Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E82C9CBEA011EFABC42971762E951A.roa
File: A3E82C9CBEA011EFABC42971762E951A.roa (raw, json)
Hash identifier: BBXZ8540VgtV48drDksB4OfSF4fzvdFaZ6bDIOn7oQ0=
Subject key identifier: EE:3A:1F:76:90:13:A3:0F:C5:8F:55:8A:5F:46:B2:B7:B8:56:59:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E82C9CBEA011EFABC42971762E951A.roa
Signing time: Fri 20 Dec 2024 07:04:22 +0000
ROA not before: Fri 20 Dec 2024 07:04:19 +0000
ROA not after: Thu 23 Jan 2025 07:04:19 +0000
asID: 395793
IP address blocks: 45.194.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59132 (0xe6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:04:19 2024 GMT
Not After : Jan 23 07:04:19 2025 GMT
Subject: CN=676516f6-609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:83:72:bd:18:c0:8e:41:51:2b:81:dc:e1:
83:b2:6e:a3:cd:e4:d3:73:a9:32:35:4b:d5:87:29:
d8:ce:8b:94:bc:c4:95:81:24:a3:5b:db:37:f7:06:
4d:5c:2f:24:42:df:31:58:2f:a4:7b:b7:97:b3:86:
7d:74:63:3d:89:fe:55:86:d0:b0:fd:88:ce:da:62:
0d:20:7a:d0:34:50:ea:a6:34:22:55:06:6f:4a:43:
3a:cc:e4:f3:d3:42:bf:c3:a5:04:68:8b:13:4b:d9:
53:86:23:07:f4:3c:1c:37:15:af:44:de:f1:41:04:
b3:77:e9:3f:7a:40:a0:c2:d7:ca:ef:d3:d9:8f:c1:
af:cd:c2:2e:5b:25:fb:60:90:4c:ed:a2:92:c8:32:
d6:6b:c5:36:be:48:46:f6:97:04:ce:96:92:57:35:
77:0e:d5:62:5a:5c:05:7a:e5:8b:d0:2c:41:08:9b:
40:bd:f0:46:e5:c2:39:82:6b:9f:dd:6c:7e:8e:c8:
28:bd:72:55:ff:f3:e4:a1:59:1a:67:2b:d5:f8:70:
a0:08:56:91:80:7c:c7:38:ca:fd:fb:a4:d0:2e:00:
3d:07:43:d2:23:a2:9d:eb:af:53:b8:24:6c:a9:66:
be:0f:c8:71:ac:c7:7e:bf:18:96:f2:18:46:6f:29:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:1F:76:90:13:A3:0F:C5:8F:55:8A:5F:46:B2:B7:B8:56:59:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3E82C9CBEA011EFABC42971762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e3:47:3c:d8:25:a1:ba:8f:6d:67:27:0b:62:b4:5e:db:34:
fc:e1:61:4c:65:a1:79:39:f3:e0:31:98:d7:90:b0:5a:6f:55:
73:22:e9:81:61:d4:be:7e:3b:86:91:e6:8f:9e:46:cd:73:71:
0b:ad:aa:92:39:d2:12:23:e8:7d:32:ed:bc:30:16:9c:2e:06:
cd:13:3c:0a:c5:89:c8:fc:0e:74:e4:98:da:92:00:a4:a2:e1:
8a:f2:6e:49:60:d6:95:3a:c8:5d:53:68:6d:21:d1:e1:a0:4e:
98:e7:3e:d3:2c:17:f8:16:bd:15:0e:3c:78:20:41:8b:36:22:
8e:35:91:88:4c:1c:c6:68:d0:99:64:34:6f:da:42:2a:a1:20:
e2:3c:4e:71:2a:f7:c4:b1:14:fa:1f:13:74:b3:3e:c6:a7:cb:
cd:25:6c:8f:72:5f:a5:1b:5b:91:95:79:a6:78:66:97:55:12:
ab:e2:b8:4c:45:7e:05:e7:f7:60:20:7d:8d:15:0a:e3:f0:da:
fe:1b:9c:d2:83:5a:9c:4a:99:7d:ec:ec:3c:f8:de:81:53:cf:
e6:62:49:a6:9e:94:13:9a:bf:44:17:3c:c4:81:2e:8f:44:b1:
67:32:84:d2:c3:dc:bb:d1:73:12:15:f9:a8:a9:c9:9f:cc:43:
26:00:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:08 2025 by rpki-client