Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D255D7C6CCDA11EFBF5A82BE762E951A.roa
File: D255D7C6CCDA11EFBF5A82BE762E951A.roa (raw, json)
Hash identifier: 94BHrOc77olZAOPbUWOeEV6tRMaQQgPY89HDExZCik8=
Subject key identifier: DF:4E:E3:1B:B4:8E:B3:EB:5A:1A:98:02:E5:E8:23:46:AA:6E:89:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D255D7C6CCDA11EFBF5A82BE762E951A.roa
Signing time: Tue 07 Jan 2025 09:36:08 +0000
ROA not before: Tue 07 Jan 2025 09:36:04 +0000
ROA not after: Sat 18 Jan 2025 09:36:04 +0000
asID: 137547
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64339 (0xfb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:36:04 2025 GMT
Not After : Jan 18 09:36:04 2025 GMT
Subject: CN=677cf587-6090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:a7:c4:fb:77:be:19:6c:4d:79:07:49:a8:
f9:f6:2f:8f:64:31:6c:c9:d9:ec:02:5b:56:89:a3:
07:89:11:af:2b:63:3e:5a:1c:38:f7:14:3b:b9:fa:
a6:aa:bd:1e:89:69:50:2f:ef:a6:ea:34:ea:51:3b:
2b:df:09:21:ba:29:85:af:78:7d:94:cf:d2:57:ec:
a0:40:20:15:0f:38:09:ec:87:ee:c7:5f:eb:d1:b4:
b2:35:56:b9:fd:c4:c1:ee:ca:41:a6:e9:47:2d:29:
5a:80:28:74:c0:40:a3:80:d4:5f:98:19:17:68:18:
1a:ae:ce:2b:c5:a8:18:5f:ec:d9:57:97:79:b2:f0:
98:d9:e7:2f:8f:e9:31:f7:c3:c2:53:db:d4:c2:98:
a1:f3:df:66:ab:66:1d:b2:d1:26:59:95:59:e3:18:
33:72:6d:f8:16:f1:37:99:1b:9d:88:c3:af:63:a0:
5f:f4:7f:a2:61:45:df:ee:b8:69:b8:1c:11:b0:93:
36:e2:1d:6d:90:c8:0d:2e:74:9f:4e:17:4e:10:ea:
c0:b1:c6:c9:a9:7d:74:5e:9a:39:ea:e1:b8:1f:50:
49:e4:b9:39:88:e3:46:6e:4e:53:4a:0e:33:ea:31:
d5:1a:b9:de:28:1c:75:1a:48:e9:14:d8:9d:66:e1:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4E:E3:1B:B4:8E:B3:EB:5A:1A:98:02:E5:E8:23:46:AA:6E:89:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D255D7C6CCDA11EFBF5A82BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
76:46:2b:e6:a9:d5:2f:29:be:a4:7d:80:4f:3f:40:41:19:77:
57:97:8b:94:d8:2e:d6:cb:8b:fe:17:65:56:1a:d0:40:05:de:
71:57:ab:c7:9a:2d:35:fb:4a:cf:92:9c:c5:45:3f:0b:e5:5e:
dd:a2:f2:2f:b0:19:1f:d1:d2:f7:bc:5a:42:23:2b:fb:44:32:
4c:1b:7e:ba:c0:a2:10:a1:fb:cc:d9:53:84:84:a2:0e:78:fc:
5e:fc:67:34:2b:d2:45:a5:8c:87:2f:9a:d2:0d:4a:42:9f:b4:
88:06:56:98:05:b9:d7:8c:2e:4a:2a:17:dc:5f:e4:a8:3e:ab:
a6:25:f2:89:b9:dc:e7:86:7c:29:56:2e:ba:26:46:48:59:a3:
6b:3c:a7:66:f6:5b:ee:a8:8a:df:47:ec:e1:64:50:91:2f:ce:
77:81:62:4e:ff:1a:c7:a7:0e:07:35:54:13:30:b8:38:66:bb:
72:21:e6:bf:0d:eb:ac:42:2f:89:98:6d:86:fd:c0:d6:75:71:
56:09:d7:d3:77:38:22:c7:95:dc:b5:81:df:85:c3:8e:30:a3:
06:1d:9c:61:d7:e7:a2:78:ae:89:e7:ca:b0:bf:6e:77:02:38:
5a:1c:10:25:32:6c:e3:68:22:c7:2c:13:37:b1:e2:9d:f1:da:
94:79:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:05 2025 by rpki-client