Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA263180FA7211EFA20C588C762E951A.roa
File: BA263180FA7211EFA20C588C762E951A.roa (raw, json)
Hash identifier: 16NFc9cBvOl3M9Stsn01qYD0OaAQ0F0GrPNweqcKt84=
Subject key identifier: 48:BC:4D:44:8D:30:12:6B:B2:4C:7B:60:7F:5B:28:69:2E:79:A9:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01439D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA263180FA7211EFA20C588C762E951A.roa
Signing time: Thu 06 Mar 2025 10:06:53 +0000
ROA not before: Thu 06 Mar 2025 10:06:49 +0000
ROA not after: Tue 25 Mar 2025 10:06:49 +0000
asID: 39600
IP address blocks: 45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.203.56.0/24 maxlen: 24
45.203.57.0/24 maxlen: 24
45.203.58.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
45.203.62.0/24 maxlen: 24
45.203.63.0/24 maxlen: 24
45.204.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82845 (0x1439d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 10:06:49 2025 GMT
Not After : Mar 25 10:06:49 2025 GMT
Subject: CN=67c973bd-8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:e6:dc:22:34:c0:8c:9b:7c:ec:a6:9f:4b:
ae:cd:27:5c:52:9f:09:f8:1e:59:be:b6:4d:4e:c3:
e3:a7:d6:b3:b5:aa:e4:21:7a:fd:24:cc:e5:24:69:
76:3f:a0:ab:62:f0:3b:d1:8b:c8:0c:d5:66:94:e2:
ec:d3:e5:fd:e8:27:f4:7d:32:20:6d:dd:95:ce:3c:
ad:10:44:34:f4:93:0b:bb:41:8c:51:f9:06:88:88:
6a:22:5b:62:46:59:27:35:9a:c0:36:c2:f6:8d:d0:
09:10:90:60:38:45:97:31:40:8d:58:11:5c:40:52:
b3:e9:ab:40:33:4b:a3:a9:20:c1:03:87:55:97:94:
4a:91:c2:1a:8c:14:e6:a8:5d:d1:14:57:18:0c:5f:
ff:d0:4f:e4:6d:ca:a0:ef:5c:f1:c5:0c:a2:3d:cd:
3d:8a:69:f7:01:23:ae:6d:c5:00:70:4c:32:33:7c:
d5:8c:94:cf:6c:63:98:d9:29:dd:a8:93:55:3f:ee:
fd:7a:8c:11:cc:bd:db:7b:4e:16:fe:cd:74:f9:3a:
fa:12:28:c4:e2:5f:eb:86:86:6f:89:cc:dc:08:23:
1d:70:ed:cc:65:e5:fd:93:6b:d0:87:60:88:de:77:
41:e4:3c:d6:59:f4:8a:07:35:01:da:e5:d6:35:10:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:4D:44:8D:30:12:6B:B2:4C:7B:60:7F:5B:28:69:2E:79:A9:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA263180FA7211EFA20C588C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.141.0-45.196.143.255
45.203.56.0-45.203.58.255
45.203.61.0-45.203.63.255
45.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5a:19:4f:f3:8b:d7:49:51:7b:f9:cb:4a:7a:41:e6:58:db:
9b:37:88:e5:10:34:43:10:ea:35:e1:b3:06:91:9d:2a:da:f1:
db:09:0e:6d:33:af:1c:fd:55:d1:4d:a2:1c:59:28:4a:24:72:
78:43:ee:8c:6a:ff:98:20:d8:ae:9b:70:c9:43:b6:03:61:fc:
0e:cf:04:d0:3b:7e:20:d9:cc:4a:96:ef:e0:a4:3a:99:80:21:
50:10:54:36:3c:d0:bc:90:0f:d8:59:d4:41:35:83:84:77:91:
d8:47:fb:87:8c:90:38:a4:89:34:ec:0f:b7:6d:7e:a9:85:17:
03:87:f6:86:48:bb:c9:8b:5f:01:c0:9d:cb:83:79:02:0c:e7:
79:52:5a:4b:a4:32:ef:d6:b1:27:c1:9f:8f:9c:d2:6d:5f:72:
41:b8:43:24:cf:03:3d:3e:f6:5e:40:d6:a4:59:fb:15:c7:b3:
e7:ec:63:fd:f7:e7:0d:74:ac:53:e8:66:cf:17:ec:d8:97:78:
94:c9:f5:bb:f3:10:03:fc:d7:e0:a6:29:58:71:92:ba:c1:06:
3f:60:8e:ab:e5:ea:bb:94:78:e1:a4:08:5d:32:d0:3d:36:50:
dc:74:23:20:27:99:cd:0d:8a:4d:ee:d3:29:68:05:29:72:23:
c1:b0:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:01:47 2025 by rpki-client