Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E926FE54B92911EF81B98597762E951A.roa
File: E926FE54B92911EF81B98597762E951A.roa (raw, json)
Hash identifier: dEchwDI1uAzTjkoLWfm0J1jPuPg6Re9Gg2F9GF4/XO8=
Subject key identifier: 35:5A:33:07:7F:7C:8A:A4:68:21:3D:39:EA:8C:C9:21:80:FA:88:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E337
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E926FE54B92911EF81B98597762E951A.roa
Signing time: Fri 13 Dec 2024 08:11:53 +0000
ROA not before: Fri 13 Dec 2024 08:11:49 +0000
ROA not after: Sat 25 Jan 2025 08:11:49 +0000
asID: 202656
IP address blocks: 45.199.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58167 (0xe337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:11:49 2024 GMT
Not After : Jan 25 08:11:49 2025 GMT
Subject: CN=675bec49-25b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:06:89:ed:fe:d1:6f:42:c6:b0:69:0b:68:
8d:9f:3f:84:65:aa:20:53:2b:65:35:d2:f4:6b:66:
83:43:dd:88:a4:61:22:d6:16:62:1e:47:c8:41:15:
09:0f:fd:3e:c7:f4:b4:00:b5:b7:28:98:2b:d5:c9:
d5:12:20:7e:dc:52:c9:66:3b:c5:94:88:5c:2b:7f:
fd:79:81:e5:56:e5:9b:9e:89:a2:a5:a8:66:d1:a7:
cf:84:ff:7a:50:f0:64:19:3b:f6:83:ee:e0:23:76:
e1:da:58:03:3d:d0:aa:19:d8:c0:05:78:b0:f6:b8:
1e:20:f4:ee:35:94:53:75:fe:b2:f3:99:89:bc:30:
5e:d9:a2:8e:7d:1c:7b:0e:9b:4b:4d:9e:b5:f1:53:
65:fc:61:61:79:b4:6e:44:da:d9:ee:74:52:83:ca:
21:12:64:74:0b:9a:b0:ce:35:60:7c:fe:c6:0a:11:
8f:9d:a7:58:f7:cc:c8:2f:ba:ae:e0:f6:f9:fd:5a:
16:0e:99:b9:b9:00:66:a6:5f:7e:d6:06:be:df:6a:
4b:6a:56:3f:dc:dc:a2:7f:ba:52:34:2b:40:fc:07:
72:21:22:18:cd:3e:dd:4d:16:41:41:ff:5a:2c:fc:
0a:d7:71:41:e0:84:5a:53:8d:6d:01:52:6d:de:b9:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5A:33:07:7F:7C:8A:A4:68:21:3D:39:EA:8C:C9:21:80:FA:88:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E926FE54B92911EF81B98597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.192.0/20
Signature Algorithm: sha256WithRSAEncryption
88:77:4a:15:ae:9c:6a:97:33:72:1a:a2:4a:24:96:08:cc:57:
74:2b:5d:d3:71:02:c7:f3:cc:c5:e3:27:83:36:8a:f6:44:2b:
5e:72:03:5b:fb:8d:66:ec:78:f0:6b:e5:3d:92:ad:34:99:56:
ee:06:12:31:26:c0:81:89:3b:de:75:eb:1b:52:e5:b5:a3:fd:
06:93:50:24:a6:a9:e0:8f:26:d6:85:54:08:74:5f:f3:00:1c:
5b:66:2c:f2:08:78:f9:68:f4:fd:68:d8:d2:c6:9a:c0:fe:db:
7b:07:65:fb:05:3f:b7:5a:46:44:ca:0d:7a:b8:74:ba:ab:6c:
78:c3:57:7d:5a:3c:90:5d:30:79:40:be:9b:11:7e:77:68:cb:
24:5a:8b:c9:97:4a:f1:6c:ec:ca:4f:ca:1c:80:75:38:5e:50:
a3:42:54:75:86:89:93:80:bc:d9:78:41:ea:9a:72:69:d5:1d:
2f:a9:55:2a:87:f0:cd:1e:a4:2c:7d:77:b3:12:a8:db:ef:1c:
e1:bf:ca:99:c0:1c:42:f8:39:71:1b:ae:be:98:f2:83:c7:25:
9a:7b:b1:47:6c:7c:26:8c:b1:0b:53:b8:55:44:e0:97:a8:00:
41:73:96:de:ad:ef:4d:c4:f8:33:25:33:83:ea:50:83:1e:c4:
c9:6f:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:13 2025 by rpki-client