Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49759AF5C611EF95AD524F762E951A.roa
File: AD49759AF5C611EF95AD524F762E951A.roa (raw, json)
Hash identifier: aWe3kM1N/HG37L+wYUPgG2JtyqRtXDRws7cmO8kwNuA=
Subject key identifier: A4:76:5F:C8:1B:D1:67:60:98:46:AD:4C:B1:3C:C7:35:4B:1C:D1:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49759AF5C611EF95AD524F762E951A.roa
Signing time: Fri 28 Feb 2025 11:25:13 +0000
ROA not before: Fri 28 Feb 2025 11:25:05 +0000
ROA not after: Sun 30 Mar 2025 11:25:05 +0000
asID: 138995
IP address blocks: 45.192.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81199 (0x13d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 11:25:05 2025 GMT
Not After : Mar 30 11:25:05 2025 GMT
Subject: CN=67c19d19-2d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:ef:ec:e0:74:6d:ad:a7:cc:67:c8:ab:6a:
02:57:58:5c:87:78:7b:e5:38:27:10:aa:be:47:3a:
4c:ee:43:fb:d6:f7:df:78:1b:3d:56:74:fd:05:a4:
14:ad:f8:d0:80:36:1b:a4:5a:e0:1a:cf:0c:2f:bf:
4b:6c:b4:87:f1:ce:70:cf:be:de:a6:5d:1a:fe:2f:
c8:55:39:30:6b:06:ec:68:9e:5c:c4:c0:20:b0:2c:
52:e5:e7:79:0d:47:5c:3e:60:5e:71:2b:17:43:a9:
a7:3c:30:d7:71:ea:91:3e:cb:77:5b:6c:59:9c:79:
57:34:3d:8a:4e:b0:36:e5:47:68:c2:ab:34:fc:ae:
0a:11:7e:e4:98:32:b7:0e:83:d1:5a:52:30:1b:0d:
24:a1:1e:a7:47:14:1f:c1:ac:fd:71:eb:2b:90:dd:
05:b0:8a:7a:f9:2c:21:69:e9:1b:91:da:35:26:a4:
4a:ca:4d:16:a0:31:77:b6:30:fb:18:d9:79:53:a6:
0d:9a:7f:34:39:a5:db:f9:82:49:c2:b3:b8:14:65:
8f:8f:e7:68:8d:4f:b2:4e:e6:af:4d:e5:21:98:ea:
a8:2a:5c:16:82:0c:45:5a:83:ba:79:79:21:e2:80:
d0:34:37:ba:50:26:cd:a9:6c:82:73:d9:d7:c2:90:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:5F:C8:1B:D1:67:60:98:46:AD:4C:B1:3C:C7:35:4B:1C:D1:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD49759AF5C611EF95AD524F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f4:44:e8:d5:01:14:09:ad:e7:5f:b3:33:b2:92:17:8a:82:
5f:d5:53:67:1b:4b:f5:24:b8:cf:f9:87:9f:76:86:12:16:35:
72:29:75:0f:9d:c5:30:d5:24:4b:59:01:52:73:d1:3e:26:60:
bf:05:4a:38:7e:82:19:10:17:71:e6:25:49:d5:26:16:6b:e2:
47:8c:15:e9:8e:b4:c8:1e:ff:78:d1:1c:8c:57:59:ed:0c:59:
2a:e3:7d:e9:42:ee:ae:63:7f:ae:c6:f1:b9:90:40:53:02:7a:
17:d2:d5:ed:47:f3:7d:6f:61:fc:50:a3:f9:f8:54:f4:d7:77:
3f:4d:a1:05:f1:8f:fe:73:87:56:e1:20:b5:4f:af:04:e4:00:
d2:d8:db:09:38:d9:ee:56:21:52:5b:06:25:44:2c:a3:d0:4b:
f6:fb:18:b4:ec:cb:a5:c1:2c:8c:33:a6:1d:0a:a9:8f:0a:ec:
93:cc:10:65:ac:42:e2:58:fe:a6:ae:fa:21:93:35:e9:fb:e9:
21:46:fe:23:a3:44:4e:93:c6:53:56:2e:10:67:69:e9:a4:b5:
15:a9:a8:9e:7c:ba:ca:ce:31:69:02:7b:1b:a6:22:5f:6d:09:
ac:84:4b:a3:21:b2:f4:25:cc:96:87:a9:d0:07:35:23:d3:be:
c9:53:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:26 2025 by rpki-client