Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3219D4EF47211EFA1D259A7762E951A.roa
File: B3219D4EF47211EFA1D259A7762E951A.roa (raw, json)
Hash identifier: Cf7pDjPNv6goE23DYzMMl6wha37lDhQacEYxNM7GZy4=
Subject key identifier: CE:CF:F4:BA:2E:11:E6:88:BF:B2:93:01:E0:A1:32:B4:C4:CD:83:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3219D4EF47211EFA1D259A7762E951A.roa
Signing time: Wed 26 Feb 2025 18:51:34 +0000
ROA not before: Wed 26 Feb 2025 18:51:30 +0000
ROA not after: Sun 23 Mar 2025 18:51:30 +0000
asID: 62240
IP address blocks: 45.192.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79535 (0x136af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 18:51:30 2025 GMT
Not After : Mar 23 18:51:30 2025 GMT
Subject: CN=67bf62b6-4f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:26:01:1f:66:ec:a2:d1:33:b4:04:b4:7e:
bb:53:d9:54:61:52:ed:79:a3:db:34:5a:a8:2c:62:
08:56:b8:ca:a7:9d:47:c5:c8:6f:5e:c5:af:4a:5f:
87:03:38:b4:78:13:72:a4:b0:99:8a:d6:48:00:05:
b8:b8:eb:51:f2:3a:fa:12:9b:87:8d:b9:25:aa:7e:
a7:13:5c:59:5c:b1:e4:c1:4c:98:78:56:e3:58:65:
87:ad:cc:0e:4f:e0:99:b9:f3:e0:9b:cd:7f:de:cc:
53:fe:0a:b2:e0:21:60:25:39:f2:35:55:61:92:d9:
65:a8:eb:bd:df:f1:6e:63:1c:73:00:8e:e7:36:26:
13:70:32:e5:6c:a5:03:00:15:61:b4:05:6a:09:e3:
e9:b6:8c:bc:5f:a1:96:36:6c:3e:a2:75:aa:8e:2f:
06:fa:97:3b:18:01:d7:cf:e6:1b:ee:43:e0:fc:7c:
a3:9c:26:82:73:b6:e8:5a:f7:11:0a:c1:f8:e2:8f:
1c:39:64:57:7f:72:6d:40:ac:a7:fd:58:bb:43:2d:
86:2a:28:c0:5a:fd:d6:bf:21:33:78:4a:76:a8:73:
17:8d:0d:bc:d2:07:ec:a9:94:99:25:fa:92:68:8e:
b2:4d:20:48:ce:33:ac:14:03:81:33:f0:d1:77:cb:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:F4:BA:2E:11:E6:88:BF:B2:93:01:E0:A1:32:B4:C4:CD:83:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3219D4EF47211EFA1D259A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.33.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8c:a5:71:9d:8b:3f:b3:fe:be:8c:83:2c:22:58:13:01:0a:
87:9b:e0:3e:08:a7:9b:ec:35:d0:d5:a8:a9:bf:09:98:66:78:
a2:45:37:a7:12:9b:5e:c0:db:c3:93:69:45:03:3c:49:74:0f:
d7:2c:35:ac:09:5d:5e:21:1d:e7:65:79:3b:d5:af:e4:0c:e3:
34:ef:15:4b:6c:7f:03:c1:b3:ea:f0:b9:f2:9c:93:de:91:30:
48:de:d1:e0:a9:be:d2:65:65:3b:f0:98:70:21:9e:c2:0b:09:
13:68:6a:72:7d:77:61:2a:a6:03:ca:49:7e:aa:f5:56:77:c2:
d7:77:f7:d0:8f:33:86:8a:ad:40:ee:5c:aa:9a:74:48:b7:67:
ab:dd:8c:b5:c8:49:88:c3:13:61:a6:1d:a7:1a:57:b3:76:89:
41:6b:8e:5d:d3:d2:ab:55:2d:fd:3c:19:a1:3b:05:42:03:fe:
ca:69:dd:e8:ea:b0:d2:75:37:89:20:7a:fa:18:ac:1a:b4:67:
18:80:b9:62:85:35:7c:1f:5f:45:e5:44:b1:ad:17:fd:c3:f7:
46:85:a8:f9:bb:72:ce:43:d1:a3:56:e8:06:25:99:a0:79:aa:
56:2c:a0:b3:67:68:28:e1:0b:9d:2a:7a:8a:68:73:f5:b0:4a:
e2:ac:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:10:24 2025 by rpki-client