Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD48BF8CCF3711EF8AB6D457762E951A.roa
File: CD48BF8CCF3711EF8AB6D457762E951A.roa (raw, json)
Hash identifier: cyeokANnp0+OARIvo2RGTaXSNipG9DldJjmYLuhosWo=
Subject key identifier: FD:56:89:C6:B8:0C:90:F3:D3:18:A5:F2:39:AB:29:81:9F:F8:52:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD48BF8CCF3711EF8AB6D457762E951A.roa
Signing time: Fri 10 Jan 2025 09:46:45 +0000
ROA not before: Fri 10 Jan 2025 09:46:41 +0000
ROA not after: Sat 01 Feb 2025 09:46:41 +0000
asID: 39600
IP address blocks: 45.197.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66873 (0x10539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:46:41 2025 GMT
Not After : Feb 1 09:46:41 2025 GMT
Subject: CN=6780ec85-3fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:99:19:f8:8b:fc:ba:fb:a5:35:6b:8f:13:
1a:ea:81:12:50:0b:cc:b4:45:33:71:56:71:49:5b:
14:52:db:63:22:04:a2:1f:19:5d:7a:74:f4:41:78:
63:d8:b1:e6:0e:73:94:f3:f1:71:2c:44:38:4b:0d:
b9:25:41:c2:55:d4:3f:6d:44:72:bb:f8:f0:2d:2b:
78:c0:13:47:01:1c:5b:c2:08:61:ca:b1:30:5b:a5:
78:cf:c8:a3:f8:a9:5c:2b:8f:8e:09:7a:81:89:91:
52:5d:e4:f7:de:d6:a1:15:53:d4:94:46:4f:f0:9d:
91:c9:04:9b:5e:93:b4:bf:81:0a:33:a8:49:72:e3:
03:67:4d:fc:05:c8:3e:e8:05:b2:a1:60:a9:fb:7a:
9a:cd:ec:58:07:33:b6:96:c3:71:cb:bc:2f:0e:c5:
65:4b:53:c8:34:7b:a5:9e:4c:4c:82:60:9f:88:8b:
b8:01:d6:ab:3a:88:f4:68:ee:bd:20:25:6f:e9:ba:
a3:b6:d3:42:bc:95:32:74:e2:d8:3c:b7:ea:74:05:
ed:39:97:e4:79:6f:71:bf:39:58:a0:63:78:a4:8f:
bf:79:ee:12:fa:b4:1d:26:90:32:92:08:1a:fa:03:
75:6e:b7:1a:f2:e2:97:43:29:b7:57:7d:8b:1d:c8:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:89:C6:B8:0C:90:F3:D3:18:A5:F2:39:AB:29:81:9F:F8:52:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD48BF8CCF3711EF8AB6D457762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.192.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:8d:3f:9c:ca:11:d1:95:fd:ae:21:62:2b:ce:9b:f1:a4:a2:
77:e9:b2:b9:a4:6a:7a:c5:ed:74:ee:d6:31:a2:01:6a:3f:40:
8d:f0:93:b6:52:f5:e1:7f:c9:14:1e:d1:dc:bc:44:2e:fc:7e:
43:28:fc:a0:6a:14:d6:90:ea:b4:23:06:d5:66:b4:59:91:f4:
c5:fc:1b:3e:ea:5b:80:4d:b0:0a:9e:30:b9:21:d8:c4:c9:7f:
ae:33:3a:81:27:24:1e:a6:e9:2e:92:53:c6:08:f5:eb:72:e0:
9f:50:be:06:81:ab:c9:4a:e3:8d:1d:71:11:4a:d0:3c:3d:a9:
45:aa:dd:5d:7c:b8:77:fa:ce:80:67:75:8f:16:4f:a5:89:4f:
df:0d:de:10:18:16:0b:17:b7:40:14:7d:0d:fb:5d:15:93:70:
ad:e2:99:fd:ff:17:24:72:54:27:33:f0:4f:83:ff:4b:16:85:
49:bc:6e:c1:c9:81:ab:a2:e6:7a:53:18:4a:cf:88:62:e7:c4:
b4:60:fa:7b:4f:92:7d:80:4b:13:60:7b:be:07:c7:42:74:62:
51:3c:94:19:7d:62:ee:41:f2:cd:29:eb:0e:94:e9:ef:86:f3:
ca:e4:92:83:3e:fd:47:24:d7:5c:db:cd:43:42:59:dd:01:0b:
86:80:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:19 2025 by rpki-client