Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB213D0CF5BC11EFA541AA8B762E951A.roa
File: FB213D0CF5BC11EFA541AA8B762E951A.roa (raw, json)
Hash identifier: l31+H4HLcJpjnoGXeJwlum13y2QiZt2r6vE8WnmiUPI=
Subject key identifier: F8:7A:A6:54:47:C4:34:63:80:71:B1:EC:45:7F:4E:F0:35:81:9C:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB213D0CF5BC11EFA541AA8B762E951A.roa
Signing time: Fri 28 Feb 2025 10:15:49 +0000
ROA not before: Fri 28 Feb 2025 10:15:45 +0000
ROA not after: Sun 30 Mar 2025 10:15:45 +0000
asID: 136744
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81157 (0x13d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:15:45 2025 GMT
Not After : Mar 30 10:15:45 2025 GMT
Subject: CN=67c18cd5-0cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:ea:0a:5f:6c:dd:2f:a5:23:36:3e:82:1a:
e2:33:fc:56:e9:91:1c:12:db:92:a8:a3:49:c1:8c:
e1:c7:c8:8c:8f:a2:ed:96:72:8b:3c:bc:2b:8d:8b:
65:63:cd:55:32:79:b7:12:9e:f1:4f:cd:97:c2:5f:
66:87:bf:ef:73:c1:40:a0:d8:16:94:c5:b6:8c:ae:
ba:9a:11:df:fb:a3:ec:89:39:5e:fd:cf:fe:30:e0:
a9:28:0b:70:61:04:85:8c:0b:a8:24:c8:42:f4:61:
18:b0:9e:dc:97:79:1a:dd:84:e1:b7:60:42:da:0f:
50:8a:80:e8:80:2a:db:87:ac:0d:a8:f5:8f:1b:60:
f2:a8:e1:e2:f3:dd:e8:14:51:59:90:f6:b2:1d:b8:
4b:1b:6f:78:72:36:8d:da:14:90:91:2b:be:1b:9d:
53:67:26:fd:f2:26:59:5a:86:b0:e5:0a:13:0c:7d:
8a:e7:78:6c:95:56:ab:50:3d:85:48:b3:22:cd:1a:
1f:24:f4:4a:18:af:0f:23:ce:8b:41:f6:8d:8b:b1:
79:6f:d9:ee:03:68:1c:bc:85:50:e6:59:12:a2:2c:
24:8a:a5:f7:07:04:e1:86:cb:92:56:12:db:36:ec:
ad:24:40:0a:a1:24:22:eb:10:d4:04:a3:94:0a:12:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:A6:54:47:C4:34:63:80:71:B1:EC:45:7F:4E:F0:35:81:9C:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB213D0CF5BC11EFA541AA8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
14:65:b2:f1:32:be:d4:d1:c4:de:ad:96:f9:33:4e:a7:43:73:
6d:15:75:b4:00:5a:ee:55:e8:86:95:4e:f3:f3:15:74:b0:6a:
02:2b:63:d4:c1:92:4b:dc:2e:2a:2a:04:ff:bd:bd:94:0e:ca:
08:17:df:c7:86:27:7b:11:e1:e6:99:3d:dd:9d:3c:40:0f:49:
dc:4a:e4:fd:33:d7:fc:4e:f8:69:2d:9f:83:db:0e:4a:c0:cf:
44:cb:e0:1e:7d:14:e3:f0:73:25:63:de:41:52:eb:23:51:b7:
30:a8:f2:b3:73:a1:62:58:c6:a1:2c:eb:6b:20:d2:63:f3:54:
3e:ec:8d:11:7b:29:2c:0e:23:5e:d0:03:b7:51:2a:36:b1:e4:
06:1d:09:f7:bc:6e:b2:ef:96:db:21:72:63:22:a8:5e:88:60:
8f:8d:68:4b:ce:74:7c:0d:c4:5a:e6:fd:e6:f8:b3:a0:dc:63:
24:6b:c3:a4:07:c0:7b:ea:2d:74:a1:9e:02:0d:c0:78:af:4b:
fd:76:d2:9b:5a:bb:31:a4:7a:d5:07:1d:50:9a:7b:4e:f3:c8:
89:37:b4:a9:97:44:7a:f3:cb:e8:69:85:4d:90:41:02:2b:99:
5a:be:15:ba:75:ee:b1:58:83:e0:34:f6:2e:31:6b:bd:16:c0:
e6:d1:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:31 2025 by rpki-client