Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB3572CBD0E11EFB83AC991762E951A.roa
File: 9DB3572CBD0E11EFB83AC991762E951A.roa (raw, json)
Hash identifier: 5kb0fb7zwJKZLzL5//IVJqWFmGp+tp/C05gmm33eBvs=
Subject key identifier: F3:15:9E:31:9A:F2:B3:49:61:D9:B7:F1:8C:FF:DC:64:F3:32:FF:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E46A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB3572CBD0E11EFB83AC991762E951A.roa
Signing time: Wed 18 Dec 2024 07:06:34 +0000
ROA not before: Wed 18 Dec 2024 07:06:31 +0000
ROA not after: Wed 22 Jan 2025 07:06:31 +0000
asID: 20473
IP address blocks: 45.192.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58474 (0xe46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:06:31 2024 GMT
Not After : Jan 22 07:06:31 2025 GMT
Subject: CN=6762747a-88a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:07:c9:d3:92:4d:ab:f0:00:86:42:69:0f:
d9:8b:18:4c:d4:8a:da:de:2e:9b:22:36:47:be:71:
e0:b9:17:8a:4b:4b:ef:97:d1:16:c3:42:dc:93:d7:
e2:ab:0e:a0:09:ec:db:6f:31:da:68:9d:b5:f5:97:
95:db:d3:83:b6:c0:b1:57:8f:bb:0f:b5:d9:50:87:
72:09:61:a4:ee:b6:fc:f4:98:20:8c:95:5c:2a:5c:
3e:4e:e2:83:2f:5b:79:38:49:1e:a9:d8:5e:59:92:
3a:80:c2:4d:dd:4b:e2:6b:14:8a:1c:eb:e2:5d:67:
95:47:5e:2f:b0:d0:36:bb:42:3d:fb:fb:43:c9:80:
92:4a:b3:28:eb:d8:6f:4c:af:fb:7c:4e:71:a8:57:
5e:b9:a4:26:57:5f:1d:2e:fa:0c:dd:2d:26:34:44:
4a:3f:55:7c:77:97:3e:56:b9:5b:b1:5a:ab:6f:36:
af:7a:71:ab:fe:b4:19:4d:67:eb:62:fc:07:12:53:
b5:b8:24:e7:1a:27:0b:54:b2:e7:9d:9b:82:fa:36:
03:04:0a:31:7e:0d:de:9b:c6:c6:15:9d:64:19:f9:
6b:b9:52:f9:9e:8a:f3:54:4f:fc:05:6e:dd:88:00:
de:c1:1f:71:d3:4e:e3:cc:f4:30:e9:2a:b3:54:36:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:9E:31:9A:F2:B3:49:61:D9:B7:F1:8C:FF:DC:64:F3:32:FF:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB3572CBD0E11EFB83AC991762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
Signature Algorithm: sha256WithRSAEncryption
73:78:30:09:f8:3b:a0:34:fd:5d:c4:00:fa:54:de:97:17:02:
6e:58:ef:96:9a:73:8d:da:2a:b3:72:35:81:9a:41:5e:69:64:
6f:52:27:cc:3f:61:ad:d8:49:57:40:83:41:35:43:4f:37:a8:
26:d3:c5:60:e0:73:52:bf:b2:fe:3e:09:61:92:35:4e:a5:13:
48:13:6b:42:a3:85:21:03:92:d0:b3:e1:78:7b:5e:cd:02:27:
6a:91:b5:82:06:61:17:08:24:e5:e1:0a:6a:1a:06:dc:46:f1:
99:a3:25:b3:38:0d:db:91:8a:b5:e5:d2:a6:53:7d:b3:13:1b:
1b:65:47:97:7c:22:97:b5:f4:35:ba:ee:0e:8c:80:26:80:4f:
fd:ed:fb:b3:6d:e3:05:2a:38:3a:da:ff:08:7a:aa:17:90:2c:
f3:fc:4e:bc:12:ff:32:28:bf:e7:5b:8c:70:77:6f:46:38:c4:
cc:82:ae:4d:d1:58:55:1b:5b:3a:ea:17:d8:b0:86:07:9d:f7:
b0:99:1f:bb:27:9c:74:8b:12:d6:aa:e4:b6:1d:5b:87:7e:75:
01:1a:62:25:b7:82:9b:ff:04:f9:10:59:7f:a3:51:94:48:b6:
b4:5a:bc:bc:78:21:6b:dc:d6:cf:d0:05:8a:38:42:7d:f3:51:
8e:d3:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:36 2025 by rpki-client