Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF81CA4F48111EFB577E78F762E951A.roa
File: ACF81CA4F48111EFB577E78F762E951A.roa (raw, json)
Hash identifier: BjDFZlKcOcbZT6fqvX/fMl4HnDaNavO3Y5UfPgugUik=
Subject key identifier: 84:2A:7E:89:64:7B:9C:22:EA:C6:69:94:C4:A3:04:FB:7F:D0:C9:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013792
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF81CA4F48111EFB577E78F762E951A.roa
Signing time: Wed 26 Feb 2025 20:38:46 +0000
ROA not before: Wed 26 Feb 2025 20:38:42 +0000
ROA not after: Sun 23 Mar 2025 20:38:42 +0000
asID: 62240
IP address blocks: 45.192.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79762 (0x13792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 20:38:42 2025 GMT
Not After : Mar 23 20:38:42 2025 GMT
Subject: CN=67bf7bd6-74bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:35:f2:11:a1:3d:56:5f:16:11:5a:10:6c:
70:8d:18:c7:a8:70:6a:36:35:50:e5:6a:59:98:6b:
9e:4d:a4:f0:83:2c:f0:4e:89:59:a8:f2:42:ac:e9:
97:79:90:e4:21:01:0e:25:72:1d:a7:f5:39:18:80:
ad:a5:29:99:32:c5:d7:c2:e3:5f:f0:e2:72:21:50:
33:66:d6:2b:19:7a:ae:bc:ad:f6:f1:b7:1e:5b:c8:
3e:03:f7:91:27:cd:91:15:40:cf:0a:1a:0f:25:18:
2a:fe:6a:d8:7e:18:62:6e:9d:37:7b:17:34:72:b2:
86:b0:6a:52:c5:d7:8e:fe:16:14:42:f8:2d:58:35:
85:93:52:15:a1:d5:1a:40:e7:dc:0a:4c:b2:73:6f:
7f:01:3e:d6:e3:ce:7d:c2:14:f9:14:f3:4e:ac:e2:
a3:c4:b3:cc:f7:9e:fe:82:87:53:3f:ab:f7:d2:4e:
90:83:bf:8c:e5:90:b7:99:73:40:a9:fd:e8:89:72:
5b:9a:1e:9c:d5:ba:e7:aa:cd:22:ac:9c:66:ba:3a:
80:58:58:6e:23:09:35:20:6c:1c:37:c6:1f:d0:3e:
1c:97:7a:f5:75:8b:1a:6c:fb:f8:ae:16:ca:2c:4c:
2e:a3:c9:87:51:80:f6:e6:d3:a1:d3:99:86:85:6a:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:7E:89:64:7B:9C:22:EA:C6:69:94:C4:A3:04:FB:7F:D0:C9:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF81CA4F48111EFB577E78F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.47.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3f:ca:3e:1c:ec:13:cc:63:f6:37:9c:a9:bc:dd:dc:84:03:
c2:27:c4:17:65:35:b6:34:65:3c:b1:3f:f6:13:e0:93:d0:de:
2f:f0:9e:5e:56:b7:db:ef:dd:e9:1b:45:06:3f:5b:32:e5:9c:
36:cc:57:f1:85:fc:70:32:6b:88:62:0c:92:ec:6e:99:e1:d9:
d4:5c:5b:fd:ba:20:6b:2b:2b:55:05:97:fe:dd:9c:e8:22:d2:
78:1a:c7:44:49:3b:ce:1a:e6:07:40:68:fc:db:e7:70:66:d4:
9d:3a:da:71:64:6e:37:b7:ee:74:00:ca:35:6d:99:73:a4:4c:
de:6e:a4:de:e1:01:e1:cd:17:cb:f9:19:3b:af:25:78:fc:ed:
7d:72:47:3b:43:2f:87:12:b4:70:ab:6e:3c:27:fe:cd:9c:23:
29:7a:db:4f:0b:91:f0:7c:31:f5:a9:10:c6:bb:c3:3f:be:1c:
ed:ea:d0:44:37:5c:ac:c0:9a:66:34:e3:27:00:99:f2:68:4b:
ea:d2:b5:f8:d0:fc:31:70:57:81:28:12:f7:47:6e:98:87:2c:
28:a3:5c:e2:3c:07:f9:74:0f:cc:0b:4b:b4:20:3c:23:0c:c3:
43:01:cd:b6:42:00:be:4d:11:ac:ef:d6:b8:cd:05:0c:08:61:
f7:78:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:39 2025 by rpki-client