Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2EC33AC5CD11EFBB85FF6C762E951A.roa
File: BD2EC33AC5CD11EFBB85FF6C762E951A.roa (raw, json)
Hash identifier: VTp1QLhG3ipC6LsI5Cg3o8e9pRL38oeJbfFko9NkS3I=
Subject key identifier: DB:7F:27:2B:3F:0F:7C:7A:F5:21:20:F7:7D:44:A8:FF:A2:4C:45:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F1CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2EC33AC5CD11EFBB85FF6C762E951A.roa
Signing time: Sun 29 Dec 2024 10:14:51 +0000
ROA not before: Sun 29 Dec 2024 10:14:47 +0000
ROA not after: Sun 02 Feb 2025 10:14:47 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61902 (0xf1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 29 10:14:47 2024 GMT
Not After : Feb 2 10:14:47 2025 GMT
Subject: CN=6771211a-379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:da:dc:86:a1:39:46:2d:d7:d0:56:03:41:
21:45:e6:24:33:4b:a5:84:10:9f:3a:f9:53:41:3a:
ae:31:18:22:15:20:cb:59:28:ee:33:45:9c:cf:c3:
38:cb:98:9f:13:bc:f8:92:25:e1:02:8c:a0:d4:d7:
68:7d:5a:da:b6:d9:8e:04:aa:ac:e6:d8:b2:69:f2:
cb:cb:7d:91:88:7f:70:f0:be:e0:f0:b4:b9:c8:0d:
93:41:b2:48:23:e7:c0:4f:df:73:df:c8:4d:fb:81:
76:61:e6:6b:cb:fd:bc:e3:7b:06:6a:36:4e:3b:c6:
9c:60:ae:57:c0:d3:28:ad:d9:78:7f:db:90:08:e1:
b0:ff:ec:a0:f8:ac:29:f5:99:3d:37:fd:23:92:9f:
7c:b1:80:98:36:6b:a3:2b:c7:86:b6:ae:14:ce:0a:
27:42:2f:05:6b:88:9d:cd:88:5c:ce:1b:85:6a:a1:
4e:1b:da:ae:a4:33:3d:b6:db:95:99:7f:0a:17:84:
83:ca:26:cc:d7:11:cf:4d:ec:75:3a:30:b0:4e:01:
e1:33:a0:a0:b2:21:7d:64:7d:9c:31:6d:88:9c:8d:
3b:7a:a5:31:3e:f5:a5:60:8c:f6:c3:37:31:ea:3b:
c5:73:29:0a:a3:e9:b1:1e:4d:46:a9:26:61:5b:d2:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:27:2B:3F:0F:7C:7A:F5:21:20:F7:7D:44:A8:FF:A2:4C:45:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2EC33AC5CD11EFBB85FF6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
20:5d:79:a7:fb:f9:8a:de:9e:14:c0:2e:97:8e:b4:3b:f1:da:
16:4f:cf:5e:93:d1:29:f5:eb:25:ee:88:05:51:87:74:8a:cc:
53:51:1d:c4:89:27:14:17:a6:80:8d:e3:9b:87:76:1e:0b:73:
b9:35:3b:77:10:ec:bf:27:3b:83:a0:0d:d8:07:58:fc:2e:8c:
c7:28:9a:88:41:83:52:21:ee:7f:5a:95:42:b0:f6:5c:36:63:
d4:5c:56:b6:fa:ec:d7:cf:5d:f0:ef:a3:89:a2:43:ff:91:f9:
f6:63:4d:ae:87:d6:a6:d5:7d:52:52:14:eb:cc:ef:8f:7c:c6:
63:b8:c2:ff:42:0e:90:e3:dd:a0:26:9b:a3:af:12:d4:9d:1e:
b5:b9:03:b1:82:5b:ce:78:ae:20:9b:a6:8f:dc:bf:4d:22:6f:
35:2e:d8:a5:44:37:9c:53:60:37:d8:a8:94:36:dd:fa:7f:4f:
a0:96:73:c7:96:a4:95:09:4f:20:75:63:46:cb:0d:3e:1b:f1:
70:f7:ea:58:51:86:79:10:ad:7a:2f:8d:d0:19:12:bb:0d:1f:
6b:01:18:a6:6f:27:78:ca:84:c9:a0:95:9b:e9:1e:61:8e:c6:
58:b9:e8:69:9c:73:73:7e:d3:29:5f:6e:2c:72:41:4c:88:0a:
ba:ff:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:16 2025 by rpki-client