Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E04C04B92411EF87A24879762E951A.roa
File: E1E04C04B92411EF87A24879762E951A.roa (raw, json)
Hash identifier: 87S8ASzHtl6WEzeCMUsU6ZVDVr1PZ/yDzmcH000cQvc=
Subject key identifier: C6:92:10:85:1F:6D:6E:BF:CE:F8:D9:F9:AD:C1:47:44:3A:F9:CA:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E04C04B92411EF87A24879762E951A.roa
Signing time: Fri 13 Dec 2024 07:35:53 +0000
ROA not before: Fri 13 Dec 2024 07:35:49 +0000
ROA not after: Sat 25 Jan 2025 07:35:49 +0000
asID: 202656
IP address blocks: 45.192.48.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58105 (0xe2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:35:49 2024 GMT
Not After : Jan 25 07:35:49 2025 GMT
Subject: CN=675be3d9-352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:95:af:f3:4a:21:d8:08:c8:fb:40:72:2e:
9d:2a:72:f1:18:84:24:91:f0:5c:d3:06:08:78:81:
23:78:08:ad:3d:2a:3e:44:da:95:a3:0d:17:95:aa:
2d:4d:e5:a8:25:ce:c3:b8:a4:b9:83:5a:ef:1f:a1:
fb:f8:29:bf:28:bb:bc:cc:21:05:1f:c3:8c:80:8f:
cd:81:d7:6d:de:0d:fa:5b:7f:8c:97:d6:67:f1:b6:
64:97:b6:16:64:54:b8:aa:f1:2c:c7:eb:e6:32:41:
7f:50:2d:bd:d5:d8:96:02:d1:06:75:b7:57:ff:4f:
d0:11:82:11:3a:61:99:ca:f8:25:0a:20:4a:27:5b:
9e:13:61:2c:71:0e:a6:84:ef:99:83:d4:85:05:60:
20:aa:ad:19:6d:93:87:52:a8:43:19:74:73:34:c1:
42:ab:1b:9d:76:ee:98:fa:a1:f5:93:96:5f:95:0c:
13:53:45:c8:20:43:ce:f3:c8:84:70:f7:96:20:80:
0e:dd:07:e9:2d:71:f4:6e:f5:fe:c1:d5:7c:d8:ef:
95:aa:ec:38:fe:49:5e:4d:2b:01:70:b3:d8:48:cf:
c5:22:5a:a4:61:43:28:fb:e3:27:74:72:e2:21:8c:
7d:ba:24:00:df:3d:c8:cd:f1:2d:1b:a4:79:5a:67:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:10:85:1F:6D:6E:BF:CE:F8:D9:F9:AD:C1:47:44:3A:F9:CA:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E04C04B92411EF87A24879762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:b3:23:dc:27:80:6a:96:48:6a:d5:6b:11:bc:75:56:fb:5e:
95:42:79:9c:94:00:4a:af:c2:6d:7d:f3:05:99:b7:4a:25:aa:
39:66:63:f4:93:83:c1:dd:16:1c:44:6f:8d:e0:76:04:df:e5:
6d:38:35:20:db:b8:d2:0b:2a:d1:da:2e:ce:48:e8:9d:86:5a:
bf:b6:50:21:4f:a8:af:7f:28:61:5a:d0:6a:33:d7:a5:51:df:
26:73:dc:d4:9c:ea:49:8a:f0:a7:2a:a7:1e:2b:fb:dd:35:af:
1d:07:07:92:63:04:b4:76:02:96:7d:3f:32:c9:da:5b:94:d9:
c4:b3:97:ee:e0:df:4f:91:74:3a:eb:62:d7:47:d7:e9:24:bc:
c9:24:97:46:7b:0d:77:12:b2:64:aa:af:78:dc:55:d9:2d:a8:
fc:e0:fd:ef:90:da:5e:aa:b9:32:16:7f:91:67:73:cc:06:21:
83:06:c4:53:57:79:10:7b:9f:e0:ce:60:31:15:12:a1:08:49:
3c:ba:9c:9a:4a:b3:f3:09:c3:2d:3a:79:6a:aa:c1:82:2d:b3:
f1:4c:71:32:b3:52:7e:f2:09:82:88:b0:f0:6f:dc:e3:b5:61:
e5:fc:bf:4e:43:62:a3:af:d1:48:f5:03:80:3e:e7:fa:8a:f9:
57:a0:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:47 2025 by rpki-client