Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFA8E8BAF2DA11EFB06DEFB8762E951A.roa
File: EFA8E8BAF2DA11EFB06DEFB8762E951A.roa (raw, json)
Hash identifier: osKjBsKS+B95mn/hDo1gjSpFIfR3e9rvLMM8BaFuDlQ=
Subject key identifier: D5:AC:52:E4:E8:4A:23:55:B2:3B:CB:86:35:5F:93:58:34:7F:F1:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFA8E8BAF2DA11EFB06DEFB8762E951A.roa
Signing time: Mon 24 Feb 2025 18:12:41 +0000
ROA not before: Mon 24 Feb 2025 18:12:37 +0000
ROA not after: Fri 04 Apr 2025 18:12:37 +0000
asID: 42831
IP address blocks: 45.198.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77105 (0x12d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 18:12:37 2025 GMT
Not After : Apr 4 18:12:37 2025 GMT
Subject: CN=67bcb699-aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:bc:c1:73:f5:34:fe:a6:93:5a:7d:86:b0:
b6:91:c2:6a:5d:5a:a9:67:fc:aa:d1:97:e6:86:ea:
50:3f:5f:3d:35:19:36:95:9c:09:34:59:1e:ed:8f:
72:a0:ca:f2:a2:de:8a:51:1e:1f:78:5d:9a:be:9a:
18:44:70:b8:b4:88:50:eb:ea:d0:c5:cf:f4:35:b2:
ed:5d:9d:ec:b3:ea:ba:81:81:60:17:48:d3:a4:89:
4b:27:b3:79:e0:03:39:af:c6:2b:62:0e:e2:d4:8c:
c7:eb:59:fb:d2:12:12:89:91:f8:3d:36:41:17:f1:
97:e1:07:10:0d:b5:77:72:59:55:11:6a:df:bf:d3:
30:1b:b7:f9:5b:bd:19:5b:91:8d:b0:87:74:b0:e1:
ed:0b:9b:b4:ae:21:80:6e:e3:b6:99:62:ea:50:6a:
d6:f3:68:ec:eb:60:5e:93:1b:2c:e5:68:07:ae:23:
0c:72:fe:6a:3b:57:86:76:77:e3:91:a2:b1:34:a5:
9e:2f:9a:f7:7f:df:ed:c4:c5:7a:f3:f9:62:94:ae:
72:95:01:73:f8:7f:6f:d3:cf:52:22:6e:f5:45:35:
c5:c5:5a:0f:d7:2b:84:32:7a:b8:56:fa:52:78:a8:
5b:87:08:52:2f:cc:c9:f0:cc:6b:d5:92:b9:e3:21:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:52:E4:E8:4A:23:55:B2:3B:CB:86:35:5F:93:58:34:7F:F1:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFA8E8BAF2DA11EFB06DEFB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d8:c6:bd:8c:73:42:db:d5:c1:91:ac:0c:21:0a:b2:e7:b0:
b2:57:d3:1f:18:54:6f:88:4f:45:7f:53:b5:bb:05:4c:b9:69:
35:a8:46:36:56:76:50:12:7d:7b:95:f1:48:5e:46:e2:94:96:
81:1d:9b:e4:c0:b3:f0:ae:70:07:9f:1a:60:60:d7:0b:c9:26:
54:ca:d4:3e:c9:a2:20:66:a8:8c:73:78:05:57:a9:b4:5a:08:
e2:e9:d5:bd:20:be:98:e2:7d:4c:0e:46:e8:50:0f:71:7e:96:
3f:cf:f9:75:93:f2:04:fa:18:64:e7:29:42:45:41:3b:18:c2:
2b:f2:80:e6:d0:3b:a4:73:72:41:26:22:f1:fd:c2:05:2f:32:
9f:f4:a6:e4:93:7b:39:1f:a3:e8:1d:fc:47:88:bd:c4:09:b4:
3e:31:91:b2:9b:c9:78:f0:c5:87:cd:0e:76:21:ab:2a:a1:12:
46:04:9c:bd:2e:98:a2:e4:e2:db:01:ab:86:b7:a9:42:2d:0d:
9a:1f:d8:fb:49:c7:2c:15:21:5c:3d:41:77:35:1f:40:ba:c9:
98:db:a9:3d:90:3c:11:9b:6c:26:ba:be:62:cc:c5:cd:d8:68:
92:8e:dc:af:47:87:91:81:46:45:5d:c1:b7:5d:cd:26:6d:28:
d6:40:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client