Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B02743862C211EEBE2263284AD9E6FC.roa
File: 9B02743862C211EEBE2263284AD9E6FC.roa (raw, json)
Hash identifier: Fww9Fj7VIFYXznTQ9+by6yJtPwXbmDZVRaQHO+T1EAI=
Subject key identifier: 3C:B9:7F:68:B1:E1:87:52:A5:3F:28:FA:7C:FF:7B:DD:75:A0:8E:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3D65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B02743862C211EEBE2263284AD9E6FC.roa
Signing time: Wed 04 Oct 2023 14:30:46 +0000
ROA not before: Wed 04 Oct 2023 14:30:43 +0000
ROA not after: Sat 14 Oct 2023 14:30:43 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15717 (0x3d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 4 14:30:43 2023 GMT
Not After : Oct 14 14:30:43 2023 GMT
Subject: CN=651d7716-62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:51:44:8c:82:45:01:bd:f8:89:1b:07:b4:
60:98:07:11:75:2f:4a:b4:56:7b:25:f4:e9:29:f0:
f4:ae:0e:5f:2f:85:a1:0c:1b:3f:75:9d:b9:74:68:
f7:a1:45:8a:da:e7:da:c3:40:c2:04:f2:d2:b6:eb:
a1:9d:eb:63:af:a3:18:4a:77:f9:66:60:72:6a:53:
2a:14:6f:b4:39:c4:3a:92:10:75:9f:49:92:13:11:
f2:6d:53:f4:39:3b:91:65:d7:e8:89:76:49:d6:5e:
cb:f1:b2:23:3e:2c:35:9f:5a:a2:b1:fd:90:cb:11:
4e:36:70:7f:f3:11:59:96:48:7d:a4:4d:68:9f:85:
2e:00:63:4a:12:33:80:25:b1:6f:4d:08:1d:f2:79:
f4:8f:7c:8c:3d:9e:30:96:ea:4f:d7:78:c5:c9:e1:
98:f4:87:2c:7a:f2:d6:07:91:03:85:3e:88:47:2b:
bc:29:ff:9d:e3:b2:f4:80:85:a1:53:66:3c:7d:0e:
e8:6d:e0:78:0c:f9:13:17:a6:69:72:63:19:be:d9:
0f:f8:75:88:e2:ce:51:07:e3:03:53:4a:f7:40:9a:
a0:77:52:e0:d2:1d:e9:91:55:02:ef:b7:87:45:90:
18:f0:1d:ac:1e:d2:29:d7:86:84:6b:64:f1:5b:7c:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:7F:68:B1:E1:87:52:A5:3F:28:FA:7C:FF:7B:DD:75:A0:8E:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B02743862C211EEBE2263284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:60:d7:25:df:81:90:cd:0b:d1:27:fb:d3:42:75:6c:c7:69:
f0:0e:e5:18:7f:cc:3a:79:2a:85:9f:2b:73:56:ba:1c:a7:a2:
83:e7:bd:4e:44:c0:2a:3f:61:9c:66:db:9a:e6:ec:bb:c9:e1:
73:84:06:56:e6:60:96:26:48:64:83:58:dc:c4:5b:5b:38:e3:
f4:39:ca:21:3a:b4:c6:83:b3:c2:20:a8:db:f4:8c:da:2d:f4:
73:d6:0d:70:6b:e5:ff:dd:65:9b:42:43:de:4d:41:79:43:cd:
8d:45:27:c6:7c:18:3f:47:7d:54:47:6c:e5:69:d5:08:46:6f:
53:7b:fb:e2:38:35:47:8c:7c:9e:e4:c8:77:a9:08:32:50:70:
4a:02:12:d4:dc:2d:4e:96:01:93:68:db:37:d8:b7:e2:cb:9d:
92:04:bd:4a:4a:b0:5d:db:b8:d9:de:11:4b:5b:32:d5:96:e3:
ac:28:e6:e7:41:46:94:e2:f3:4e:c1:a1:71:3c:3c:54:e2:da:
92:95:06:48:e5:a1:5b:9e:30:f1:11:14:65:64:ca:3b:e3:5f:
95:67:d6:0d:ae:ac:10:71:93:ee:ed:1b:c2:82:ab:75:df:1e:
dd:08:3b:68:ef:4d:0f:c1:2a:d9:9c:5a:b3:50:cc:7a:fb:43:
08:19:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:14:02 2025 by rpki-client