Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93BA42C53C511EEBE2CBF564AD9E6FC.roa
File: F93BA42C53C511EEBE2CBF564AD9E6FC.roa (raw, json)
Hash identifier: dYY5G5nQiiL61YbmlzUSKbli214Q4/5Dk1UEKKeZh7k=
Subject key identifier: E8:CD:95:D3:F7:46:C8:86:CB:07:89:93:FA:5C:53:F1:B8:08:18:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 39AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93BA42C53C511EEBE2CBF564AD9E6FC.roa
Signing time: Fri 15 Sep 2023 12:47:05 +0000
ROA not before: Fri 15 Sep 2023 12:47:02 +0000
ROA not after: Sat 28 Oct 2023 12:47:02 +0000
asID: 9009
IP address blocks: 45.195.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14766 (0x39ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 12:47:02 2023 GMT
Not After : Oct 28 12:47:02 2023 GMT
Subject: CN=65045249-5dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:86:09:fc:8d:10:c2:50:4e:61:39:ea:ee:
86:ac:04:d3:66:0f:33:a8:c3:a1:09:a2:99:e7:9b:
12:5f:e9:63:21:ca:45:fe:4f:b1:a5:5b:12:bc:c6:
2a:43:92:42:45:b7:db:c2:e4:50:5e:5d:1a:bc:de:
1d:c1:34:6e:f1:a1:b0:33:f3:62:82:5f:c5:17:1d:
00:f7:0c:3d:d7:1d:9f:2b:dc:19:da:bc:8e:d2:b0:
0c:d4:ad:5e:44:df:9b:3d:c0:75:f3:42:3b:4a:28:
6a:36:08:a2:87:cb:85:56:6f:1e:cb:62:0b:1a:97:
d3:da:b2:ce:41:6b:f6:fa:5d:52:c6:aa:32:7b:f0:
59:b8:15:6d:3d:85:77:c9:54:6d:4e:c7:af:89:af:
35:7e:7a:8e:84:73:23:46:9e:1a:3d:6f:88:2e:21:
6a:1b:6e:cc:c6:f0:33:ce:f0:fc:30:ed:5a:93:98:
87:1b:bc:cc:fa:b0:42:53:3c:47:c7:4e:a5:31:1f:
1d:eb:1c:07:a4:cc:f6:a5:85:1c:95:ef:0d:5c:73:
74:2d:52:89:3c:90:ff:e5:cf:a0:ab:be:52:00:ce:
23:59:fb:87:59:8b:cf:e1:d4:5b:97:f6:93:3e:bb:
4e:9d:c6:7e:33:de:48:b8:3f:e7:ca:28:20:9d:3a:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:95:D3:F7:46:C8:86:CB:07:89:93:FA:5C:53:F1:B8:08:18:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93BA42C53C511EEBE2CBF564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:be:bc:2a:0d:8c:b8:d7:93:96:bf:3b:55:40:0a:48:f2:e4:
9b:01:6c:22:90:ce:8e:93:6d:37:21:cf:66:05:d6:39:50:b6:
e0:e4:4f:3d:a8:4b:61:f8:7a:b1:b0:17:90:a4:79:c0:60:21:
66:51:95:5e:55:e2:d6:b7:72:83:27:0e:31:1b:e9:99:cf:59:
8a:f8:c5:c3:d4:1b:9b:e9:a0:b8:18:32:c9:05:a5:27:a8:ba:
3a:aa:d1:24:89:79:76:f1:33:08:1a:2f:92:d9:4e:4c:17:c8:
ec:bf:a8:f2:70:c6:e6:31:a0:b7:eb:5b:e9:5a:b7:bd:ef:9a:
2a:08:ae:bb:d2:92:c3:f6:f9:35:13:f4:89:67:1c:14:5c:eb:
42:bf:43:e0:86:e8:75:33:fd:b8:de:0c:ff:0e:0d:e9:44:f6:
16:49:8c:8b:87:72:e5:a3:13:ac:24:94:2d:90:27:2a:1b:ae:
8e:eb:c0:4d:1b:8a:bc:23:dc:f3:99:e9:e9:e4:f1:ba:d9:57:
17:be:60:bd:3b:4a:63:2d:9b:ad:a9:ca:c0:9c:e1:73:c9:62:
09:db:46:ee:db:2a:1b:f8:46:3f:e5:3a:ec:88:79:d9:10:3d:
11:31:e3:7c:74:c0:42:3e:c3:c6:da:97:16:c3:8e:a4:ee:b2:
e7:15:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:24:19 2025 by rpki-client