Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E8DAA6CEA511EFA7A0ACB1762E951A.roa
File: 99E8DAA6CEA511EFA7A0ACB1762E951A.roa (raw, json)
Hash identifier: T+H7dDngW6aLZRJ1AdN59KGhTFcIOU/aLWWrnpzGLk0=
Subject key identifier: 8B:BF:42:1C:A0:40:66:25:82:83:4D:F5:0B:CE:DD:F8:6E:C0:CE:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E8DAA6CEA511EFA7A0ACB1762E951A.roa
Signing time: Thu 09 Jan 2025 16:20:12 +0000
ROA not before: Thu 09 Jan 2025 16:20:08 +0000
ROA not after: Fri 24 Jan 2025 16:20:08 +0000
asID: 21859
IP address blocks: 45.196.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66642 (0x10452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 16:20:08 2025 GMT
Not After : Jan 24 16:20:08 2025 GMT
Subject: CN=677ff73c-18f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:05:fb:89:b0:bd:61:50:93:e0:84:7b:7c:
64:34:f7:10:96:8d:e9:ad:48:d8:71:cc:f5:71:bd:
6d:5f:37:ca:20:2b:83:bc:5d:68:c1:30:85:74:b4:
8c:66:d0:91:51:63:ce:1c:6e:9c:85:62:34:39:86:
4c:87:f0:d1:d7:c0:de:d3:a5:2d:5d:af:2b:07:06:
c4:d7:12:ed:3c:6c:11:3f:4e:07:d9:04:77:31:08:
43:72:06:87:0f:8b:8c:19:9d:ff:fa:4b:03:6a:75:
1b:e1:78:64:77:f0:58:17:50:95:b7:8f:3e:10:11:
17:6f:28:c4:54:04:f1:56:30:f3:41:65:08:75:85:
40:24:f5:15:bb:ea:52:77:d6:f5:b3:59:b6:a9:bb:
b9:82:f3:36:22:88:ae:8a:c4:43:25:aa:e8:45:09:
4f:e4:64:74:5a:50:77:59:ac:0d:2e:03:bb:83:ba:
a3:51:b5:e7:36:03:82:d8:c4:66:8b:ba:9c:87:5c:
dc:c8:28:b6:42:f9:84:12:51:7f:f3:68:bd:59:df:
ee:28:f8:6a:15:5d:57:9a:da:a4:f3:37:03:ed:bb:
1b:da:c4:00:15:6b:bc:c4:e7:c8:1b:85:ce:b8:d8:
3b:50:c8:09:0b:2e:c7:19:79:86:ac:39:ea:db:67:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:42:1C:A0:40:66:25:82:83:4D:F5:0B:CE:DD:F8:6E:C0:CE:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E8DAA6CEA511EFA7A0ACB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/24
Signature Algorithm: sha256WithRSAEncryption
63:87:93:f0:1a:a8:c0:06:ca:2c:5a:93:f4:d2:07:ae:69:67:
c8:e2:87:7d:1b:21:0b:cd:93:73:fd:96:56:58:d2:80:55:d4:
8a:df:77:e2:c9:9d:1f:c8:df:73:7e:5e:79:8e:a1:6a:62:5e:
a6:bf:a8:ec:7e:2d:3a:59:f2:d2:10:35:e6:76:68:0b:3f:ea:
0b:14:54:e8:e2:5d:54:43:5b:f9:5a:96:c9:f7:1b:f9:bf:88:
78:15:a9:2b:21:92:90:27:c2:88:9d:95:80:3f:e9:ed:16:e0:
1d:6b:d6:1f:6d:55:86:be:88:a9:af:d1:ee:11:1e:ef:b3:3f:
3c:8b:58:32:72:1e:0b:da:4b:9e:be:10:45:25:83:14:f1:df:
7e:19:64:78:80:ce:ec:55:86:5b:5c:71:14:60:f5:7c:8b:b7:
20:7e:75:87:b6:6b:45:89:e6:fb:c3:25:56:f0:49:3d:21:6c:
6b:22:59:d3:5a:98:a4:46:03:e7:72:bf:07:f3:42:3b:c1:39:
c5:2e:48:0f:ce:97:1b:38:bd:83:fb:70:85:ba:bc:e0:3c:b1:
b8:d3:28:4c:75:cf:15:f3:79:ab:cd:26:e4:92:56:89:14:c5:
45:87:2f:25:ca:a9:19:0b:f2:7c:01:7d:eb:67:2d:89:65:a2:
24:29:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:51 2025 by rpki-client