Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD4618ECE8611EF9CA1FC70762E951A.roa
File: DBD4618ECE8611EF9CA1FC70762E951A.roa (raw, json)
Hash identifier: z2NRWsyC6Pk4ox6PmLpfRCjxR9SqOEiwC4ApEHfSXec=
Subject key identifier: 8C:0C:91:61:54:B6:3F:40:68:EF:48:52:55:DC:03:44:F6:B4:52:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD4618ECE8611EF9CA1FC70762E951A.roa
Signing time: Thu 09 Jan 2025 12:40:08 +0000
ROA not before: Thu 09 Jan 2025 12:40:04 +0000
ROA not after: Tue 21 Jan 2025 12:40:04 +0000
asID: 137899
IP address blocks: 45.192.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66512 (0x103d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:40:04 2025 GMT
Not After : Jan 21 12:40:04 2025 GMT
Subject: CN=677fc3a8-c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:10:f7:eb:68:bd:d1:51:62:4f:d1:f5:74:
ba:f5:98:ae:ec:95:b3:1f:38:18:c0:7f:8a:dd:f8:
39:6a:8c:c9:ca:cc:7a:60:0b:97:c4:7b:20:46:22:
87:6b:32:85:4a:3b:2e:c2:94:32:d1:91:4b:9e:f7:
2d:1e:85:e8:a5:10:7a:77:99:f9:dd:57:86:1e:f3:
43:1f:5d:4e:09:89:b0:33:db:b9:c0:90:03:7b:71:
c9:e5:e1:0c:0c:b0:b9:d6:94:80:ba:33:7f:a4:c3:
05:35:c1:f3:31:55:83:a6:5f:92:b2:2e:4f:7e:3f:
bc:e2:6c:cf:9e:44:c2:46:ae:30:3c:fe:9d:6f:3c:
d4:6a:ad:95:e8:b3:cc:d6:94:16:5b:b2:28:52:5f:
a0:02:d3:c6:91:d2:db:f1:5f:ec:1c:90:3d:1f:28:
95:53:af:56:d0:5b:06:4a:7b:27:07:3e:de:63:0c:
43:5d:6e:00:35:b4:4e:16:83:d6:7e:31:0c:a4:f4:
9f:86:1a:5e:b1:67:08:92:b8:3a:3c:5f:a7:12:78:
63:2c:7f:bf:fa:9e:c9:d6:2c:ab:f6:ff:b4:e9:04:
e1:db:24:03:46:39:6d:1a:ad:ae:07:13:7c:79:0c:
3f:ea:78:1e:d4:6b:6d:bb:67:9d:4b:78:85:15:10:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:91:61:54:B6:3F:40:68:EF:48:52:55:DC:03:44:F6:B4:52:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD4618ECE8611EF9CA1FC70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:91:cc:5f:f7:c8:39:94:c6:cd:40:6c:6b:55:bb:34:d8:c8:
56:fd:ab:41:70:68:79:c5:23:ec:71:7b:6a:3c:18:cf:f5:4a:
43:03:b9:bf:4c:fc:c6:0b:00:bf:37:61:68:c9:89:53:b8:28:
e8:3f:18:0e:40:92:14:e6:32:67:9f:0f:20:81:af:de:5d:4a:
d3:41:c1:4d:0d:e0:48:10:97:6b:a4:94:83:9c:7d:fc:7f:45:
da:4b:88:d2:62:98:ae:cd:09:16:1a:43:8e:50:09:2f:b7:56:
c7:ae:b5:16:22:0a:b5:01:f0:f4:ef:da:a5:fb:d1:6d:3b:72:
3d:6e:83:27:80:08:12:6b:a2:30:64:41:1d:1c:86:8f:34:e2:
17:ee:dd:9a:bc:3d:3e:bc:28:fd:b3:ca:9f:9e:37:71:58:b2:
17:a5:10:68:b5:fd:8b:ab:ea:b5:8e:7b:9c:d3:83:72:68:4e:
49:5c:e0:7e:1c:2c:4c:b3:e9:3c:79:f2:72:ea:2b:e2:1b:05:
e4:c2:7f:61:05:bf:0b:9b:83:57:4f:e2:3e:81:d5:0f:ad:86:
77:95:b1:96:9d:8d:00:d5:f5:1d:60:1a:d9:de:16:cd:47:f9:
41:47:07:d0:32:e6:39:48:1f:b4:81:0b:77:c9:07:8b:24:5d:
e8:11:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:04 2025 by rpki-client