Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF646FFAB92711EF8A0B6F8A762E951A.roa
File: AF646FFAB92711EF8A0B6F8A762E951A.roa (raw, json)
Hash identifier: xLu8IJoI6D0U3cSP74BIGEoYTrG09qMyCjMoUtDEn7I=
Subject key identifier: C3:FD:44:51:8C:D2:B0:99:58:76:08:A6:08:69:F0:E9:D9:E4:97:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E31B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF646FFAB92711EF8A0B6F8A762E951A.roa
Signing time: Fri 13 Dec 2024 07:55:57 +0000
ROA not before: Fri 13 Dec 2024 07:55:53 +0000
ROA not after: Sat 25 Jan 2025 07:55:53 +0000
asID: 44559
IP address blocks: 45.199.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58139 (0xe31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:55:53 2024 GMT
Not After : Jan 25 07:55:53 2025 GMT
Subject: CN=675be88d-23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:7f:cc:2a:74:e0:2b:eb:0b:51:24:04:b5:
9e:e7:8d:34:1f:04:8f:2b:39:4f:5b:16:ed:83:32:
c3:71:86:49:b6:0d:25:81:53:94:8c:35:4e:fa:85:
d6:49:d7:0a:fd:81:de:4d:11:2b:3f:4c:35:7b:7b:
c8:f7:4b:e6:e8:f7:57:bf:db:e6:a8:fd:0a:03:4a:
f3:8b:79:0b:8c:3e:6b:4a:36:09:81:99:30:ea:af:
03:f5:3b:b7:ae:ab:0e:3b:26:fd:c7:35:78:f8:05:
66:76:f6:e2:9d:a1:c4:df:3d:8c:44:c7:d8:21:77:
1c:7d:27:46:68:41:a1:2f:0f:26:90:ed:85:be:43:
29:4a:5d:e0:24:40:1c:f3:3e:64:47:6a:3b:f7:f7:
9e:bc:a0:55:57:d8:9f:41:7f:59:5b:10:dc:ca:d2:
e1:04:f6:2e:85:f1:a5:36:89:5a:97:7f:43:8a:e0:
9c:94:31:3b:69:58:a5:49:2f:e7:8a:a3:76:d7:ed:
fd:bf:36:c5:d5:94:e6:1c:89:67:b3:8b:15:d9:95:
02:87:5d:22:d7:7d:d0:0c:fb:6a:29:5d:5a:a1:5b:
9d:bd:7f:94:5a:74:fb:fe:fd:e0:b2:d8:f8:00:9c:
bd:ab:56:a9:c5:2f:31:60:be:a5:92:00:ff:c1:c7:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:44:51:8C:D2:B0:99:58:76:08:A6:08:69:F0:E9:D9:E4:97:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF646FFAB92711EF8A0B6F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:5a:e6:a3:fd:31:98:90:16:94:85:d7:2b:1d:4a:6d:9c:65:
eb:45:72:40:91:3a:bc:00:68:12:33:91:d9:af:08:03:e0:6c:
8d:3d:c1:0c:e4:94:72:bc:eb:bf:af:24:9a:38:f5:6d:82:b2:
07:a8:14:e3:3d:9c:33:44:5e:df:01:06:76:f4:47:da:d5:1e:
69:9d:3b:8b:6e:26:fe:c4:e5:46:f7:dd:32:47:25:85:e3:1f:
99:f7:75:d3:33:cd:49:ed:fe:f8:94:c9:8a:5b:d6:7e:57:fd:
f8:8d:f5:ac:a3:d0:62:79:de:fe:02:4c:1b:a0:cf:4d:91:35:
49:4e:d3:35:b3:b5:35:f4:66:ac:bd:48:8e:20:1f:ba:a2:01:
99:d7:c1:04:e5:71:a4:27:29:86:91:fb:ad:ef:55:61:b8:fd:
78:5b:e3:a2:7d:f0:83:6a:2d:e2:f9:bb:41:3c:77:c9:f0:87:
a2:e4:a3:37:c0:3b:98:a9:77:7a:d3:cf:d0:7a:69:8b:e1:64:
b7:58:50:d3:25:e9:07:9b:d2:81:3c:70:90:14:5e:de:2c:c0:
7d:6b:f3:cc:d2:d2:ea:3d:fd:ec:e5:11:32:72:9b:45:61:84:
d9:04:cb:32:bf:31:2e:cb:90:bc:8d:15:ba:47:d4:6b:19:21:
38:23:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:05 2025 by rpki-client