Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423EE18F5B811EF98F34673762E951A.roa
File: F423EE18F5B811EF98F34673762E951A.roa (raw, json)
Hash identifier: eBefmziDwEQdn+cme8W3jPjYgNb7tQWPDns+Kky7/jw=
Subject key identifier: 3E:2F:C4:45:2F:02:2C:9A:84:CB:C7:16:C6:72:0B:63:0E:65:8B:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013CFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423EE18F5B811EF98F34673762E951A.roa
Signing time: Fri 28 Feb 2025 09:46:59 +0000
ROA not before: Fri 28 Feb 2025 09:46:55 +0000
ROA not after: Mon 31 Mar 2025 09:46:55 +0000
asID: 54600
IP address blocks: 45.196.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81147 (0x13cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 09:46:55 2025 GMT
Not After : Mar 31 09:46:55 2025 GMT
Subject: CN=67c18613-bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:1c:47:64:c2:f3:ff:26:c6:6b:1b:aa:8f:
0b:8e:38:1c:94:d9:25:17:b9:f8:95:33:84:02:30:
33:9a:b0:ef:33:f0:d4:26:b6:26:e0:f2:3a:12:a7:
ad:f8:fd:f7:60:50:4e:53:82:33:da:97:36:12:83:
11:ae:cc:73:77:35:48:68:4e:a8:d5:f9:ca:a8:2b:
4e:35:be:16:e2:06:40:68:52:36:2b:de:b1:1e:51:
59:45:b6:86:57:30:59:21:91:bf:9b:1f:2a:70:80:
7c:84:6c:46:3e:43:af:02:06:4a:53:a2:06:c5:45:
25:02:ac:db:2d:44:ab:73:e6:ec:bb:da:9f:8b:cb:
35:ef:21:cc:49:cb:52:74:d4:04:55:74:34:25:8a:
fa:f6:de:ff:33:ec:01:2a:b6:d4:00:a5:b3:59:0f:
07:5c:cd:a1:f6:c4:bc:92:39:6f:00:c2:e4:84:8e:
af:10:ec:42:c4:77:ed:60:6b:da:d5:c1:08:10:b3:
79:cc:72:35:09:df:ff:00:67:1e:3c:74:fd:4f:14:
0c:db:db:42:81:38:8e:b8:e9:13:97:5a:c1:88:e6:
2b:d6:7e:3d:4c:e5:e0:66:8b:61:a0:84:6d:55:1e:
45:f7:03:d2:06:dd:14:d2:9a:ff:cf:d4:30:f1:0b:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:C4:45:2F:02:2C:9A:84:CB:C7:16:C6:72:0B:63:0E:65:8B:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423EE18F5B811EF98F34673762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.160.0/19
Signature Algorithm: sha256WithRSAEncryption
31:b8:2d:1c:10:04:20:06:3e:b5:96:af:7f:4d:d7:aa:06:d7:
10:05:4b:f6:f0:7b:35:9e:ae:53:5a:0f:00:59:66:df:2e:9e:
79:56:aa:54:b7:80:73:7f:f8:c7:77:ad:ea:e1:a1:a2:e8:86:
9b:3a:1d:73:0e:e1:76:70:c3:64:65:ca:8e:2c:7f:a3:e8:14:
9c:04:96:cb:fa:cd:22:82:65:54:10:20:46:92:66:aa:4e:e3:
bc:31:78:4b:b1:dc:4c:9d:45:21:70:3f:53:14:67:a1:81:ce:
d0:33:a1:dd:22:e8:cb:39:b2:c1:85:05:63:59:36:43:47:21:
c9:52:5a:c3:08:7b:5f:d8:e3:25:f7:e2:b1:42:3e:66:2f:72:
08:b6:9c:f8:43:12:59:6a:9c:79:b3:42:7c:c9:c1:49:aa:76:
75:50:58:e8:ae:39:5f:ed:42:2e:53:c1:15:ad:3f:60:9d:f3:
df:b1:25:f8:9f:72:35:9a:1d:42:eb:96:16:7d:fd:1c:17:b3:
96:b8:e6:da:c4:f2:08:85:53:8b:06:af:30:e2:79:55:6f:37:
e5:b7:a3:f6:a5:b8:f0:dd:77:21:1b:06:75:9c:cb:59:0f:f7:
09:8c:13:07:75:d8:83:69:f3:63:dc:67:0e:00:05:4f:98:05:
ef:0d:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:56:36 2025 by rpki-client