Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5BE0C12C81511EFB441C161762E951A.roa
File: E5BE0C12C81511EFB441C161762E951A.roa (raw, json)
Hash identifier: buycfzLOHJ4GboZO4tdw3/mjhceewwCuksH0Ncw7/ec=
Subject key identifier: 19:13:93:CA:77:7E:DC:32:75:A7:EB:F9:11:C6:E1:B0:28:D6:C2:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F2B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5BE0C12C81511EFB441C161762E951A.roa
Signing time: Wed 01 Jan 2025 07:56:25 +0000
ROA not before: Wed 01 Jan 2025 07:56:21 +0000
ROA not after: Tue 04 Feb 2025 07:56:21 +0000
asID: 42831
IP address blocks: 45.195.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62136 (0xf2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 1 07:56:21 2025 GMT
Not After : Feb 4 07:56:21 2025 GMT
Subject: CN=6774f528-c07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:db:a5:bc:32:97:96:00:0c:c6:75:d1:24:
cb:a7:f7:25:9e:0f:94:0c:cb:79:dc:57:9c:43:1a:
65:cc:60:8e:07:a0:90:2c:19:fd:a5:fe:a9:0e:77:
d9:f1:7e:bd:ed:73:c6:65:97:4e:ea:66:e3:d2:5f:
f1:63:8a:29:a8:d6:7d:0e:53:f1:3b:52:7a:94:4d:
ab:30:d8:75:d4:c0:b3:c4:04:d0:97:6a:70:8b:67:
0e:e4:21:7c:e3:67:fb:f9:0f:95:40:08:ca:a1:a0:
5f:c8:00:20:19:58:33:49:48:22:bf:62:e6:14:09:
88:46:62:59:c1:b4:66:89:14:28:87:9f:ec:58:b3:
89:12:f7:a8:4d:09:fa:a9:93:ae:56:7e:70:46:4b:
ab:bf:58:47:ef:82:27:24:ad:13:41:f4:46:1f:60:
b4:52:33:e7:18:6f:19:3a:5a:7b:d6:94:69:7f:f4:
ef:b5:a1:d3:63:e1:66:11:44:c7:91:4f:ea:f4:8d:
01:16:45:6a:bc:12:97:6d:3b:29:f9:fc:82:87:1b:
94:c8:9b:7c:14:4c:28:6d:82:0b:e5:d0:b5:3d:10:
59:11:d4:82:5c:b6:0a:2c:2c:c2:16:ad:c5:17:04:
5e:40:ff:04:20:bb:f0:ec:99:b6:89:20:3c:ed:4d:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:93:CA:77:7E:DC:32:75:A7:EB:F9:11:C6:E1:B0:28:D6:C2:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5BE0C12C81511EFB441C161762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.82.0/23
Signature Algorithm: sha256WithRSAEncryption
47:23:29:f4:54:c0:35:f3:17:24:58:c3:c5:49:0a:52:76:e3:
ad:68:0d:19:49:16:5c:e5:18:ff:9d:4a:5b:a2:d5:77:de:e3:
79:ce:98:f7:67:ad:07:56:e0:00:ed:2c:7c:3c:59:94:4f:8e:
83:26:45:af:05:7f:5e:ef:85:c9:40:07:14:ff:5d:a0:c7:0c:
04:e5:e9:66:a3:73:8a:a9:69:96:24:46:b8:43:bd:45:a3:82:
34:50:b2:b0:73:2d:e8:f7:c9:45:52:d3:98:8b:3c:eb:1a:17:
9c:94:65:49:80:a3:21:50:27:fa:d5:38:ff:a8:f1:22:ec:70:
de:ec:2b:5f:f4:f9:da:2d:06:47:e4:9f:f6:e7:e0:23:e7:69:
84:94:26:cd:bd:54:57:c9:fe:f4:7d:b2:c4:7d:22:0a:67:1a:
91:89:be:49:6d:1a:7b:2b:42:30:9b:ad:c4:91:9d:53:74:84:
58:5b:7f:ac:6f:ba:9b:75:07:bb:1e:2f:f2:69:e9:35:1b:9f:
8b:67:e8:57:93:a9:a0:06:7a:89:57:ae:a1:78:69:0b:fb:01:
51:45:16:3d:b2:28:34:3b:90:85:f4:59:9f:c9:64:5d:53:01:
94:d1:05:66:a0:2f:be:d4:60:74:50:ba:8c:a3:46:67:c1:ec:
02:8c:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:24 2025 by rpki-client