Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9E3DB6BF9F11EFA5C77CB0762E951A.roa
File: DB9E3DB6BF9F11EFA5C77CB0762E951A.roa (raw, json)
Hash identifier: zV5MUSeowNGEh2kvmEdAkgG6IgX6Lq88UFrTfk0aWsI=
Subject key identifier: E0:C3:75:FE:94:2F:B5:CA:EF:1D:89:AC:AB:33:80:07:5C:3F:DE:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9E3DB6BF9F11EFA5C77CB0762E951A.roa
Signing time: Sat 21 Dec 2024 13:31:18 +0000
ROA not before: Sat 21 Dec 2024 13:31:14 +0000
ROA not after: Sat 25 Jan 2025 13:31:14 +0000
asID: 203020
IP address blocks: 45.198.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59344 (0xe7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:31:14 2024 GMT
Not After : Jan 25 13:31:14 2025 GMT
Subject: CN=6766c326-cd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:5a:43:f5:f6:98:92:62:c5:53:80:a4:2c:
6e:1d:29:2b:15:c8:7d:fb:d8:2d:24:67:3a:c2:e9:
06:43:b7:5e:2f:2f:67:bc:a5:1a:e9:76:60:75:7b:
05:00:c8:34:e2:3d:11:e4:c8:31:86:ee:09:1a:b6:
3c:66:94:8e:47:f3:fd:ec:40:62:ad:bc:b1:c0:26:
af:9b:57:60:81:f0:f5:bf:e2:f0:46:ce:d8:fc:cf:
0b:7c:2d:6d:39:70:92:27:08:6a:0f:d8:bf:da:31:
df:f0:58:61:c6:3b:40:c6:25:81:61:0f:a9:f7:41:
25:fd:85:76:cb:b2:10:01:d6:95:44:33:ac:2b:b6:
04:4e:fc:2f:ff:9f:32:ec:0e:ab:4f:b5:d9:f5:b1:
d9:18:67:49:e7:d9:6c:0b:27:dc:80:ab:08:f0:69:
e5:32:d6:22:93:87:66:e1:c9:da:61:b0:54:d9:ac:
56:26:c5:9b:e2:35:31:e9:a3:7f:9d:aa:b7:cf:98:
2e:b1:8f:5b:b8:10:f0:d7:7e:de:d6:77:86:6b:2f:
58:48:12:2a:50:64:20:c2:7e:9b:a7:fa:0c:6d:7f:
cd:fb:21:3a:35:1e:e9:78:c7:cc:7b:d7:40:03:f8:
dd:b0:b1:fe:d8:c2:12:ca:63:0d:d9:bd:9b:46:4d:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C3:75:FE:94:2F:B5:CA:EF:1D:89:AC:AB:33:80:07:5C:3F:DE:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB9E3DB6BF9F11EFA5C77CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.193.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f2:cd:17:c9:51:f6:13:cd:ea:0c:61:19:c2:56:87:82:b3:
a1:30:41:40:71:6f:b7:a0:c9:f0:e3:fb:f8:4f:c8:a6:45:64:
17:09:b3:83:77:97:6c:b1:75:90:8d:6b:fc:a1:b1:f8:9a:aa:
d9:d3:3d:f5:ac:34:51:78:c6:f0:a7:ef:d4:2c:59:f5:8f:7b:
af:8b:8e:85:ac:9b:ff:1d:ff:74:34:8b:56:07:6f:db:d1:cc:
82:c6:ae:bf:9d:89:9f:33:cf:1f:2c:66:93:c2:7a:24:69:0a:
57:09:c4:75:8e:f5:2b:04:9b:50:59:c0:46:f9:68:cf:b6:c7:
ba:7f:62:82:69:8d:ee:31:93:99:35:57:20:93:d2:57:c4:2b:
27:e5:39:1e:b7:25:58:cc:bb:c2:a0:0c:2a:77:b9:d8:32:95:
4b:9f:14:6a:82:a4:30:b0:40:c5:93:17:0f:7e:d6:7f:91:a8:
4c:e9:75:78:8c:22:15:03:49:5d:f9:ed:47:aa:9e:c9:60:ed:
7f:45:45:d1:5f:ab:b7:d2:12:2b:64:6f:a3:44:6e:16:09:f3:
1f:75:9c:68:a1:c7:b4:26:64:5e:35:79:36:7c:46:67:4b:f2:
c7:a6:c3:25:73:b5:da:e2:b1:4b:70:c4:a2:0d:71:61:5e:b9:
96:3f:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:24 2025 by rpki-client