Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9819C0BAF2DA11EFA9F0F1B4762E951A.roa
File: 9819C0BAF2DA11EFA9F0F1B4762E951A.roa (raw, json)
Hash identifier: 91lfpKX+hIz5OSCNgf26+F8b6cBdC28fkGZQxcO0tIE=
Subject key identifier: 94:2F:BD:A9:DA:8F:7C:C6:E2:34:93:A3:7E:F9:AF:F0:2E:7F:3C:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9819C0BAF2DA11EFA9F0F1B4762E951A.roa
Signing time: Mon 24 Feb 2025 18:10:14 +0000
ROA not before: Mon 24 Feb 2025 18:10:10 +0000
ROA not after: Fri 04 Apr 2025 18:10:10 +0000
asID: 42831
IP address blocks: 45.198.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77101 (0x12d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 18:10:10 2025 GMT
Not After : Apr 4 18:10:10 2025 GMT
Subject: CN=67bcb606-452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:0c:34:1c:f3:57:03:05:c3:9c:a2:8f:f2:
ed:55:64:37:9f:7e:e8:3f:fa:f0:e2:ab:56:41:d1:
42:0b:b2:07:cf:43:68:06:bc:50:ca:35:39:11:93:
98:e4:d3:eb:c8:48:af:c8:a8:04:40:57:dc:8f:ea:
ef:e4:19:6d:f6:d7:e3:59:a0:0b:d7:01:9b:5d:30:
43:ff:71:61:d6:72:24:bb:48:ec:f9:b1:57:98:58:
76:91:9f:3c:ea:f2:b9:45:f0:c5:f0:79:dc:10:65:
61:d9:7a:7b:4a:10:5e:2a:cb:65:54:0b:50:0d:16:
af:3d:5a:81:cb:52:81:79:ed:46:f2:4d:13:b1:67:
10:15:2e:c9:41:ac:b8:4d:36:8a:61:c7:6d:b5:31:
47:ea:71:57:e1:99:e1:59:b5:af:ef:6c:20:2a:e4:
6a:2a:4c:dd:08:5e:88:11:65:b7:db:53:50:93:d9:
d9:07:a0:f5:8f:8f:f6:98:7b:c7:0f:1d:b7:e9:37:
ab:ca:26:7e:af:05:93:55:06:ce:a9:41:c0:ee:55:
34:3b:4c:3e:84:f0:02:2c:9f:1a:3b:a2:8e:23:26:
73:ce:dd:29:a5:a6:e2:04:49:a5:b6:6c:74:51:56:
8b:40:d9:10:23:02:4f:eb:89:0c:84:1e:5d:5c:a3:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2F:BD:A9:DA:8F:7C:C6:E2:34:93:A3:7E:F9:AF:F0:2E:7F:3C:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9819C0BAF2DA11EFA9F0F1B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
45:ef:75:e3:69:70:b5:d3:6c:18:c3:3f:eb:b1:ed:fc:c6:60:
8b:92:9b:c2:24:ee:17:aa:fc:ef:9b:a8:2a:d3:40:0f:db:71:
9f:ab:b6:a8:1d:9f:15:6d:90:fa:ad:28:4d:48:ad:9c:40:6f:
9f:c3:2a:9b:c6:2f:c3:f7:86:f2:44:70:07:4e:6a:be:91:50:
b1:7b:d8:a9:5b:ec:5b:29:0e:51:4c:58:26:71:65:39:eb:1b:
78:49:05:28:0f:ad:6d:97:d0:07:03:81:ad:f2:b4:81:3a:ca:
2f:89:a6:ce:12:42:2f:39:dd:70:66:bc:c8:a5:d5:1e:45:30:
51:0d:3f:a2:fc:9c:1d:b7:f9:53:9f:79:2a:7c:ef:ee:ae:3b:
48:8b:50:86:67:e1:e9:28:db:8d:fc:18:f2:03:97:e7:44:3c:
d4:50:14:19:e2:c7:b4:f0:67:47:9b:64:c9:4f:67:da:52:0b:
14:d5:0e:28:8b:ca:0c:31:61:04:57:0b:ec:3e:6f:67:25:88:
4d:66:5b:6f:9c:f7:b0:6b:cc:2f:96:32:a6:f8:73:ad:ad:4a:
5e:30:4a:7f:12:4b:7b:3e:19:c4:d0:7f:2b:91:a7:52:03:ab:
93:13:c5:7e:28:e5:4f:aa:92:78:55:43:32:7e:15:68:43:aa:
00:a9:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:35 2025 by rpki-client