Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ABE7760BAF611EFA2911C60762E951A.roa
File: 8ABE7760BAF611EFA2911C60762E951A.roa (raw, json)
Hash identifier: 9FmpRcoA+QVWdEbRw/3yIC/z7y7yDGyZeyULOE+m73k=
Subject key identifier: DE:58:9C:D9:E4:B5:B5:F9:BB:63:F2:E5:2E:85:F4:7C:7E:C0:A8:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ABE7760BAF611EFA2911C60762E951A.roa
Signing time: Sun 15 Dec 2024 15:09:13 +0000
ROA not before: Sun 15 Dec 2024 15:09:09 +0000
ROA not after: Sun 19 Jan 2025 15:09:09 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58343 (0xe3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:09:09 2024 GMT
Not After : Jan 19 15:09:09 2025 GMT
Subject: CN=675ef118-e15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:db:83:a4:89:3d:83:65:95:43:76:77:3c:
82:c6:9d:ea:54:76:69:30:79:68:98:c4:91:09:39:
9d:fc:60:e6:4e:02:32:33:1e:a6:16:f3:e5:be:b6:
38:82:25:66:8b:40:6d:d4:36:5a:c0:e3:ae:c5:61:
32:08:e1:c1:97:d0:35:84:fe:6d:d2:73:3d:d6:d6:
31:16:02:56:6a:b8:e1:65:b1:04:e5:6a:75:1a:84:
c7:84:e1:4a:9b:24:0f:26:b9:84:58:55:60:a9:32:
84:60:15:76:29:a0:0b:d0:f7:24:e0:b0:c4:bf:45:
50:64:02:ee:cd:0f:20:ab:d1:04:a2:65:b2:56:91:
98:d2:bd:98:c9:96:ea:60:bc:3e:1f:f7:56:ac:e9:
15:f8:3a:0e:de:ad:c1:21:11:ff:73:aa:7b:07:57:
20:64:0f:49:cf:a6:47:f2:9b:75:5e:ba:72:05:41:
19:fe:2e:73:ac:8b:44:0c:e4:1d:c2:61:5e:35:8e:
4e:a3:8f:a4:f3:af:bc:2e:f3:a9:75:09:bb:b3:d8:
22:14:84:74:c5:5a:8d:4a:19:6d:f2:fb:eb:2c:45:
dd:c2:f1:b9:46:a4:f2:18:c0:9d:1d:bb:1a:d5:92:
a8:7e:b6:7a:99:1d:ae:e8:eb:e8:b9:cb:1f:bb:2d:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:9C:D9:E4:B5:B5:F9:BB:63:F2:E5:2E:85:F4:7C:7E:C0:A8:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ABE7760BAF611EFA2911C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
29:35:27:b9:8b:a5:ff:65:01:ab:0a:a9:e9:24:80:45:54:8c:
b6:dd:7d:8c:86:07:0a:98:c3:78:5b:cc:ea:ee:43:72:c8:21:
7c:93:4a:19:f6:17:30:93:a5:64:12:5b:87:24:87:1e:40:44:
f2:dc:b5:d8:e0:5f:ad:c3:df:c4:b9:ed:34:e1:e7:2e:4d:91:
3e:18:48:e7:50:33:cf:e1:79:f1:ae:22:e4:f4:d4:7b:c1:63:
b2:b7:c0:40:9c:54:41:f5:60:69:7a:76:82:90:70:1b:8e:2d:
7b:95:4a:b8:a6:46:f5:f4:91:a8:fe:5a:e6:aa:f0:ce:41:ca:
1a:92:67:fb:9d:d1:c7:4c:64:61:e9:19:0e:3b:35:d5:59:8e:
98:3a:85:7b:68:51:ab:9a:d6:89:ac:be:3e:72:e0:c4:e8:8d:
fe:05:b1:35:dd:9b:16:87:87:2c:61:02:88:4e:bd:51:14:79:
95:58:35:95:4d:79:d6:68:e4:5b:c7:7b:5e:93:e3:e3:b3:de:
6d:19:dd:c9:d1:70:bc:94:c5:9a:ff:8f:32:64:cb:e5:52:2d:
19:c0:8f:ad:26:7c:54:a8:d2:18:f6:8a:6c:2f:04:71:ef:ea:
42:19:cc:2a:94:55:bb:93:37:68:32:e2:6b:9c:7c:69:2e:b6:
c4:04:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:49 2025 by rpki-client