Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E328C174F99611EF813642BE762E951A.roa
File: E328C174F99611EF813642BE762E951A.roa (raw, json)
Hash identifier: 5CIUM/L1Jdtjslz3OuwzqZ7AUohzp0GVUMaIx/m/Gew=
Subject key identifier: 60:07:56:B9:E9:A8:FF:D2:2F:90:2D:23:3D:35:E6:D7:DB:88:D7:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014332
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E328C174F99611EF813642BE762E951A.roa
Signing time: Wed 05 Mar 2025 07:53:12 +0000
ROA not before: Wed 05 Mar 2025 07:53:09 +0000
ROA not after: Thu 03 Apr 2025 07:53:09 +0000
asID: 13335
IP address blocks: 45.192.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82738 (0x14332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 5 07:53:09 2025 GMT
Not After : Apr 3 07:53:09 2025 GMT
Subject: CN=67c802e8-6bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:7e:91:02:a9:a7:d6:d3:2a:55:3a:a3:d0:
da:79:49:26:8d:c8:13:03:68:a1:1b:1a:e5:43:db:
27:cc:0f:c7:7a:a7:46:99:f2:72:b8:5c:0a:a8:db:
2e:82:97:d6:5e:62:2d:bb:38:cb:7e:03:86:db:c4:
4e:1f:a5:21:64:41:68:0a:22:1c:4b:e8:c0:3c:fc:
a1:44:ed:b0:36:7c:b7:2b:da:c3:8a:02:57:f9:d0:
98:2c:46:0a:30:c8:78:5b:8b:0f:2b:37:5b:ab:eb:
93:95:51:20:c8:58:ab:00:77:f6:10:74:f9:a5:71:
73:0d:49:16:1b:b1:60:25:a6:06:c4:b0:54:dd:58:
c0:74:91:48:29:23:b7:2d:17:47:36:a0:b4:8e:c9:
05:03:f7:a0:9e:39:b0:8f:17:8f:b4:db:fc:7c:cc:
64:e5:db:69:3f:48:fc:74:a8:f2:8d:04:29:fb:36:
ac:dc:bc:06:0e:72:d8:65:07:1e:b0:c7:f7:b9:65:
e8:58:7a:d4:9e:fe:9e:89:27:bd:b3:9a:ef:04:04:
7b:2d:70:d2:a9:d4:f8:4c:f4:90:52:74:b0:5b:1b:
f8:fd:4f:17:b2:8d:8e:3e:e5:f5:c9:51:f3:1d:c1:
ed:8d:81:3d:af:cd:ae:84:b4:bb:d7:16:ad:c4:94:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:56:B9:E9:A8:FF:D2:2F:90:2D:23:3D:35:E6:D7:DB:88:D7:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E328C174F99611EF813642BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:69:c3:7c:38:1c:a6:d2:6e:05:5c:fa:27:e7:6a:3a:2a:3c:
02:4e:9a:dd:96:e5:01:14:0e:04:bd:5c:f7:91:1e:e0:a0:d2:
3d:7b:55:b5:64:26:5d:f0:a6:3a:10:dc:03:fb:09:11:7c:70:
20:a2:05:73:67:10:95:88:ba:81:41:f7:d8:57:51:6b:68:cf:
f7:82:64:96:e4:7e:94:b9:35:c9:3d:b5:29:c1:06:b5:40:41:
0f:1a:5d:72:6b:98:b5:9e:13:92:0f:d5:d8:0e:ca:9c:3d:17:
cf:58:34:85:48:2f:c3:05:51:b9:5f:7b:c3:59:28:9f:32:39:
9c:eb:64:f4:78:72:5e:0f:f4:f8:e6:59:15:90:3d:17:b1:0c:
bf:f2:a1:07:5a:c5:e2:e7:42:4a:79:3b:f4:bd:48:00:9e:18:
e1:82:ab:1a:e7:e1:83:df:4b:ae:71:90:fb:69:0d:84:fb:cd:
64:8f:d7:d9:f8:0f:81:74:0b:d3:0c:9a:79:a7:26:21:0e:73:
4a:16:e2:6f:53:b4:3d:d2:c3:66:36:f4:89:f0:63:46:70:73:
f6:e8:81:17:d3:20:15:f2:db:c7:b5:70:ef:24:f9:60:35:85:
05:66:a5:d5:23:41:da:21:82:e2:2a:f3:f5:b8:a2:d4:3a:d2:
e4:a7:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:14:44 2025 by rpki-client