Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAFA078AB92A11EF910AB29D762E951A.roa
File: DAFA078AB92A11EF910AB29D762E951A.roa (raw, json)
Hash identifier: V8VngSlO/Fz/ZJ2VVs5nLMTvK4EbMSyXamLbNVIBw48=
Subject key identifier: 19:EF:1E:62:BC:B6:D9:14:D3:62:69:5D:F3:FE:A7:70:E2:84:2A:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E343
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAFA078AB92A11EF910AB29D762E951A.roa
Signing time: Fri 13 Dec 2024 08:18:38 +0000
ROA not before: Fri 13 Dec 2024 08:18:35 +0000
ROA not after: Sat 25 Jan 2025 08:18:35 +0000
asID: 202656
IP address blocks: 45.199.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58179 (0xe343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:18:35 2024 GMT
Not After : Jan 25 08:18:35 2025 GMT
Subject: CN=675bedde-7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:c0:8a:76:1e:1c:67:d7:b9:03:5c:5d:06:
db:2b:17:40:4f:e6:39:64:d0:ce:3e:d1:6b:ec:a8:
23:61:0f:34:ed:65:3e:3b:45:bf:0a:13:14:69:59:
38:72:06:d4:16:7f:4b:87:67:f6:1c:5f:98:db:04:
29:da:87:34:1a:70:65:79:97:7c:17:67:35:26:65:
c2:13:b4:01:68:14:50:4f:ca:f8:32:e1:ff:3e:07:
9f:fa:f7:58:c0:a3:98:04:27:9a:67:12:91:cf:4e:
4a:8e:f4:dc:8c:01:6d:b0:f7:33:df:98:46:63:38:
5c:e1:f1:07:bc:91:9c:0b:b3:b9:90:6d:08:07:53:
fb:81:64:8e:10:7f:15:95:33:4a:1e:0c:99:60:4c:
3b:82:48:a5:3d:ad:05:4e:54:ed:69:38:d3:0d:d8:
d3:99:ec:ea:1c:0b:e8:d0:b8:a4:9b:27:f5:78:c2:
32:98:5b:26:95:3b:66:d7:8a:4f:09:4b:47:29:78:
45:44:22:f1:14:5a:13:d5:1e:9c:cc:71:e2:0b:96:
1e:8c:96:5d:cc:58:22:33:1b:81:1f:86:37:12:8b:
78:50:5d:70:28:94:a7:d7:25:57:73:e7:fe:cb:4a:
c0:0e:d9:d4:bf:81:b2:1c:b9:41:41:8a:f0:c3:22:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:1E:62:BC:B6:D9:14:D3:62:69:5D:F3:FE:A7:70:E2:84:2A:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAFA078AB92A11EF910AB29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.228.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8e:34:45:6b:dd:8a:4e:c0:c8:e7:82:fe:a0:4a:d3:a3:75:
e7:a3:c6:20:1f:de:a7:87:8e:82:34:88:69:a8:df:cd:98:ae:
81:b1:1f:b8:de:c6:0f:97:99:5a:61:f8:b8:61:45:7c:9a:bf:
4b:d4:92:b9:99:3d:fe:c6:ee:ec:63:30:91:ff:b5:15:53:7c:
db:80:a8:0f:dc:18:d9:2c:e6:37:33:fc:71:73:b1:d6:01:29:
d5:ba:2a:be:74:8c:eb:0e:97:b9:57:d6:00:47:5f:9a:28:a3:
bb:8c:31:92:a6:83:14:11:fc:01:a7:aa:94:42:fe:5c:02:4a:
eb:1a:da:4e:a2:38:4d:f3:ed:48:6a:08:47:6c:40:70:40:30:
1d:c4:b1:bd:6a:6e:6e:82:29:8d:41:ec:0e:fd:5d:67:c6:8c:
d8:f1:74:ab:36:2c:4d:26:17:a7:85:08:f6:50:04:54:ed:e7:
9d:c5:79:72:5b:74:03:cd:b4:de:ac:9a:99:c8:4b:1d:1b:24:
a8:99:55:1e:fe:de:95:9a:35:d2:de:c3:be:d7:36:71:a4:6b:
dd:cf:e0:7e:68:d9:2f:38:3f:77:76:ee:aa:1e:91:e9:36:92:
30:7e:2d:cc:65:7f:84:67:b6:30:a7:9c:d4:68:f6:a8:15:b4:
b3:5a:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:04 2025 by rpki-client