Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7FCD5BECE8811EF9411A97B762E951A.roa
File: B7FCD5BECE8811EF9411A97B762E951A.roa (raw, json)
Hash identifier: LQEBWKJPeO148OV7nXJwipwlNsy1qJ43EYE+T5wfbfA=
Subject key identifier: 66:68:C0:97:AC:DD:1C:FD:DC:5A:7E:36:3A:B4:B3:A4:96:3C:D4:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7FCD5BECE8811EF9411A97B762E951A.roa
Signing time: Thu 09 Jan 2025 12:53:27 +0000
ROA not before: Thu 09 Jan 2025 12:53:23 +0000
ROA not after: Tue 21 Jan 2025 12:53:23 +0000
asID: 137899
IP address blocks: 45.192.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66524 (0x103dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:53:23 2025 GMT
Not After : Jan 21 12:53:23 2025 GMT
Subject: CN=677fc6c7-38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:66:97:4e:1f:f3:c9:ca:10:78:c9:d5:e0:
a7:8e:7d:6a:c5:35:ad:31:13:23:38:4c:0d:68:9f:
70:4f:fb:24:af:58:8d:50:75:7b:fa:ff:84:44:49:
d0:66:84:97:2e:fb:c6:b5:b3:43:9e:d3:e1:de:55:
d2:fe:f3:e5:36:2b:56:2e:f6:b6:47:9d:a0:22:c5:
c2:5d:38:27:4c:1c:80:42:b6:12:e9:40:a0:b1:c3:
04:13:9e:f3:de:c3:73:29:c2:3b:4d:ec:76:22:1b:
aa:78:87:e9:05:20:cf:27:75:0f:33:80:eb:22:9c:
b5:a7:a6:74:c1:91:a5:ee:6b:5f:67:b0:c3:29:2d:
41:c0:3c:97:b3:34:90:20:83:28:c9:f4:92:9f:34:
c3:94:78:71:d5:db:a0:0f:2b:fb:0a:2d:be:9b:cc:
ab:76:81:a8:e7:93:c6:f4:82:72:d6:49:9a:9c:d3:
24:66:5c:cb:a6:ec:17:2e:61:74:4d:de:2b:5a:b8:
bb:71:11:ea:d2:7d:4d:33:89:33:0b:25:16:d8:b6:
ac:84:c9:36:72:2f:e6:dc:1c:a6:ed:9e:a2:44:d8:
80:27:38:a4:89:fd:42:53:a7:c0:08:6d:fc:a4:4e:
fa:61:03:88:44:e6:fc:21:60:13:4c:39:7f:98:32:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:C0:97:AC:DD:1C:FD:DC:5A:7E:36:3A:B4:B3:A4:96:3C:D4:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7FCD5BECE8811EF9411A97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.108.0/22
Signature Algorithm: sha256WithRSAEncryption
af:54:51:58:05:fa:05:ac:99:66:b9:32:3f:a0:c0:72:98:58:
f1:5a:3d:11:f8:80:a3:7d:1d:5b:99:02:89:64:f1:81:ab:3e:
5f:19:6a:ac:14:a3:56:9b:bc:d4:4f:d4:e4:52:b6:51:05:51:
d2:e8:07:cb:78:1a:73:97:7d:37:f0:3f:b1:e4:5e:ba:cf:4d:
54:8d:48:ac:98:7f:85:74:c5:88:16:7a:b3:c2:82:64:b7:37:
48:74:8c:91:32:47:74:bc:43:41:6d:77:43:78:b3:f0:7e:f1:
bc:de:00:72:dc:a4:2e:1c:93:b1:34:8b:06:fb:00:78:88:4f:
a7:72:08:c4:e1:6a:e2:be:af:96:cd:2c:a0:af:52:8c:75:be:
9b:2a:d7:21:da:8c:b8:44:03:54:81:ec:64:0e:a3:12:d0:11:
6b:f3:7b:aa:1c:86:4b:99:81:d8:6a:a4:b4:b1:73:ca:c6:d5:
6c:3d:33:ab:08:de:e4:f4:86:d1:54:e8:11:0a:da:db:7b:e8:
77:83:2a:df:87:9f:3a:f6:dc:6d:e2:c1:51:2a:c7:ca:7a:a8:
b9:78:a8:2a:99:d9:de:5a:11:05:58:b1:39:0c:39:b0:ba:fb:
d5:06:3a:b2:9a:4d:f5:5f:29:42:b2:00:18:fd:c3:16:0e:51:
74:aa:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:13 2025 by rpki-client