f:8e:c8:bf:93:1f:be:3a:4f:f5:61:de:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:A9:1B:6A:4A:79:22:69:1F:87:34:D5:A4:71:24:1D:AB:2C:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852A8954CE8A11EF83F97886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:19:27:c9:e3:33:68:d1:78:e2:d8:ec:d6:e7:36:4c:8e:0c:
80:88:ee:5b:e9:83:54:4d:44:a0:4e:4c:3f:ac:f0:c3:cf:d2:
3d:57:41:82:35:3a:47:eb:88:b4:50:bf:dc:5c:a5:40:4a:82:
85:3f:94:af:21:77:1e:03:95:33:8b:64:1a:e3:be:9d:5c:d8:
11:8c:cf:d9:68:6e:9c:5c:d4:b2:74:f4:59:db:ed:96:f2:bf:
9c:ed:01:e5:e5:44:81:ff:93:e9:89:22:69:4e:f9:1a:13:d4:
b3:ef:7f:df:4d:0c:ec:90:3f:29:70:9c:3d:7d:12:e3:3c:28:
82:24:20:4a:37:b9:88:51:e6:76:62:13:e5:85:2e:68:e6:35:
21:1a:8f:ed:09:77:ad:e7:43:ba:5f:28:dc:d1:96:04:76:fc:
28:8f:5a:44:ae:58:3b:10:fe:59:95:65:be:d3:4b:2b:ac:95:
d6:4d:9e:86:a9:ee:78:6e:11:f1:06:16:61:9f:36:44:0e:bb:
2e:07:40:a6:74:4d:94:7c:1a:8e:20:81:e5:01:2f:81:8a:93:
28:b4:47:83:04:c7:8f:30:87:e9:f1:86:8a:43:2a:48:d2:b8:
4f:49:4b:5f:bd:4d:b1:9f:76:9b:12:4a:77:28:ca:50:a7:30:
89:0d:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:49 2025 by rpki-client