Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17C1B38C81511EFB1964C61762E951A.roa
File: B17C1B38C81511EFB1964C61762E951A.roa (raw, json)
Hash identifier: k7nZLxLachFNPpy8FL39elWeNN1XU14Zlo4CKIFVs/w=
Subject key identifier: 2B:A6:9B:88:F0:B3:DE:D1:AD:C4:55:BA:BA:4D:2F:91:E0:A2:43:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F2B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17C1B38C81511EFB1964C61762E951A.roa
Signing time: Wed 01 Jan 2025 07:54:57 +0000
ROA not before: Wed 01 Jan 2025 07:54:53 +0000
ROA not after: Tue 04 Feb 2025 07:54:53 +0000
asID: 42831
IP address blocks: 45.195.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62134 (0xf2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 1 07:54:53 2025 GMT
Not After : Feb 4 07:54:53 2025 GMT
Subject: CN=6774f4d1-abb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:21:a8:1b:b6:13:93:ff:92:e0:ce:7e:0c:
92:8f:15:95:4c:77:a9:f5:ad:ee:f1:8f:a0:79:2d:
17:76:3d:3e:a4:74:ed:bb:89:de:43:6e:9c:4b:46:
b0:39:de:d2:93:0b:fb:ff:32:cd:e0:60:cc:55:c1:
32:ea:54:5c:dd:ff:98:e0:1b:88:2c:3e:ed:d2:31:
66:39:c0:4a:56:d5:87:39:d8:d0:68:4e:d1:d8:d5:
0f:a3:55:6c:42:53:18:06:50:7c:b6:17:bd:85:2a:
a5:35:75:0d:53:b3:9b:66:4c:40:b0:01:85:58:b8:
6a:b1:48:63:67:fc:4c:22:8e:fd:a8:48:5d:8a:a4:
a7:c4:cf:49:dc:6a:89:49:d2:dc:88:8f:b3:aa:2a:
7a:dc:38:7e:5f:15:24:33:57:45:9b:43:98:73:c6:
18:d2:a8:bc:f6:bd:c7:36:b0:83:e7:ab:58:8e:79:
b0:80:a1:d6:41:4d:19:11:eb:aa:32:f3:25:da:1c:
9a:5f:da:56:16:a5:a6:de:f2:a8:a2:ad:62:3a:d0:
98:a7:99:76:22:c9:65:97:12:0e:e3:a5:8d:f9:6e:
39:57:5f:58:a9:5e:f8:08:23:34:68:b3:19:4f:23:
f0:6a:ea:73:05:8a:b9:ee:2a:24:19:7e:b4:fb:c6:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:9B:88:F0:B3:DE:D1:AD:C4:55:BA:BA:4D:2F:91:E0:A2:43:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B17C1B38C81511EFB1964C61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:c5:19:f5:d0:47:8f:49:8c:7d:af:d2:69:ea:e2:65:06:ba:
40:2c:cc:32:ad:59:2c:d8:1f:f2:5e:00:19:88:85:8d:6b:fb:
ba:c7:fb:f0:16:ce:42:9d:b2:ad:93:6a:f0:eb:11:5d:b9:43:
1d:aa:d5:89:50:e0:e6:e0:85:0b:75:10:b1:c6:1c:ff:57:d8:
0d:1b:9d:3f:d4:0a:eb:fb:4c:a5:47:bb:91:de:80:c9:c1:12:
a6:45:5d:f3:72:e8:8a:59:e7:06:5c:21:2d:51:20:48:17:00:
e1:e8:e4:47:e7:b6:fa:fb:0f:5e:4a:b3:c0:11:ca:97:0d:8d:
64:94:47:dc:4e:48:a1:ac:c0:a2:80:bb:ee:e0:bf:c6:42:96:
01:69:71:41:9d:dd:45:ff:cd:81:99:11:87:31:0a:68:b1:96:
15:61:3d:15:b4:64:7c:76:31:cb:52:5b:fc:04:15:37:af:30:
4f:76:4d:4c:28:94:4f:94:df:7f:ce:c2:d8:b1:81:c8:0c:0c:
ec:fb:78:1d:55:52:f6:dd:18:4e:a2:0d:66:73:a9:4e:74:4c:
5f:ab:ec:88:c0:08:4d:7b:24:44:bd:8d:cd:49:2b:41:29:73:
71:fc:b7:77:03:cc:c0:01:cd:41:f7:a6:80:70:36:0f:d8:26:
ae:60:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:47 2025 by rpki-client