Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7686F28F5A411EF8140CF69762E951A.roa
File: E7686F28F5A411EF8140CF69762E951A.roa (raw, json)
Hash identifier: O6O4/ijA/7ONiVw+l2AYRbAF0oeGnvrlI0AWsH71/g4=
Subject key identifier: B8:48:87:76:4B:C5:CF:E3:6B:23:35:BB:90:F8:B9:8B:3F:94:AA:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7686F28F5A411EF8140CF69762E951A.roa
Signing time: Fri 28 Feb 2025 07:23:28 +0000
ROA not before: Fri 28 Feb 2025 07:23:24 +0000
ROA not after: Sun 23 Mar 2025 07:23:24 +0000
asID: 62240
IP address blocks: 45.192.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80943 (0x13c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 07:23:24 2025 GMT
Not After : Mar 23 07:23:24 2025 GMT
Subject: CN=67c16470-d60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:85:35:ff:1f:31:92:1c:e9:02:c8:4c:fe:
3a:70:02:0d:cd:5f:2a:8b:3b:f8:ac:9c:c0:58:6d:
ce:37:21:b6:41:5e:d2:47:ce:ed:77:5d:63:3d:31:
da:eb:af:13:1c:55:34:30:61:15:4f:d6:fd:6d:ad:
10:a7:f1:54:c1:4a:56:f7:44:1b:5c:a7:68:0c:5a:
19:0d:bd:8a:cc:d8:ac:f1:ed:59:98:d4:9b:94:fb:
94:ee:e5:bc:2b:a8:97:3c:bd:6d:12:78:26:15:25:
70:27:a4:b7:c2:e8:b5:bb:af:b0:d2:26:ba:58:10:
61:08:ac:6b:ca:17:c5:fb:6b:bb:3e:db:b5:73:0a:
71:da:4a:b5:93:dd:d2:0c:ad:bb:98:af:42:22:66:
34:f0:70:d9:67:88:cd:46:cf:7d:b8:10:d6:12:d4:
4a:cc:e5:8b:31:a5:b5:57:5a:81:4f:d2:85:87:8d:
7f:bb:c9:7f:66:4b:a6:44:98:19:e9:29:97:66:03:
6d:a1:71:44:cc:52:86:71:f5:09:8e:48:30:37:94:
05:63:3b:5c:b7:e0:dc:fb:5b:a4:2a:9c:7c:0c:d3:
d8:d8:e4:32:68:1e:a5:f4:3b:82:a2:ba:9b:e4:09:
d3:73:dc:72:56:64:07:86:6e:b1:e8:10:50:4a:4e:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:87:76:4B:C5:CF:E3:6B:23:35:BB:90:F8:B9:8B:3F:94:AA:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7686F28F5A411EF8140CF69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.36.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0f:9b:8e:5b:30:b8:8a:7a:43:9d:0c:9a:50:f5:07:d7:e8:
63:a7:3f:38:08:80:ef:76:32:a3:77:41:5d:89:a1:7b:35:36:
85:6f:5a:d7:2a:7d:1c:bc:c7:05:41:86:4d:dd:10:a2:a2:73:
02:33:9d:9c:02:75:ab:d8:b6:f4:a2:45:8f:57:b3:2c:bc:d9:
7e:11:ce:5b:64:bf:5d:22:9f:c9:88:ee:5f:cc:df:d8:e2:d9:
25:5e:8c:27:ab:50:e7:50:1f:1c:1b:04:32:23:31:29:c9:19:
0b:f7:a9:43:e4:a2:a8:f2:ce:5b:55:bb:1d:38:53:a1:48:9e:
0d:4e:3c:40:72:c8:6b:01:0c:de:e3:3c:ab:26:b0:df:bc:e6:
76:6a:27:2d:26:05:4b:06:d7:de:da:b4:df:44:e6:d2:7c:82:
7b:60:79:db:5a:d5:20:7c:be:5d:5b:d5:ca:89:ed:77:91:21:
1e:09:bc:93:ff:3e:f4:1c:9e:3f:61:bf:78:34:be:f7:53:bd:
27:f2:07:30:b4:34:1d:01:52:26:41:66:36:36:36:47:68:9b:
1a:85:93:a1:38:b4:a3:f4:cd:e6:80:ba:37:e5:0a:f8:0e:31:
92:e8:46:c9:7f:bd:92:ea:ab:18:1c:03:3c:ec:a0:49:78:25:
37:73:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:06:04 2025 by rpki-client