Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FA6FBECBEC11EF9EFBDD59762E951A.roa
File: F0FA6FBECBEC11EF9EFBDD59762E951A.roa (raw, json)
Hash identifier: AQUUpG7Oadztv1UXvP1O3sc31tGVmxFujv09AwyGpnM=
Subject key identifier: 48:88:5E:A0:DA:19:BC:EF:C5:A7:52:68:C2:DF:57:DD:AB:96:8A:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F832
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FA6FBECBEC11EF9EFBDD59762E951A.roa
Signing time: Mon 06 Jan 2025 05:13:19 +0000
ROA not before: Mon 06 Jan 2025 05:13:15 +0000
ROA not after: Thu 16 Jan 2025 05:13:15 +0000
asID: 39600
IP address blocks: 45.195.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63538 (0xf832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:13:15 2025 GMT
Not After : Jan 16 05:13:15 2025 GMT
Subject: CN=677b666f-7b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:eb:2f:8c:fc:eb:81:c9:6c:02:32:00:cf:
d4:2d:d8:3b:4b:af:13:16:f2:09:c0:ab:a7:8a:dc:
60:47:07:38:43:f7:4a:f4:02:d1:e9:99:36:61:4c:
96:8b:a9:a0:32:9a:43:a9:14:c1:6b:6f:51:9a:77:
2f:89:6b:4c:9c:bc:c4:a7:d2:f2:01:7e:b4:c5:cc:
c6:0b:5e:c1:9d:66:6d:d1:d8:70:5b:70:b0:fe:1f:
3c:ff:ae:35:98:48:ac:98:7a:05:5c:d9:1d:06:f8:
f1:62:2f:b2:2c:3f:4f:9b:00:30:58:00:37:37:fc:
5d:0c:80:5a:b3:12:22:8d:8d:b0:94:49:84:40:e2:
48:ca:8d:43:eb:6c:e8:e0:01:77:11:cf:ba:48:ad:
b9:0c:b8:bb:b9:7d:59:8c:60:66:9e:dc:47:3b:51:
bf:2a:95:a1:ed:a8:74:a1:bd:53:49:d1:05:dd:a4:
29:bc:18:c0:89:b4:ea:bf:01:b4:3c:22:24:ef:fb:
22:9b:f6:17:9c:4f:2a:50:09:33:d0:cb:12:0f:ab:
22:48:35:07:82:1c:4e:74:2a:a3:f7:b9:24:c5:f0:
4f:66:e0:0e:56:5d:01:04:27:75:2b:99:bd:6b:99:
a8:ae:61:da:36:26:a0:f7:51:c3:b7:fc:a7:c9:43:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:5E:A0:DA:19:BC:EF:C5:A7:52:68:C2:DF:57:DD:AB:96:8A:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0FA6FBECBEC11EF9EFBDD59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:f3:bb:fe:79:4b:3c:f0:e3:30:c7:ee:2b:9e:92:48:c3:36:
02:6a:d0:01:98:94:39:62:53:5e:aa:11:b0:25:9f:d3:76:c0:
92:df:24:7d:7a:5b:3a:eb:28:de:e9:fb:e8:d6:30:2e:f4:d0:
19:d0:f6:d8:b0:c0:f5:d4:72:52:1f:36:31:79:b7:12:22:c1:
95:1a:0e:3f:4e:fb:96:d7:69:ca:19:9f:c3:9c:72:9d:cb:47:
b4:b9:66:d1:e8:1d:0d:bf:95:66:88:75:86:44:02:78:d2:21:
43:dc:05:7d:7a:2c:40:b7:1f:e4:85:a7:1c:ba:f4:a6:47:93:
75:d7:91:8c:ff:bf:92:53:1c:29:ec:07:07:df:e3:1f:62:96:
60:99:a7:07:f1:d6:04:4e:f7:a2:6d:78:59:27:8c:f4:2a:42:
b5:7c:42:96:c9:41:b1:c9:52:89:69:2e:1d:54:1c:0a:c5:d4:
b1:be:f1:d7:de:db:35:c7:95:5c:1d:26:dd:a9:af:87:b9:73:
1c:f8:ca:39:f8:3d:82:4e:15:ff:86:33:8f:2c:c8:97:34:3f:
e9:be:e6:81:9a:bf:fc:cc:3c:ca:fb:f9:24:f3:48:dc:61:e2:
37:a8:48:ad:c9:a9:75:f4:97:7d:25:f4:54:05:af:dc:a4:52:
ac:02:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:23 2025 by rpki-client