Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE61100EAE411EFB92ADF5F762E951A.roa
File: BAE61100EAE411EFB92ADF5F762E951A.roa (raw, json)
Hash identifier: ClKMeNJmczVSCWKMT3g8/FqYYQbZdK6vTXZHjZaYReo=
Subject key identifier: 1C:80:E0:74:12:A1:7C:E7:66:34:F1:80:CD:D7:98:C0:6D:3E:9F:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012343
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE61100EAE411EFB92ADF5F762E951A.roa
Signing time: Fri 14 Feb 2025 15:02:38 +0000
ROA not before: Fri 14 Feb 2025 15:02:34 +0000
ROA not after: Sat 29 Mar 2025 15:02:34 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74563 (0x12343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 14 15:02:34 2025 GMT
Not After : Mar 29 15:02:34 2025 GMT
Subject: CN=67af5b0e-f787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:00:c5:0e:15:de:73:31:2f:c9:b4:ca:1b:
2c:e4:43:7f:0a:d0:d1:5b:f9:5b:93:4a:f5:ca:cc:
08:33:c6:1b:e4:ca:9d:19:d4:96:25:8f:2d:ca:da:
6b:98:3a:7d:15:44:cd:56:ae:93:20:f7:75:10:fa:
04:b5:14:91:9d:91:4f:6c:46:b7:a4:87:7d:a6:c2:
3c:87:66:dc:2b:dc:aa:09:6d:0a:01:9a:9f:ac:5b:
f7:d6:72:63:93:4a:af:fa:26:ec:87:49:c9:4b:a4:
71:2f:02:28:75:98:d2:7a:97:3f:6e:a6:98:fc:12:
11:e2:61:cb:07:2e:8a:43:ab:74:d9:24:71:88:bd:
23:df:7e:2b:71:7e:ff:80:11:69:a5:b7:f5:2e:5a:
0f:a5:aa:00:75:b7:bf:92:81:8f:c7:68:b4:1c:54:
95:d4:39:9a:a7:37:ad:76:73:65:55:b7:06:30:9e:
93:b1:79:35:f1:2a:d3:85:a4:5b:38:df:13:a3:ff:
4a:62:5f:e9:e5:6d:e0:c9:28:b6:1f:76:4e:20:1f:
98:e1:1d:48:06:b6:a8:35:f0:15:0d:38:0a:62:f7:
9a:e4:33:69:0f:4a:56:fc:9f:1c:17:71:e3:00:60:
ed:75:f8:fb:f9:25:12:99:f3:7b:af:c2:f0:10:de:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:E0:74:12:A1:7C:E7:66:34:F1:80:CD:D7:98:C0:6D:3E:9F:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE61100EAE411EFB92ADF5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c5:16:45:e6:68:e0:ef:61:80:4a:1e:df:04:6f:3e:43:33:
08:52:ed:ae:47:d3:1c:fe:84:c4:a0:4d:ae:8f:5f:57:c5:c5:
19:98:f5:d3:fc:b9:70:8f:1d:58:57:35:ca:07:29:fa:b7:ee:
fc:38:7a:bc:d2:92:4d:3d:91:06:03:63:ff:a2:94:c6:b7:78:
da:01:92:ae:99:7a:b2:11:4b:80:1c:93:74:fd:22:de:b0:cd:
4f:d8:a9:1a:bd:ab:ce:e8:57:28:a3:86:fa:4f:f4:08:48:a8:
18:77:bf:de:52:7d:b8:0d:00:59:b4:0c:a1:d8:24:17:2a:f3:
b2:73:bd:61:e1:37:a8:04:01:d3:5c:87:04:49:a9:17:11:30:
78:c0:fb:32:8d:32:5b:0a:c0:2f:83:46:aa:25:f1:8c:47:0a:
22:1e:85:85:87:37:1c:ce:57:cc:63:3b:9c:e0:b7:7d:28:3e:
7e:55:3c:45:cf:f0:20:91:05:1f:e2:2f:95:31:51:e1:77:2d:
2b:ba:74:57:03:b9:1d:13:5c:85:b4:54:2b:f6:bb:9f:05:9b:
fc:cd:96:24:59:57:dd:45:41:91:d6:98:7c:0e:42:9e:03:da:
31:08:72:d7:e3:50:0e:b7:cc:7d:73:3d:0c:b9:e0:de:55:99:
81:47:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:49:03 2025 by rpki-client