Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7357E6CE9711EF90E2C35A762E951A.roa
File: BA7357E6CE9711EF90E2C35A762E951A.roa (raw, json)
Hash identifier: mzzZvPX9tGeV7bK4Y1mrVhZ1oz/nAYfinN326WR4zDA=
Subject key identifier: 78:F3:61:C2:AD:E4:48:33:F6:8F:B5:8B:21:0D:E0:EC:8F:F2:A8:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010406
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7357E6CE9711EF90E2C35A762E951A.roa
Signing time: Thu 09 Jan 2025 14:40:53 +0000
ROA not before: Thu 09 Jan 2025 14:40:50 +0000
ROA not after: Thu 23 Jan 2025 14:40:50 +0000
asID: 39600
IP address blocks: 45.195.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66566 (0x10406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 14:40:50 2025 GMT
Not After : Jan 23 14:40:50 2025 GMT
Subject: CN=677fdff5-16b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:57:61:39:ba:a3:48:1e:e2:f5:b8:da:3a:
ef:a2:ba:dd:fc:5a:0f:2c:07:6f:5e:2a:d1:61:3c:
f5:a5:05:45:80:97:e3:a7:ff:0d:63:d0:3d:4f:4e:
be:bf:88:3c:58:86:3e:45:0b:e9:d0:f8:c8:5d:c4:
da:cc:3e:f9:7e:73:ac:14:9b:47:6f:16:97:d0:b9:
42:7a:90:9e:9d:e4:b7:60:65:6d:17:7c:93:94:b8:
d1:7c:ea:c4:dd:3a:73:10:69:b7:b5:b0:dc:36:77:
2d:d4:b8:12:3d:00:b6:2b:3b:16:b7:38:56:25:c6:
f2:06:e6:8b:cb:f1:d1:e5:54:bb:32:c9:d1:67:68:
ea:46:7f:7b:e0:14:7e:4d:dd:49:00:8d:d2:21:91:
c7:d4:b7:db:04:f8:97:fd:bf:85:b1:40:26:b1:ad:
10:6f:8c:6b:fc:57:92:fd:e4:0e:ac:2f:fa:73:1c:
b9:57:67:53:7c:d5:59:ff:05:a7:d3:b7:8d:d7:7e:
6e:a8:bf:1a:15:1e:2f:1c:ca:9e:bd:2f:f4:89:79:
c3:54:f3:8a:ce:4b:22:bd:b3:c7:27:e8:f8:c2:4e:
de:67:d3:4e:0f:d9:8b:09:1c:7f:d5:74:40:e1:c2:
03:7c:8d:60:75:1a:b6:fe:d1:db:6f:a8:7c:3e:e5:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:61:C2:AD:E4:48:33:F6:8F:B5:8B:21:0D:E0:EC:8F:F2:A8:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7357E6CE9711EF90E2C35A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.108.0/22
Signature Algorithm: sha256WithRSAEncryption
28:a1:a7:b2:b1:8d:72:85:42:8c:df:24:47:11:3f:10:8b:61:
90:2c:c2:50:41:2f:e0:31:25:7c:2b:0d:6a:c8:a0:4a:c4:ee:
44:5d:9b:06:b4:8f:0b:49:67:59:db:04:39:72:ee:5d:f1:c0:
cd:3d:a3:cd:c6:96:6c:ed:2a:78:40:62:d5:80:20:6b:16:9e:
c8:2b:f0:12:b3:96:ab:0f:f4:0f:92:c2:db:e9:fb:86:0c:e3:
bd:46:59:b2:8a:ff:39:2d:e7:9b:66:d1:ee:6c:c8:cd:46:9d:
d3:cb:28:c9:d3:7e:34:2c:d1:9b:d5:6e:77:b4:0d:29:a3:95:
77:34:89:ad:ff:90:bb:00:63:d8:db:e4:1a:ca:54:e7:ae:23:
e1:5e:2e:43:29:d9:6f:d0:60:d7:df:a0:a6:8e:ef:77:1f:4d:
97:4c:97:6e:43:8e:46:38:76:9d:6c:db:54:80:50:e6:53:1c:
d1:4d:24:b5:0a:cd:e4:f1:db:dc:15:a7:c6:e2:2f:be:32:86:
e6:db:09:a6:6d:f0:64:73:18:f6:18:53:b0:72:2d:e3:a8:1a:
33:30:09:d0:ff:c1:65:3f:1b:2c:e6:18:f6:15:93:3a:2f:9c:
1c:d3:78:74:03:40:40:9f:26:4a:03:23:e2:d1:d3:85:e4:61:
6f:ae:11:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:39 2025 by rpki-client