Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AB0F0EF5BC11EF97B40D8B762E951A.roa
File: A7AB0F0EF5BC11EF97B40D8B762E951A.roa (raw, json)
Hash identifier: leWfHMO3wJ4kMWAz3PbmhulY4eUkFHWr86LT/gBSQzQ=
Subject key identifier: 55:A8:4C:95:60:EC:D8:7E:78:DD:11:C1:43:F9:40:1A:23:12:E7:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AB0F0EF5BC11EF97B40D8B762E951A.roa
Signing time: Fri 28 Feb 2025 10:13:29 +0000
ROA not before: Fri 28 Feb 2025 10:13:25 +0000
ROA not after: Sun 30 Mar 2025 10:13:25 +0000
asID: 136744
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81155 (0x13d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:13:25 2025 GMT
Not After : Mar 30 10:13:25 2025 GMT
Subject: CN=67c18c49-1cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:a7:b7:54:84:86:d1:aa:96:7a:72:2e:27:
7b:f6:b1:b5:43:03:b7:7a:c5:76:db:57:f6:38:56:
79:4f:7a:e3:79:af:2e:10:ab:0f:54:aa:51:dd:c6:
28:71:08:ba:7c:e8:5e:f4:7d:ad:5b:7b:09:c7:c6:
6b:31:c9:e9:7d:50:ec:11:52:99:2a:3d:d8:db:48:
82:91:2a:bc:99:3c:90:8a:a8:82:c1:f6:d3:65:5e:
d3:4d:0c:4c:0f:13:b4:c8:3d:7e:39:c8:48:ec:3a:
dc:47:8b:9f:95:7d:64:d1:50:1f:40:2d:df:ce:2b:
90:08:84:85:92:28:5c:c4:1f:ee:ac:87:cd:6e:46:
47:d3:c6:1a:e9:b3:12:4c:a8:61:85:6f:2e:86:8e:
7a:b9:8d:d3:ea:28:6e:a3:4f:3f:2f:4f:6d:ea:5e:
93:c8:71:40:66:d6:22:79:8f:de:01:5a:cd:5c:5a:
bf:fc:c2:55:5a:42:8f:eb:04:1a:99:1f:8d:f5:7b:
d3:f1:f0:02:83:d8:f2:8c:9e:26:0b:ac:13:3a:dc:
ac:84:94:e2:58:66:6f:3b:87:ab:89:10:01:eb:4d:
7d:b0:ab:ca:d2:20:93:ca:a4:83:00:f5:60:8b:a8:
32:fc:a6:75:aa:02:43:78:04:2c:16:b6:46:af:89:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:4C:95:60:EC:D8:7E:78:DD:11:C1:43:F9:40:1A:23:12:E7:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AB0F0EF5BC11EF97B40D8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
20:64:ea:ba:c3:b9:de:72:88:fb:02:b1:ee:ae:29:f2:1f:95:
4b:cf:04:be:d4:8a:03:eb:a4:f0:d3:01:ae:bb:38:52:f4:0d:
bf:e7:8f:86:84:a9:01:7e:a5:f2:09:25:1d:73:55:e1:de:3a:
d9:e3:a7:42:51:d0:66:98:c9:54:3e:3c:ef:d0:a9:5c:73:7c:
a4:b4:ff:98:50:4f:1a:62:22:b1:52:f8:9d:62:e2:03:ea:c1:
ea:74:82:9d:9d:2a:d1:53:df:c5:01:ae:3d:85:db:8a:47:f1:
6f:10:e3:ea:7a:bc:a8:87:17:19:4c:cc:3f:c0:55:8b:41:6e:
b9:8e:3e:8f:1b:1b:04:20:32:2c:39:68:6e:f4:14:6d:e1:45:
fc:6a:d3:4c:00:c7:da:63:e5:17:8e:a6:b1:67:7c:0a:40:c0:
c8:ad:37:a2:64:de:bf:05:7e:41:81:42:03:e5:84:a9:27:d1:
9b:37:bf:04:6f:06:55:83:31:72:1e:4c:2d:bd:47:64:ca:80:
2f:ef:48:41:ee:88:7c:82:fc:9c:fc:df:82:02:2e:aa:5e:ce:
9c:e5:db:74:e3:fd:ed:dd:da:80:bd:56:7e:12:59:44:f5:54:
75:b0:a8:0b:4e:d6:ec:1c:9d:1d:58:ad:f4:53:6d:35:7f:bf:
b0:0a:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:47 2025 by rpki-client