Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E542F416C8EA11EF8034BEBA762E951A.roa
File: E542F416C8EA11EF8034BEBA762E951A.roa (raw, json)
Hash identifier: cNCJtqTxRjMjdF3Hbp0cpoDlUHikabBXbqrXnY+i92w=
Subject key identifier: 08:93:41:60:DD:EB:99:FC:89:66:04:22:52:B8:66:B8:E1:A7:1C:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F326
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E542F416C8EA11EF8034BEBA762E951A.roa
Signing time: Thu 02 Jan 2025 09:21:07 +0000
ROA not before: Thu 02 Jan 2025 09:21:03 +0000
ROA not after: Mon 20 Jan 2025 09:21:03 +0000
asID: 136970
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62246 (0xf326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 09:21:03 2025 GMT
Not After : Jan 20 09:21:03 2025 GMT
Subject: CN=67765a82-42bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:95:5a:b4:48:dd:67:2a:d0:f5:fb:c6:86:
c9:91:50:01:09:57:5f:b7:7f:a2:bb:24:44:12:47:
7b:a5:a1:70:41:ce:8c:6f:cf:7e:a5:ea:03:a2:79:
ec:d0:1f:3d:fe:53:a6:5b:94:4d:00:55:ae:45:cf:
c2:ba:b8:e2:52:35:f3:fb:c6:13:20:af:91:3d:3e:
e1:e0:c6:53:31:5d:06:6d:57:f9:06:d9:b7:18:e8:
9b:57:6f:06:4b:b7:1e:25:f8:31:77:14:da:38:a4:
86:32:e9:ee:52:72:d6:9c:48:49:fb:b0:6c:00:2e:
36:53:5b:36:84:1a:4e:49:4d:7e:97:14:c8:df:bc:
3c:77:89:95:11:ce:b8:23:dc:aa:34:73:41:0a:86:
2d:1a:d7:94:ac:e8:6c:50:df:1e:d7:9a:bc:e7:b1:
86:fa:ca:31:fd:3b:98:74:8b:fb:8e:e3:c9:ff:d5:
83:a1:80:f3:fe:6d:1e:45:c1:6f:39:d8:80:06:db:
d0:99:82:a8:dc:80:c7:9b:ef:46:0e:41:27:4a:7a:
82:62:b3:42:c7:e9:50:27:9d:88:4f:4d:74:27:95:
b9:46:52:a9:1a:a7:fb:67:0f:98:7c:c2:b4:c8:10:
9c:5e:cf:d2:70:75:17:da:8b:aa:dd:c4:03:0a:ad:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:93:41:60:DD:EB:99:FC:89:66:04:22:52:B8:66:B8:E1:A7:1C:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E542F416C8EA11EF8034BEBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:b6:ef:bd:a0:3c:60:26:c7:f5:b4:ba:18:e4:80:eb:5f:
59:b0:e4:9b:40:8a:23:ee:da:38:e0:a7:89:74:d0:a3:5a:c6:
fd:da:44:e1:59:23:81:1b:70:2f:97:b3:90:5d:82:d1:33:7c:
90:aa:79:40:76:77:86:85:05:9c:26:83:e6:10:41:2f:f6:71:
81:9c:a8:53:ed:30:a8:17:cc:11:eb:ec:33:a8:4a:74:23:c3:
83:fe:04:18:d7:d5:97:4b:9a:e7:46:08:bd:ff:9a:ff:79:46:
91:18:35:a2:9c:5f:17:33:06:04:fe:ca:ec:c6:2b:2b:ad:94:
08:a1:cd:62:32:69:de:be:f0:13:7f:b3:80:bd:0e:43:15:32:
c1:8f:04:64:53:52:26:e8:33:8c:aa:0a:cb:cd:ab:36:2b:8d:
98:4f:9b:b4:c9:1b:f1:98:0f:86:3b:a6:af:dc:4a:7b:58:21:
a8:e6:bf:ed:b3:ec:07:ac:2e:5b:d2:fa:7c:3d:ee:9d:b7:33:
a6:79:87:4e:35:0f:4a:20:98:b2:20:71:43:97:c7:27:4b:f2:
51:7d:9e:b2:7c:d2:c2:14:c0:49:b9:18:a8:0a:39:72:3c:b1:
cf:5b:c1:3b:a9:52:cf:84:35:61:39:2f:8a:e6:60:c3:61:ab:
92:a8:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:50 2025 by rpki-client