Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3E78B8CF47311EF89C966AE762E951A.roa
File: D3E78B8CF47311EF89C966AE762E951A.roa (raw, json)
Hash identifier: bAULlgC4UBm1amqG+ZdrIs6AuDlwJ+R0Egg1h/4PaSg=
Subject key identifier: 1F:0C:C7:39:11:A0:81:6F:37:17:CD:47:73:13:08:E0:B6:8A:C2:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3E78B8CF47311EF89C966AE762E951A.roa
Signing time: Wed 26 Feb 2025 18:59:38 +0000
ROA not before: Wed 26 Feb 2025 18:59:35 +0000
ROA not after: Sun 23 Mar 2025 18:59:35 +0000
asID: 62240
IP address blocks: 45.192.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79559 (0x136c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 18:59:35 2025 GMT
Not After : Mar 23 18:59:35 2025 GMT
Subject: CN=67bf649a-bccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:e1:cf:f2:24:ab:bd:cf:3c:eb:56:87:96:
e5:96:68:4e:08:76:5a:57:99:ae:b1:24:51:5a:ef:
04:fb:d5:52:ff:23:7d:47:09:ed:2b:5d:6e:f9:46:
99:6a:0b:4f:6a:cf:2b:c3:76:8e:87:49:0a:78:d0:
9c:ae:bb:2c:68:3c:94:24:0d:61:88:3f:c8:c0:a4:
81:69:c8:d1:0b:c5:fa:09:9b:15:a6:70:0f:97:0e:
ee:d4:b2:de:d1:82:a5:c7:40:b3:bc:a5:70:46:a3:
05:4c:8e:e2:34:37:1f:0f:9e:b5:b2:ed:e0:61:01:
0a:de:1b:e9:be:44:e2:79:a1:62:6d:a8:72:a6:1a:
fa:29:70:49:2c:56:c7:b0:fb:e2:8a:c6:66:86:fb:
32:42:aa:90:ca:64:04:41:1b:26:73:ab:e7:2b:1f:
a8:f7:06:7b:94:04:c5:0f:19:f7:87:9e:73:b7:68:
93:fd:ae:50:30:7c:91:a3:95:05:c8:f9:2d:e0:47:
32:46:64:c6:6a:a4:e1:e0:c4:a6:31:94:18:c4:4b:
c7:28:96:58:82:1e:18:99:89:66:14:f5:37:21:cc:
9a:9c:aa:6b:69:10:e5:1e:4d:6a:75:38:bc:3a:d9:
13:73:2d:5a:b2:b6:b7:36:9e:c9:67:0d:1e:48:e9:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0C:C7:39:11:A0:81:6F:37:17:CD:47:73:13:08:E0:B6:8A:C2:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3E78B8CF47311EF89C966AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0a:bc:59:3c:59:f0:8c:0c:09:be:35:a3:ec:a8:22:65:a9:
ce:68:91:43:d8:0c:03:fa:1a:f3:9a:a1:26:5e:9f:64:f1:9e:
c4:98:f9:69:65:1f:31:73:6d:3e:1d:ee:ae:36:f9:95:c4:7a:
9e:60:c3:99:5f:f2:65:29:da:54:67:c1:d1:77:27:97:be:2d:
17:4b:fe:09:ab:77:94:3a:d8:2c:71:26:69:a0:47:78:32:87:
58:6d:c8:3c:7d:c2:8d:e7:81:78:24:65:99:7b:09:ee:46:7e:
ae:82:9d:c5:c7:f2:51:06:35:53:67:43:8a:00:fd:29:72:49:
3b:3f:06:14:47:e3:3b:6e:b7:3f:91:d7:27:7f:6e:0e:d7:b9:
b7:79:6d:ac:17:90:7c:c5:05:ed:02:64:89:9b:6a:85:cb:ae:
9e:75:18:14:8c:fe:fb:02:20:d7:54:f3:c5:1b:26:61:21:a3:
8c:84:49:b4:56:20:5f:3d:4f:cf:bc:30:c0:6a:14:a2:ef:05:
a7:73:b9:ad:21:02:fa:40:b2:b7:a0:a1:c7:32:0c:94:35:ee:
c5:ae:fe:22:d0:32:c1:11:2c:50:3b:3b:4d:d4:c1:b7:9c:36:
a2:d7:de:ac:22:b2:29:a5:81:b7:95:c5:31:a3:51:cb:71:91:
2f:b9:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:35:02 2025 by rpki-client