Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA67ECEECC2911EFB8DDE555762E951A.roa
File: DA67ECEECC2911EFB8DDE555762E951A.roa (raw, json)
Hash identifier: 9DdmslPZLD+6b2WmMNO9nIADBRQIF6GNQUIO+Kt09R0=
Subject key identifier: 12:33:54:77:B3:40:47:57:DF:46:75:37:57:72:1D:50:48:38:33:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA67ECEECC2911EFB8DDE555762E951A.roa
Signing time: Mon 06 Jan 2025 12:29:20 +0000
ROA not before: Mon 06 Jan 2025 12:29:16 +0000
ROA not after: Sat 18 Jan 2025 12:29:16 +0000
asID: 39600
IP address blocks: 45.196.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63721 (0xf8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:29:16 2025 GMT
Not After : Jan 18 12:29:16 2025 GMT
Subject: CN=677bcca0-cb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:f7:6a:ed:6a:e3:00:b5:38:49:00:8a:fa:
48:ed:ce:28:00:78:32:64:2c:fe:1c:60:94:76:e2:
32:5f:3b:b7:b4:a6:1e:d8:17:89:46:75:21:6c:18:
c2:33:1d:8a:22:ee:18:16:7c:49:b8:3b:86:ec:fb:
0f:a9:08:bd:15:96:83:31:3b:ff:00:7d:3b:b1:6c:
6c:cd:c5:b4:b4:f0:3b:71:8f:c2:9d:c9:c6:33:bf:
4d:29:54:28:12:2a:97:6e:fb:3b:92:8f:7c:d2:99:
36:3a:40:ac:90:cb:58:a9:69:13:3e:c3:3f:96:1a:
fb:ae:a7:dc:60:1e:a2:4f:05:cd:75:33:2d:28:6d:
58:5f:6e:81:3d:22:6b:8f:13:6f:8b:13:07:5d:fc:
1b:30:e7:b6:04:5a:de:ff:d4:ef:79:4b:2f:ec:8e:
13:68:8c:bd:d2:21:f9:4f:62:38:e7:01:28:84:d7:
24:4d:9b:63:4e:f4:82:f6:f8:46:24:92:55:22:05:
4a:c0:b8:1d:fb:94:fb:7c:aa:a3:ea:ad:c0:7a:19:
f8:4b:e8:46:6f:10:a7:31:aa:8a:00:97:e7:51:18:
63:fc:b9:b6:2f:cd:54:5c:45:22:bd:b6:d9:ab:ec:
6a:b9:c5:d1:1e:5a:5d:c6:39:5e:df:30:d4:d3:e1:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:54:77:B3:40:47:57:DF:46:75:37:57:72:1D:50:48:38:33:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA67ECEECC2911EFB8DDE555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.128.0/22
Signature Algorithm: sha256WithRSAEncryption
84:42:39:ed:a7:7e:aa:89:e1:1f:0b:6f:02:8c:92:eb:e8:d5:
11:c0:12:e0:6e:c4:d1:b0:9d:44:ee:30:33:ab:ae:b8:8e:f2:
ce:ca:23:0f:3a:c7:69:35:5c:43:e9:b3:06:54:f3:e5:fd:01:
46:ff:38:4a:a3:4c:7e:af:4b:b9:aa:27:6d:33:14:fb:fe:3f:
1b:2b:4f:b7:53:76:24:a0:c4:73:58:d6:9b:69:18:c2:2d:1c:
20:60:c8:2c:be:aa:38:4f:61:48:23:a2:47:76:44:d3:91:fd:
7c:30:2f:75:30:76:ae:05:69:ff:ab:53:64:26:bb:d6:2a:c1:
80:2e:52:31:37:7d:92:71:1b:43:fc:0f:dd:6c:8a:58:d8:9d:
82:69:fb:1c:f0:99:2d:c5:87:ed:02:e5:5d:85:79:e4:95:a3:
6c:5c:fe:56:39:d5:f1:bd:4c:a7:86:fa:9e:b4:77:a8:3e:f9:
96:81:de:c9:1b:fc:df:5a:c3:47:d6:d2:9f:14:d2:c9:ce:a4:
a0:10:12:ce:fd:6c:fa:85:c8:f2:7e:3e:14:f6:0e:01:06:f1:
9d:e2:9a:a6:81:46:a4:b5:e9:4b:b7:a4:7d:03:5f:cf:1e:ee:
7f:07:9f:f2:7a:15:6c:35:23:36:e8:41:c3:b4:8c:b9:cb:d7:
25:91:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:48 2025 by rpki-client