Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99406B94CE9311EFAECC53BF762E951A.roa
File: 99406B94CE9311EFAECC53BF762E951A.roa (raw, json)
Hash identifier: wzTyw8izWkqDSFF8EMFsmjKaGU4V0wzOXX7cFfm7G3w=
Subject key identifier: EA:E8:02:46:DE:DD:04:8C:BA:D3:CD:13:38:A0:D6:2A:4D:18:F6:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010400
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99406B94CE9311EFAECC53BF762E951A.roa
Signing time: Thu 09 Jan 2025 14:11:20 +0000
ROA not before: Thu 09 Jan 2025 14:11:16 +0000
ROA not after: Wed 22 Jan 2025 14:11:16 +0000
asID: 39600
IP address blocks: 45.194.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66560 (0x10400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 14:11:16 2025 GMT
Not After : Jan 22 14:11:16 2025 GMT
Subject: CN=677fd908-453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:a7:32:34:ff:92:08:fe:37:d7:b5:45:03:
5c:6b:72:d1:6a:e1:4b:b5:c0:90:ee:64:9d:3d:c0:
c3:11:71:f9:87:ee:82:44:49:6d:70:de:a1:43:46:
5d:60:8f:65:af:24:42:9d:93:28:a5:3c:5f:67:95:
80:2c:eb:02:e9:57:03:9f:bb:08:10:61:c6:50:95:
b7:17:9c:23:d9:08:bd:fd:96:48:8c:f1:78:a3:d3:
e3:11:3a:c0:6e:9e:99:13:e1:80:b8:25:c5:b8:6e:
75:1d:8d:42:d8:71:14:22:ee:13:90:3d:41:80:bf:
06:5c:a2:e2:36:f9:7d:31:5d:53:5c:c8:c9:50:50:
f5:47:7c:0f:38:ae:14:8b:1f:bb:75:9f:c4:eb:db:
c9:ee:67:5f:69:5c:b8:79:70:b5:86:f0:89:07:dd:
93:d0:4e:27:ab:07:f2:3d:5d:80:b9:e5:3c:c1:10:
45:89:77:dd:cc:a0:fb:f3:78:d0:11:f5:a0:90:e7:
aa:a9:5f:90:ea:90:a6:e3:8c:e7:d4:82:3c:52:1b:
5f:a3:f9:c6:df:8c:1e:00:1f:36:81:09:2f:c6:2b:
d0:f6:c8:76:b9:7b:1d:fa:0e:74:d2:3e:07:56:9e:
2b:c7:15:85:93:7d:78:9c:0d:c6:ac:e5:e5:4d:25:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:02:46:DE:DD:04:8C:BA:D3:CD:13:38:A0:D6:2A:4D:18:F6:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99406B94CE9311EFAECC53BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:1a:67:88:f4:c3:c0:f7:2f:c6:5a:d3:50:03:ea:5e:e1:ea:
ef:69:a6:9b:09:22:9c:cb:81:01:63:c2:23:2a:2b:ae:f6:06:
9b:f6:55:68:23:c6:47:91:eb:af:08:34:de:f4:55:61:e8:a2:
ee:b3:60:6f:b1:c3:6c:97:dc:64:d1:c8:93:b9:38:06:e2:de:
2a:c5:dc:34:fb:6d:e9:16:5e:54:69:d3:62:53:73:73:b2:12:
6b:27:23:ae:2a:85:a0:9c:8e:69:ba:e6:d6:a9:7a:80:96:75:
28:42:d5:d2:67:d8:ad:cd:46:2a:6b:9c:48:b7:08:c4:7a:43:
4f:4b:23:00:00:a1:e6:4a:f5:87:31:fe:6b:7f:41:82:cc:c1:
da:2b:e5:ca:05:ec:0f:30:df:2c:eb:05:28:5b:08:8d:9a:03:
40:b6:c7:23:df:7f:0d:e6:03:65:71:07:76:f9:a0:f7:54:b7:
bb:10:ff:8b:c9:2a:06:f1:c6:07:16:11:6b:60:13:ef:18:71:
22:25:27:9c:3d:0d:0b:1b:d0:66:d7:1d:1c:28:32:33:4b:fe:
b7:9c:05:78:f2:e0:92:90:89:4d:77:5c:62:f4:9d:fe:5a:63:
8c:0a:74:f1:d4:40:6a:ee:8b:14:42:bd:bf:43:15:80:b1:98:
c8:39:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:04 2025 by rpki-client