Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2EBC4A6CF3611EF96F25A53762E951A.roa
File: F2EBC4A6CF3611EF96F25A53762E951A.roa (raw, json)
Hash identifier: notv7TtTjSOTC0JM45dWfCU6u6HjnD3RD49pWjJWBCo=
Subject key identifier: 73:5F:1F:43:D8:23:26:EF:ED:C3:6A:C1:0A:2D:AA:3C:D6:69:4F:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2EBC4A6CF3611EF96F25A53762E951A.roa
Signing time: Fri 10 Jan 2025 09:40:38 +0000
ROA not before: Fri 10 Jan 2025 09:40:35 +0000
ROA not after: Sat 01 Feb 2025 09:40:35 +0000
asID: 39600
IP address blocks: 45.194.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66867 (0x10533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 09:40:35 2025 GMT
Not After : Feb 1 09:40:35 2025 GMT
Subject: CN=6780eb16-8748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:05:62:56:9b:12:4c:c7:68:68:a2:6e:ab:
d7:2b:c3:d8:0d:82:ea:58:7a:36:23:31:5d:f0:51:
78:21:4f:a4:4a:35:27:50:f1:bd:a9:cb:7c:87:37:
bd:e8:37:84:59:69:5e:91:ef:cc:ab:6e:99:1c:dd:
2c:ea:f3:19:ce:42:0a:39:5b:bb:c1:6c:ea:55:3b:
8a:8d:ea:e6:8e:b9:c0:2b:fd:e3:08:97:3d:e9:b1:
fe:f7:c6:f4:63:7d:03:2d:8c:f4:66:f7:48:1c:f7:
ab:0e:d2:ac:c5:4f:4d:d8:1e:dc:ca:30:73:ef:d4:
0d:0d:6b:1c:3f:56:ed:94:d6:f1:eb:6e:97:3a:e4:
f4:df:ae:10:1a:05:f1:98:96:eb:5b:c5:da:f9:e7:
17:7d:34:74:e8:9d:c3:c3:5b:c9:62:49:cf:93:8f:
ad:56:83:3c:9e:47:63:ea:51:f9:8a:24:5e:a3:84:
da:4b:75:68:ad:ac:07:d8:af:7f:84:fe:ae:c8:1a:
98:03:33:73:a8:2e:58:8d:16:ad:bc:37:18:3c:66:
20:b4:b2:1a:01:90:e9:d3:52:ce:fd:7d:8f:52:8b:
98:e3:81:c4:f3:e1:f1:fc:6c:86:3b:13:4b:46:c4:
d3:cd:62:24:ba:3b:14:c2:49:c8:20:50:6f:8a:6d:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:1F:43:D8:23:26:EF:ED:C3:6A:C1:0A:2D:AA:3C:D6:69:4F:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2EBC4A6CF3611EF96F25A53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:02:7d:8b:11:10:89:ac:87:2f:6e:a9:73:61:6b:e5:9a:89:
46:44:22:3f:a5:9f:b6:be:82:62:b0:ca:e6:47:00:e1:4f:46:
22:c8:b0:48:43:39:d3:2c:d7:84:a0:bb:1d:41:8b:40:c1:c2:
0c:81:74:42:04:8a:a4:99:4d:33:47:c9:73:1b:c7:6a:e8:9f:
e4:07:eb:4a:6f:53:67:bd:1e:52:93:ac:8e:e7:ab:86:36:d1:
4c:ca:68:f9:1e:e1:f1:81:e3:7e:86:5a:d0:c1:77:6a:c6:b6:
0a:b4:3d:d6:77:f1:28:5c:af:67:cd:19:e4:ad:cb:9b:f8:48:
3f:5d:a4:f8:ed:df:df:e3:af:e1:9d:aa:4a:f0:78:26:1e:c2:
5f:e1:61:55:f6:5f:3e:2d:91:9b:a0:03:d7:92:28:1d:71:2e:
ce:72:1a:4a:ed:e8:de:0f:dd:cf:52:44:08:25:b5:49:8f:4c:
2e:fb:5d:2b:1d:25:f6:aa:da:ee:e3:20:1d:a2:ea:2b:a7:7d:
bb:da:60:e5:7e:48:a4:ea:97:d6:43:2a:10:bb:b5:1d:97:c5:
c5:b5:97:4f:af:c2:37:83:e5:d3:33:0f:7c:03:a5:18:a7:13:
91:4d:ad:bd:98:39:3c:e1:cc:38:92:47:8b:a2:b2:72:62:e8:
3d:0a:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:13 2025 by rpki-client