Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9161B100B92411EF83030A77762E951A.roa
File: 9161B100B92411EF83030A77762E951A.roa (raw, json)
Hash identifier: KHA+M9JXI65/vBAjup+Rh23TVVDoRwctzDeVD9vuqlI=
Subject key identifier: D9:E6:76:88:BD:04:5D:FE:3B:2C:EA:B9:64:6C:04:F7:A7:76:10:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9161B100B92411EF83030A77762E951A.roa
Signing time: Fri 13 Dec 2024 07:33:38 +0000
ROA not before: Fri 13 Dec 2024 07:33:34 +0000
ROA not after: Sat 25 Jan 2025 07:33:34 +0000
asID: 44559
IP address blocks: 45.192.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58101 (0xe2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:33:34 2024 GMT
Not After : Jan 25 07:33:34 2025 GMT
Subject: CN=675be352-77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:d0:25:ee:85:ab:37:aa:66:40:ab:c5:9b:
a9:ff:f3:e3:69:5e:6b:55:23:6e:0a:64:4e:ab:b1:
7c:c6:45:42:1f:fa:6d:72:3a:5c:8e:1b:87:c9:d3:
cb:29:85:4b:8b:bb:a0:e7:2b:17:3e:15:ae:97:ca:
86:86:0f:04:4c:a8:81:ba:26:d9:16:89:ed:31:9b:
86:49:db:bb:61:32:72:4d:ae:e0:6e:31:c9:02:0f:
a9:d9:03:4a:30:af:dd:36:f9:e9:ed:26:43:a9:31:
7f:61:f9:8f:0a:52:99:f8:35:59:e7:5b:ae:ac:35:
19:fd:f8:cb:99:50:92:8a:b2:5d:4f:b7:05:44:ea:
df:be:92:33:e7:dd:1c:63:ab:76:86:7d:4f:e5:72:
98:01:ab:d8:fb:26:c3:64:b5:69:5f:0d:2c:05:c7:
e3:88:c3:14:42:9f:15:73:b5:8e:74:05:09:f5:4b:
8a:3e:63:9c:1f:24:f0:c9:b5:1e:55:30:6f:87:ab:
7f:c7:ed:d4:fe:5b:fc:92:3d:c0:fe:61:7e:5c:41:
35:7a:53:ec:e8:d8:70:35:89:26:2f:7f:a3:b8:5f:
3d:1b:97:85:99:b2:4e:57:51:2a:eb:4b:60:5d:1c:
42:5c:cd:2f:2b:7c:42:59:68:ff:68:a8:2f:0c:72:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:76:88:BD:04:5D:FE:3B:2C:EA:B9:64:6C:04:F7:A7:76:10:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9161B100B92411EF83030A77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
Signature Algorithm: sha256WithRSAEncryption
71:aa:53:67:9b:f1:5d:f2:55:bd:49:06:c1:6d:29:0c:af:a9:
5e:b4:5f:c1:3c:81:99:17:84:ce:53:e3:1a:d0:7d:92:74:8e:
e5:f3:07:b1:f8:fa:aa:35:61:bb:93:ab:93:16:24:ee:f1:c3:
ac:f0:9e:8d:77:c5:a8:84:0c:87:22:2f:73:6a:2b:2d:75:9f:
8e:f6:de:7b:fe:cc:29:15:8e:6e:cb:a0:52:b2:66:3b:15:55:
96:6d:53:79:ae:cd:08:8e:1f:61:91:bf:80:15:ae:ff:4b:69:
ca:6b:9e:a0:6d:52:25:10:fc:8e:f1:8e:d5:a9:2b:26:5a:e0:
94:fe:7f:e8:ee:02:88:10:76:7e:ab:fb:81:83:6f:e2:fd:45:
30:8f:4a:8d:ec:4f:33:51:63:5e:72:ac:c4:59:7b:06:26:c1:
c7:8e:3c:3e:38:8e:a3:b9:ba:2e:b6:51:67:02:f9:6b:4e:cd:
b0:07:73:67:db:90:f3:dd:37:e1:c7:e7:eb:53:83:13:f2:a8:
a1:6b:f0:7b:eb:f4:7f:71:70:22:ea:c3:a8:9e:6e:bb:1f:17:
3b:96:18:a2:7d:3c:f3:75:e3:cf:cd:a3:71:83:9e:4a:ef:69:
41:4f:b7:28:f2:60:1f:9f:51:b0:62:1c:bd:49:e9:b4:1c:8a:
13:2a:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:31 2025 by rpki-client