Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD335FECABD11EFB7AF8A4B762E951A.roa
File: 8DD335FECABD11EFB7AF8A4B762E951A.roa (raw, json)
Hash identifier: awVUPHNSsDkRC3tFUpKHjcQmLl7tQpJwzm7oesfGLos=
Subject key identifier: 92:5A:F7:1D:15:B3:2B:58:E4:AC:06:F3:7F:84:66:48:AC:B1:31:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F704
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD335FECABD11EFB7AF8A4B762E951A.roa
Signing time: Sat 04 Jan 2025 17:01:35 +0000
ROA not before: Sun 05 Jan 2025 17:01:31 +0000
ROA not after: Thu 16 Jan 2025 17:01:31 +0000
asID: 39600
IP address blocks: 45.195.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63236 (0xf704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:01:31 2025 GMT
Not After : Jan 16 17:01:31 2025 GMT
Subject: CN=6779696f-2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:14:0e:b8:1c:c7:cd:85:df:ca:72:b6:04:
3a:b7:f8:48:80:be:7c:98:82:f5:e0:17:59:0e:bc:
65:fe:4a:82:1b:ae:30:21:c6:ca:25:3d:88:db:54:
c7:79:c4:f6:ba:57:e6:86:d1:6e:1b:c6:b3:cd:f2:
d4:fd:e6:79:33:5d:59:14:27:3c:20:2e:36:5f:9e:
47:3d:b4:d5:25:d5:66:84:da:83:1c:fc:49:b9:6e:
3f:fa:c4:86:b5:e8:c1:e0:93:f8:33:9d:21:29:a5:
5c:b9:73:e7:03:a9:1a:a4:ec:72:44:d1:f6:30:57:
09:cc:3a:5a:8b:e1:cb:51:80:66:4e:13:d7:b4:4e:
00:2a:7c:13:db:ea:9d:09:52:c7:f2:77:cb:d1:cd:
47:e2:80:67:a2:c2:a2:04:28:a9:10:78:55:49:f1:
1d:42:fe:ea:85:04:6c:5b:b9:67:1b:b7:9d:33:2b:
37:0b:aa:4d:cb:36:3f:f2:1c:89:24:6b:d9:71:82:
1e:90:ac:fb:72:d7:b1:fe:51:f5:f1:db:3a:24:a8:
0d:25:7b:be:4b:76:c9:78:9c:24:67:cc:49:dc:3e:
c4:2f:8a:ea:33:d9:86:78:45:be:8f:20:36:7d:f0:
c3:60:5a:20:02:e0:05:42:6c:c8:38:f4:20:68:ee:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:F7:1D:15:B3:2B:58:E4:AC:06:F3:7F:84:66:48:AC:B1:31:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD335FECABD11EFB7AF8A4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:38:a7:2d:cc:53:64:55:c1:9d:ac:81:f5:f1:69:1e:4d:13:
14:a9:4d:44:0f:cb:0a:09:49:0d:0c:f6:a8:7d:03:1e:5e:cd:
ed:68:fd:ce:3b:bf:f5:a4:cd:c5:95:d0:c7:39:cc:dc:16:d5:
84:fe:52:f9:34:20:78:bd:2f:df:f6:2a:23:88:42:8b:d3:74:
07:b9:00:8b:6f:3b:6e:6d:41:09:b9:fe:b7:08:c2:79:62:27:
70:9b:85:43:56:72:58:b5:a2:12:be:ee:dd:a5:f8:79:ed:e6:
05:73:53:65:c9:39:2a:a0:c9:4c:80:af:33:11:78:7a:95:2d:
5a:59:69:4e:a6:ce:c0:a3:fb:10:02:b2:1e:47:75:3e:be:dd:
50:d5:d4:fb:41:24:9c:97:37:9d:10:0f:d7:39:cb:85:50:e9:
a6:88:d7:6e:d4:9e:f3:c1:84:a8:dc:a9:19:cb:12:3e:96:4b:
f1:a1:12:c2:09:9f:a0:0b:be:e2:3d:65:dc:84:9d:ab:c6:b3:
70:75:f5:bc:b7:36:80:e6:c9:4b:44:03:21:88:2e:a6:05:20:
79:d9:ff:f2:d5:74:ab:a6:14:1b:45:7a:46:44:cb:be:c9:b7:
e0:7f:e0:2d:c2:cb:b4:ab:4b:b9:6d:25:6d:2b:07:58:03:52:
e7:2c:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:16 2025 by rpki-client