Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8763304BAF811EF8A7EF26C762E951A.roa
File: A8763304BAF811EF8A7EF26C762E951A.roa (raw, json)
Hash identifier: HnOypPWEQqyTFNrhNYT0WMTyV87wrdb7tZss2MjBtDk=
Subject key identifier: 77:9E:70:24:BC:E6:1C:02:B2:18:1F:4D:B4:C7:38:BA:72:AD:E5:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8763304BAF811EF8A7EF26C762E951A.roa
Signing time: Sun 15 Dec 2024 15:24:21 +0000
ROA not before: Sun 15 Dec 2024 15:24:18 +0000
ROA not after: Tue 21 Jan 2025 15:24:18 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58363 (0xe3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:24:18 2024 GMT
Not After : Jan 21 15:24:18 2025 GMT
Subject: CN=675ef4a5-c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:f3:eb:6e:6e:cf:88:a9:6e:77:44:b3:3e:
4e:d8:84:fc:01:bc:d3:0e:d7:67:8b:c9:e7:c5:63:
93:6b:e1:1f:26:14:7d:60:ea:27:79:50:29:35:28:
73:f4:b2:eb:2b:8c:09:50:8c:ec:19:70:01:08:a5:
3b:6e:e8:73:b4:a6:e6:bd:2e:8e:89:6b:3b:5b:6d:
3b:51:4e:a2:e4:6b:e8:12:fc:3b:a8:0b:59:54:e9:
44:c1:78:ea:b4:19:97:6f:2b:55:90:c4:7b:99:a4:
04:db:63:37:ca:e3:17:27:f5:c7:dd:86:e6:e0:24:
0f:97:3f:d1:2c:9c:2f:f8:b4:7c:49:d6:ec:2f:0e:
39:69:09:9b:0f:36:97:eb:f8:1f:48:06:ab:1d:e6:
58:25:81:99:c8:ca:91:31:fd:f9:f0:fd:6a:99:20:
c0:98:86:4f:9a:92:e6:a3:9b:3a:fa:28:02:45:dc:
64:ab:9d:3b:24:9a:b1:f2:12:d4:d1:a4:b5:49:ef:
55:b5:1a:8c:c5:a1:a6:25:e2:0b:34:43:0d:95:8d:
51:68:1c:09:18:25:72:a4:95:ea:00:31:07:80:21:
55:c4:8e:82:71:de:31:2f:12:63:9c:1b:02:a6:be:
ef:34:6e:80:1e:e7:54:48:e4:8d:07:a7:1d:f0:4c:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9E:70:24:BC:E6:1C:02:B2:18:1F:4D:B4:C7:38:BA:72:AD:E5:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8763304BAF811EF8A7EF26C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:65:51:7e:21:a9:8c:d4:0e:e8:90:aa:09:65:df:70:72:b2:
5a:48:4e:d6:4f:6c:77:47:53:f6:af:b0:1f:6d:fe:0a:56:85:
ea:ea:dc:cd:38:e6:ad:44:d2:cc:a8:0c:67:32:93:83:06:d6:
15:8d:48:9e:83:12:c5:2d:0d:50:d9:87:b1:0e:34:b6:0b:a6:
f3:b7:ae:0f:56:53:3e:65:1b:ea:a2:ca:71:55:84:13:9b:a2:
b0:99:b7:85:8b:79:41:c5:fc:83:0a:a6:8b:18:7f:ac:c5:e4:
b9:e0:a5:fc:e6:5f:26:56:ee:37:46:55:02:bd:aa:47:e3:97:
70:74:37:a5:86:b6:86:b3:8a:72:50:7e:c1:4a:aa:79:a4:c0:
46:17:34:2e:ed:ce:fb:2c:4d:04:a3:8b:73:2c:11:81:3b:52:
05:ef:11:8e:5d:2e:43:d1:b6:e0:86:85:47:7a:8c:a1:78:df:
06:d0:17:42:37:3a:c7:07:df:a1:cc:1f:2b:0a:8d:e4:61:4f:
41:c1:47:4e:02:37:f0:39:4b:62:29:0a:4b:a4:24:a0:e7:c1:
5b:c5:4d:20:2f:1a:a6:68:b1:f7:28:1b:02:06:60:e3:08:13:
72:c2:c8:2b:8f:2a:c9:b3:68:85:40:22:9d:32:54:18:34:b4:
59:64:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:43 2025 by rpki-client