Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCD50C24F47811EF86274852762E951A.roa
File: DCD50C24F47811EF86274852762E951A.roa (raw, json)
Hash identifier: kP/WsXM/g768xh0x7LEETn4ovQZ7sNF3HpBManFtuUw=
Subject key identifier: FF:70:CF:51:29:E3:25:65:59:16:D8:47:4F:89:27:62:F6:7D:1D:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01371B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCD50C24F47811EF86274852762E951A.roa
Signing time: Wed 26 Feb 2025 19:35:41 +0000
ROA not before: Wed 26 Feb 2025 19:35:37 +0000
ROA not after: Sun 23 Mar 2025 19:35:37 +0000
asID: 62240
IP address blocks: 45.192.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79643 (0x1371b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 19:35:37 2025 GMT
Not After : Mar 23 19:35:37 2025 GMT
Subject: CN=67bf6d0d-3657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:8b:05:5e:06:ca:35:99:f3:4e:a0:ec:50:
bb:78:70:90:9d:a0:76:08:aa:71:db:83:8a:ae:c6:
61:20:5d:2a:f5:d1:81:7f:e7:65:3c:d5:be:fe:a6:
e1:e8:9f:29:86:65:1a:85:ee:da:82:f5:1f:06:d5:
0c:23:77:a1:ce:c8:89:b6:44:01:97:80:dc:26:a9:
38:f1:f1:12:9d:2b:b3:54:33:91:c4:9d:12:a1:d9:
e2:b7:7b:3f:00:5f:6b:22:61:bc:c4:6a:4b:ed:1e:
16:6f:e5:26:a3:63:a1:32:e0:55:2c:df:95:cc:7b:
68:49:0f:0c:77:b5:28:d7:8f:89:fb:7d:20:2b:a6:
d4:fd:90:1f:9c:aa:22:c7:fd:e2:fc:f1:8a:f7:e1:
94:58:9c:b3:58:80:bc:ac:5c:39:5d:99:f5:a4:a6:
d3:39:71:a2:1f:ce:ff:6e:e2:c5:8c:dc:06:65:dc:
d9:09:66:52:57:01:d2:f7:08:52:3a:32:c5:48:be:
5c:03:1d:87:76:f8:14:2e:6f:84:b6:29:a4:3e:f4:
d9:99:d3:8c:80:e1:84:d7:cc:85:a0:ba:66:37:99:
2d:6a:7a:67:61:f7:b2:75:62:15:03:9c:11:f1:55:
58:42:07:39:88:02:5f:78:e6:65:80:61:af:7e:75:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:CF:51:29:E3:25:65:59:16:D8:47:4F:89:27:62:F6:7D:1D:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCD50C24F47811EF86274852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.40.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c7:5a:ad:78:0a:ec:86:37:b9:b2:df:85:53:82:8d:69:d1:
a9:28:c4:71:b7:ff:ec:c7:14:6d:f9:93:55:82:ac:13:f8:46:
2c:c6:e7:d5:04:18:fb:18:84:ca:98:37:91:26:a0:f4:67:b8:
8a:ae:54:db:2b:cb:13:e3:87:08:62:b2:91:78:01:d4:71:0c:
39:f0:0f:85:f2:04:80:7f:f2:69:c4:cc:94:9e:2d:ef:41:b4:
19:9f:ce:d2:c4:7a:df:db:a0:f9:a4:6c:31:a1:6f:bb:6a:e2:
df:fb:f6:16:c3:8b:e0:02:12:16:29:6f:f7:49:0e:94:c2:41:
ee:5d:94:ce:70:6f:24:9f:2e:8d:d3:38:a1:3c:1a:a3:87:ce:
90:72:e1:ac:b1:c4:27:4a:29:62:e3:4c:a4:9a:9b:56:58:9f:
5d:74:22:42:73:19:52:b4:39:bd:8c:ef:22:3a:42:69:8e:45:
c1:1e:4d:e7:10:14:e3:01:61:56:3f:e6:5f:e5:f4:93:73:5f:
a7:47:04:05:51:ae:cb:5f:58:6f:6f:a4:b0:64:16:d0:60:d1:
27:06:7b:83:b8:64:c2:48:08:c9:e4:8e:05:f0:83:92:89:b6:
c1:ff:38:d5:de:db:83:26:63:73:ba:5b:24:c7:fb:c7:fa:54:
df:3a:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:05:00 2025 by rpki-client