Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4FE4FE6FB2511EF9C66CF45762E951A.roa
File: A4FE4FE6FB2511EF9C66CF45762E951A.roa (raw, json)
Hash identifier: h+/XHfZo0hjoXIri6F3MA3vdEFU5c/ePhibNY/raq/c=
Subject key identifier: 32:F9:E1:A3:4F:80:54:49:55:06:83:64:70:A5:7B:9B:48:41:D2:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4FE4FE6FB2511EF9C66CF45762E951A.roa
Signing time: Fri 07 Mar 2025 07:27:37 +0000
ROA not before: Fri 07 Mar 2025 07:27:33 +0000
ROA not after: Thu 03 Apr 2025 07:27:33 +0000
asID: 13335
IP address blocks: 45.192.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82884 (0x143c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 07:27:33 2025 GMT
Not After : Apr 3 07:27:33 2025 GMT
Subject: CN=67ca9fe9-1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:5e:b9:99:e8:1a:e3:b1:23:5e:0f:22:ba:
e7:ec:14:fe:da:f4:66:18:45:c9:89:d3:b8:e6:42:
48:e2:94:56:d5:ea:48:b3:f5:b8:2a:e8:01:b5:05:
39:9d:51:44:f7:34:b5:43:f1:98:c1:cb:45:8c:90:
c9:f8:fe:28:65:02:da:71:22:db:31:3e:f0:7e:de:
e5:d5:3e:d5:32:73:00:a6:8b:f0:a4:0b:f8:4c:53:
5f:a0:a5:43:7b:1d:a9:95:50:87:99:5f:bf:e8:12:
19:ac:73:15:ca:56:61:cf:6f:d2:68:91:a9:58:f2:
f2:24:f0:c9:c4:aa:75:35:db:13:eb:0d:34:57:cb:
33:21:2d:a8:cf:e4:ce:73:c4:a8:49:82:b6:94:6a:
cb:e8:ac:0b:e0:1f:d6:34:d8:63:53:95:51:ae:e3:
ed:e9:62:5c:b7:a4:aa:39:6b:e4:fb:da:82:e5:1d:
7c:54:9d:44:3a:89:e2:f9:7a:0a:5f:90:3d:90:1c:
f4:9b:b1:ba:a4:9d:4e:8a:2d:3a:b2:5d:1d:95:a4:
fa:52:e0:29:21:9e:44:63:01:76:32:60:b1:66:55:
d3:bd:65:ff:c7:f5:88:5f:a0:db:df:28:35:96:79:
58:96:0a:51:47:df:14:35:9b:eb:31:f1:e4:ad:f9:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:E1:A3:4F:80:54:49:55:06:83:64:70:A5:7B:9B:48:41:D2:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4FE4FE6FB2511EF9C66CF45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0b:8a:49:32:47:27:13:ab:bc:a8:bd:ad:2a:d8:3f:0f:af:
7d:1b:30:e6:3b:2e:87:4b:98:07:16:46:17:ef:ec:16:35:d1:
0d:d4:06:8b:d9:a0:74:91:b0:36:a0:fe:54:26:b0:51:9b:b7:
51:64:c9:3d:ba:f2:c6:3c:89:e0:49:94:8c:2b:bb:bc:db:c0:
d4:92:42:5e:0e:d5:90:05:ff:66:58:7f:b0:a3:10:96:c0:35:
43:f3:89:04:dc:b0:54:ce:48:d7:2f:f6:c1:7e:e6:e1:3f:ba:
47:8e:78:5a:a5:1c:7f:c1:fe:c1:1c:79:16:1b:bd:de:3f:7d:
34:25:ea:7a:2d:ce:33:ab:bb:2c:d3:14:e5:dd:55:6a:26:3e:
79:81:5e:8d:9d:63:5f:7b:49:1e:57:00:44:44:8e:fc:b4:5a:
5a:62:66:6c:c0:6f:40:5f:94:dd:f1:b0:5c:8c:36:7d:ab:a7:
9a:23:96:58:72:1e:f3:94:a5:67:50:ae:58:5e:23:f5:2b:73:
25:cf:54:dc:f0:8f:d7:20:77:57:63:b7:10:23:e6:a4:2b:14:
66:13:4c:96:a7:c1:b8:64:1c:88:ec:5b:b2:ba:4e:9d:03:9b:
c5:5a:e0:fc:17:96:92:f5:7f:25:76:f9:63:fd:5d:76:8c:3a:
fd:e6:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:45 2025 by rpki-client