Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B772F4CE9111EFB96886B4762E951A.roa
File: E4B772F4CE9111EFB96886B4762E951A.roa (raw, json)
Hash identifier: OGNcHR2tKmtsGGlGtKy5bquTmH1P7ZgMvAkx2DXYe4k=
Subject key identifier: 5D:DB:06:01:E3:B2:1E:6F:2D:9B:5A:15:03:19:D4:B7:31:B0:1C:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B772F4CE9111EFB96886B4762E951A.roa
Signing time: Thu 09 Jan 2025 13:59:07 +0000
ROA not before: Thu 09 Jan 2025 13:59:04 +0000
ROA not after: Wed 22 Jan 2025 13:59:04 +0000
asID: 39600
IP address blocks: 45.194.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66548 (0x103f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 13:59:04 2025 GMT
Not After : Jan 22 13:59:04 2025 GMT
Subject: CN=677fd62b-7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:9d:c6:ad:15:c9:b2:6d:79:66:ad:f6:c4:
bb:ac:46:7b:61:ec:cb:5b:2f:ce:cf:21:23:10:f3:
49:d2:13:0f:8f:23:2a:e1:69:3f:6c:08:fd:d3:c5:
48:84:da:78:f8:b2:61:6f:c1:d5:7b:68:0d:f4:79:
30:e1:21:de:00:6a:79:4f:14:89:2d:6e:2c:7e:75:
39:1b:2b:a5:7c:da:77:cb:e9:ce:58:b1:d3:b9:22:
bb:17:1e:5c:31:a7:61:49:e3:10:e4:84:3c:16:1d:
ab:00:06:95:d3:a3:68:08:03:d0:23:d1:b2:98:30:
d6:7c:52:8d:69:3d:ac:ff:24:60:bb:64:ef:f6:a9:
fe:8c:33:53:3f:72:fc:61:67:03:73:aa:08:cc:1b:
2a:8b:e7:65:6b:37:d5:0c:ab:ab:8d:c4:8b:e4:ff:
20:40:c0:eb:b4:b4:e4:bb:04:44:ff:d5:83:f7:bb:
80:3a:5e:ff:1d:08:21:8b:fe:40:17:69:86:18:87:
37:97:4c:d0:17:8d:c6:01:85:d4:82:54:b5:3c:d4:
9c:0a:8e:76:8c:bc:a0:7e:42:12:1f:a4:9e:a0:96:
db:c6:bc:e0:de:a9:39:9b:7f:ae:cb:67:5d:15:13:
43:4c:f8:9c:bf:4a:1e:84:2a:83:47:8e:5a:47:6c:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:06:01:E3:B2:1E:6F:2D:9B:5A:15:03:19:D4:B7:31:B0:1C:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B772F4CE9111EFB96886B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:32:6a:9a:89:df:a2:72:83:0f:ca:e7:8f:71:08:1a:e5:41:
00:ef:b8:cd:dd:1a:4d:c6:e1:c4:de:f8:75:f7:f5:bc:3e:e0:
18:44:c7:c6:76:9d:f2:b8:4a:b0:dd:aa:a3:52:4e:4d:16:e0:
70:5e:e1:3b:d5:b9:36:e1:e6:05:7d:34:cc:68:9a:15:df:c4:
6a:0e:ce:23:23:34:3e:8f:ff:94:3c:d4:21:d0:20:0a:0e:c9:
fe:e1:f3:cd:8a:cc:b9:d0:48:3f:1b:f4:26:ff:36:6f:d3:76:
20:5a:c3:14:11:28:f2:81:51:bc:e5:7a:8a:e2:d3:23:b7:9b:
c5:2d:dc:01:29:2f:4e:40:6a:0c:f1:43:3a:52:84:9f:44:03:
ce:50:f2:08:15:0e:e8:c2:9f:9a:b9:0b:74:73:44:c7:53:0b:
5a:0a:b6:18:e5:99:2b:09:00:b2:f1:c1:2f:cd:18:3b:b8:55:
9e:58:dc:71:0b:a8:a9:0c:85:99:bf:19:49:f8:46:4a:9f:ae:
81:66:6e:79:6a:e8:65:b4:2b:8b:13:55:bf:c2:f5:69:6d:51:
30:64:79:e6:e9:99:94:3d:8c:53:4e:a0:45:df:67:2d:1c:90:
d7:5f:2a:c8:c1:c1:15:96:f2:95:17:27:9b:05:32:e1:75:3b:
c9:2a:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:56 2025 by rpki-client