Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F46BE0CC2A11EFA2A69A5C762E951A.roa
File: F9F46BE0CC2A11EFA2A69A5C762E951A.roa (raw, json)
Hash identifier: +1y9OCoZY6zqzzocf3XvF4piGXSI7n4qceuXWiUaVXk=
Subject key identifier: 2F:C5:CF:18:C0:8D:3B:83:49:5D:DD:84:05:8B:5B:C1:8D:A3:3D:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F46BE0CC2A11EFA2A69A5C762E951A.roa
Signing time: Mon 06 Jan 2025 12:37:23 +0000
ROA not before: Mon 06 Jan 2025 12:37:19 +0000
ROA not after: Sat 18 Jan 2025 12:37:19 +0000
asID: 39600
IP address blocks: 45.195.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63725 (0xf8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 12:37:19 2025 GMT
Not After : Jan 18 12:37:19 2025 GMT
Subject: CN=677bce83-2cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:e0:4e:e0:ee:88:f2:71:0d:3e:82:c8:af:
76:26:2b:6c:2a:1d:b1:ee:df:39:9a:6b:7e:8d:d6:
df:6d:7b:84:78:50:b5:5d:66:60:16:67:54:93:39:
39:8e:fa:4a:54:70:67:19:e4:28:07:97:c6:3e:71:
dd:0f:77:65:8a:d9:99:d4:34:da:5d:2c:fa:fa:10:
e8:f8:37:21:69:49:9a:c3:6b:eb:45:e7:ad:8b:e4:
b8:66:03:7b:d0:8b:d3:3d:b7:02:aa:ca:5a:86:94:
cd:3b:13:e0:9c:dc:02:7e:20:b0:ba:b8:88:91:52:
30:e1:be:93:7e:44:bf:2e:f1:dd:c3:7b:67:90:41:
5e:cc:7a:80:1c:b6:70:d7:14:03:02:50:a7:ee:cf:
33:8b:3a:ab:c5:28:fa:19:ac:d6:11:fc:6a:97:1e:
10:ab:1b:5a:1c:fe:3f:1c:79:cc:73:6f:5b:ba:6e:
5d:3c:76:cb:90:73:8d:d8:4a:b4:ba:c3:74:dd:cc:
50:a3:13:11:f3:33:8d:ec:7e:43:dd:fa:fe:82:2e:
23:9e:07:23:ce:fa:56:cf:4b:28:c6:13:ac:8a:7a:
a3:49:98:67:f2:32:35:8b:89:05:d6:96:f1:67:d1:
49:dc:94:d5:35:33:5e:6c:35:cf:d8:2c:95:3b:72:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:CF:18:C0:8D:3B:83:49:5D:DD:84:05:8B:5B:C1:8D:A3:3D:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F46BE0CC2A11EFA2A69A5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.156.0/22
Signature Algorithm: sha256WithRSAEncryption
19:80:3b:9e:b6:ad:67:65:39:2b:7b:6b:06:82:38:99:12:96:
24:c9:d3:67:41:62:39:4c:52:4e:09:2e:36:ba:58:b6:62:24:
4d:96:f7:a8:ec:d9:06:71:1a:d0:48:cd:75:64:25:70:89:b2:
9e:3b:3d:73:f8:9b:b5:df:56:c6:47:66:ec:d5:08:3e:55:6e:
77:10:e5:92:c5:93:f7:46:b1:a9:d1:4e:b9:1d:21:c3:ca:63:
15:ec:52:f9:03:d1:b2:fa:e6:4a:6e:6c:ed:53:eb:79:4b:d7:
39:6d:d7:10:1d:75:18:5f:d8:33:03:54:73:69:ca:a1:84:d9:
47:8b:fe:69:55:29:25:86:28:c9:dc:ea:27:11:3b:6e:76:5f:
f9:42:6b:91:a8:f9:02:32:17:9c:46:c4:28:0f:f6:fc:25:30:
a2:be:64:c5:f8:13:46:53:ba:d9:1c:87:85:ec:5b:32:b8:42:
d0:35:50:ba:d3:99:72:04:b3:bd:99:f1:a7:73:75:58:4b:53:
2f:2a:34:e1:ae:3e:2f:63:10:b0:9a:38:27:86:24:4c:c8:30:
22:f3:6c:4d:9d:1f:cf:f6:0a:d1:7a:a6:99:b6:08:fd:b2:7c:
ee:e7:dd:6b:37:28:30:86:dd:38:0c:4c:ee:22:c3:17:23:41:
09:6b:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:57 2025 by rpki-client