Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E386EDC4BC4411EFBE71799B762E951A.roa
File: E386EDC4BC4411EFBE71799B762E951A.roa (raw, json)
Hash identifier: VRk6/rQGLXrHkyGhtQL0EdKm0IodLMAVO6h1LJyaPV4=
Subject key identifier: 6B:3F:D4:E4:12:8F:52:DA:C2:1A:8A:4A:FD:CC:15:25:33:3C:12:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E45F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E386EDC4BC4411EFBE71799B762E951A.roa
Signing time: Tue 17 Dec 2024 07:02:33 +0000
ROA not before: Tue 17 Dec 2024 07:02:30 +0000
ROA not after: Mon 27 Jan 2025 07:02:30 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58463 (0xe45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 17 07:02:30 2024 GMT
Not After : Jan 27 07:02:30 2025 GMT
Subject: CN=67612209-66eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:56:50:77:eb:c8:5a:7a:7b:2c:14:5a:29:
e4:0d:76:59:ff:43:5a:26:aa:aa:d4:2d:0c:c2:87:
bc:3f:3b:7d:10:8c:d6:4d:9a:d6:36:dc:b3:c4:72:
01:fe:13:bb:a6:b1:7b:9d:c1:83:87:44:a5:0d:55:
04:f8:70:3f:2b:9a:bc:54:c5:3a:ad:d3:56:69:7e:
91:98:7a:79:43:f4:ce:f9:30:fd:f4:de:c6:05:5f:
93:c6:98:17:c8:c8:be:72:69:3c:d7:0e:14:2b:0f:
49:59:e2:57:19:70:5e:91:4a:3c:b7:cd:bd:b9:ff:
2e:a6:82:dc:ab:29:d8:cc:61:f2:6a:a6:79:ce:2d:
a2:ec:b0:11:e5:91:aa:48:3d:38:f7:13:af:3b:eb:
be:12:6a:54:b5:48:0d:b1:5a:d3:c7:24:31:b7:ef:
27:9b:50:a2:ca:70:d3:21:33:da:17:6e:7f:35:03:
66:1c:b2:a8:ec:32:fc:6e:19:5a:a2:af:47:c6:86:
4d:cf:23:77:77:22:f4:f4:15:62:8e:3f:ab:5c:57:
17:7b:55:45:06:69:45:3a:8e:03:71:df:26:c3:e3:
0f:cd:fd:31:c2:41:01:6d:04:39:0b:b0:01:11:69:
1a:72:a5:f8:fa:7c:81:b1:c7:26:ac:e1:a6:a0:b0:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:D4:E4:12:8F:52:DA:C2:1A:8A:4A:FD:CC:15:25:33:3C:12:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E386EDC4BC4411EFBE71799B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ef:33:1f:99:27:ac:1f:02:35:bd:b6:03:30:2f:a5:42:f9:
f7:8c:e5:bd:46:bf:9a:df:6f:02:89:45:33:15:f3:81:94:b0:
c5:53:c4:fb:b8:d9:3a:74:31:86:7e:80:78:5e:3a:35:78:1e:
47:bf:a7:84:da:75:b9:40:c1:9c:d8:d9:98:a2:76:31:c6:c0:
d9:c7:9f:c8:63:c5:b7:b2:3e:71:bb:5a:e8:df:db:6e:5d:97:
9e:00:f2:02:17:df:83:6c:e5:9f:60:5d:22:fc:e8:19:e3:89:
97:3c:c1:03:41:70:8e:3c:61:60:d6:ba:af:df:7a:d6:ef:28:
39:71:31:55:b3:e0:98:f7:77:d9:56:04:12:7c:58:1c:d8:d8:
7e:29:28:40:be:18:fa:cb:c5:e9:09:06:d3:a7:25:14:c1:8b:
1b:f5:80:d8:30:64:24:b3:a9:43:c6:d1:b3:4e:a3:80:44:77:
1a:c1:02:c4:c6:c2:c3:a4:51:4f:f3:f3:91:88:38:cd:e7:87:
f8:9f:8f:4d:0b:b6:25:6e:dd:17:99:5b:f2:3c:3e:23:bb:55:
86:0e:ac:e7:73:cf:f3:b7:4c:76:9f:62:6c:e4:4e:2f:e4:78:
bb:8a:d9:37:d9:7b:39:03:f7:05:79:b2:a5:82:6f:45:95:87:
10:03:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:10 2025 by rpki-client