Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF35BACB92B11EFA6AB17A4762E951A.roa
File: CEF35BACB92B11EFA6AB17A4762E951A.roa (raw, json)
Hash identifier: wz9nN2pGPCFGU1VIrjBGe5SMqMqagon3uKUBDSo7hGA=
Subject key identifier: E1:2A:AD:73:B9:54:49:C6:BB:0C:AE:38:F9:FF:E1:DB:4A:D1:D4:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E34F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF35BACB92B11EFA6AB17A4762E951A.roa
Signing time: Fri 13 Dec 2024 08:25:28 +0000
ROA not before: Fri 13 Dec 2024 08:25:24 +0000
ROA not after: Sat 25 Jan 2025 08:25:24 +0000
asID: 202656
IP address blocks: 45.195.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58191 (0xe34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:25:24 2024 GMT
Not After : Jan 25 08:25:24 2025 GMT
Subject: CN=675bef78-fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:df:47:c8:75:ab:dd:d9:3a:3e:3e:62:88:
85:90:d8:8b:f4:4a:ac:05:61:a2:62:1b:5f:e9:50:
56:36:d0:0a:88:81:e6:48:70:f0:77:36:2f:c4:7e:
07:78:56:54:4f:04:fd:d5:d7:3b:64:ea:44:ab:aa:
bc:ae:c3:87:13:c5:5f:07:79:e2:5e:3d:8c:4f:83:
34:c4:75:0d:eb:51:c3:2a:91:2d:57:1f:71:11:22:
08:cb:e1:1e:b2:1e:be:3c:6a:52:f2:0f:e7:3f:83:
cf:d8:2a:90:51:bf:b4:79:51:8f:31:2e:23:da:d8:
aa:58:3d:8a:c0:d5:97:c9:c8:57:55:2f:79:93:0f:
6f:1d:77:6a:ab:6d:ea:bd:ce:ae:20:94:bf:37:14:
68:55:c7:f9:34:08:eb:16:5c:64:2a:88:66:0d:99:
80:0e:ea:f4:49:35:c6:d3:c3:80:5c:ae:8d:91:54:
88:28:8f:bb:20:c1:03:0c:b3:73:e1:13:b6:08:e7:
4b:eb:72:05:aa:fa:8a:c2:c0:b8:0a:d4:17:b6:55:
14:0b:22:5c:1f:3c:ac:4b:58:b7:5a:f4:d1:74:bd:
36:04:31:07:28:12:72:30:98:3d:42:ef:e7:49:3a:
e0:59:6a:d9:1a:5f:87:f5:f6:b4:0f:4a:78:52:0a:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2A:AD:73:B9:54:49:C6:BB:0C:AE:38:F9:FF:E1:DB:4A:D1:D4:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF35BACB92B11EFA6AB17A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
46:ce:39:6b:5c:9f:ff:32:48:8d:f7:3e:98:6a:67:bc:b2:47:
f7:c7:fc:e0:04:34:a1:7f:c7:19:d2:b4:c1:29:e7:e8:db:9f:
25:0a:69:28:a8:33:33:ff:46:94:31:7a:f2:33:06:33:8b:19:
98:b5:fd:26:db:3b:c1:2f:ae:6a:13:23:55:9f:50:08:a5:62:
83:43:cc:15:3b:1b:4a:31:88:65:11:ea:a1:ff:d4:3c:7b:b2:
44:3a:46:7d:02:12:9d:25:75:a2:a9:8a:90:4c:af:50:50:81:
8e:c3:72:6e:d0:f5:d3:bd:2c:95:16:93:bf:7b:ee:cd:94:ec:
a3:d8:ef:23:c6:28:d6:58:6c:bc:f7:70:9e:1c:c9:fa:4c:61:
ed:67:e1:a0:87:90:b8:a9:e7:6d:a8:97:7a:ae:d3:26:51:e2:
df:8e:e2:94:ed:ec:ce:b0:5b:58:0a:f8:09:b2:03:64:3b:96:
0c:1f:27:7e:6a:1a:ff:09:8e:89:00:1c:fa:36:c0:1c:08:46:
fb:79:3c:50:cc:39:9b:a7:b4:1a:29:c8:d3:f7:d6:bc:56:d6:
15:93:de:1d:d8:06:46:b2:37:bf:8f:77:05:5c:84:9b:b5:73:
4d:0d:79:73:b3:57:b8:fc:f7:8e:a6:4b:2d:02:0f:98:df:d1:
66:40:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:36 2025 by rpki-client