Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6FED74B85411EFAD6B0A5C762E951A.roa
File: FD6FED74B85411EFAD6B0A5C762E951A.roa (raw, json)
Hash identifier: RirazQQewJL8zv94zDdpsC1/g+yMX8O8rnaQoFVPG18=
Subject key identifier: 50:47:FB:3B:7C:36:0C:84:F3:F0:B8:E9:C8:BA:94:1F:7C:D5:E6:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6FED74B85411EFAD6B0A5C762E951A.roa
Signing time: Thu 12 Dec 2024 06:47:44 +0000
ROA not before: Thu 12 Dec 2024 06:47:41 +0000
ROA not after: Fri 31 Jan 2025 06:47:41 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58020 (0xe2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 12 06:47:41 2024 GMT
Not After : Jan 31 06:47:41 2025 GMT
Subject: CN=675a8710-13d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:41:ac:7f:d7:a4:1f:56:e9:58:ec:3b:e5:
75:1c:5e:99:d6:6f:5d:b1:60:1f:d9:38:0a:54:c2:
4e:78:07:fa:4d:e1:77:47:ff:9e:b8:aa:90:9c:ed:
7b:e9:7d:c3:23:7c:9c:c3:6d:c4:4f:9a:f0:0b:66:
22:77:2b:00:c2:cc:23:de:86:f5:9e:8f:64:18:57:
83:5b:1e:69:65:f4:23:21:e9:e1:1f:3d:88:05:91:
59:2a:a9:ec:6f:c6:a8:e6:7d:17:0b:cc:00:ea:58:
3c:f5:4c:df:f6:70:92:52:a0:b4:5b:6b:a5:92:f8:
e3:11:50:86:e8:58:5c:1e:76:4a:2d:93:d2:47:ff:
90:27:2b:8b:6b:28:90:53:d6:d9:55:ea:f2:19:35:
39:f6:ea:b1:b5:4a:f1:b0:66:5f:b8:01:73:19:0e:
be:0b:23:de:d5:20:4f:2d:ef:09:1a:73:0d:b7:76:
6e:f9:fc:3d:b3:53:a0:f0:89:16:23:33:f5:b3:b1:
78:2e:fb:71:35:2f:d5:cd:a1:94:94:74:70:1e:7f:
2a:41:d0:61:49:e5:90:8c:42:da:8c:25:a2:14:23:
ef:70:df:64:d8:be:fb:5d:2f:ef:e9:05:b1:91:4f:
25:4a:7d:36:92:7b:f0:09:05:4d:8e:97:89:b5:74:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:FB:3B:7C:36:0C:84:F3:F0:B8:E9:C8:BA:94:1F:7C:D5:E6:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6FED74B85411EFAD6B0A5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d1:38:ae:d9:9a:53:eb:d8:39:dc:ca:0f:10:a6:1e:da:ff:
72:3a:e7:3e:cc:0c:e8:b6:a4:cf:f4:b0:fa:e4:4e:c4:7d:1a:
55:48:59:eb:b8:e3:36:14:7d:f2:e8:ce:34:a0:44:bd:1e:7e:
13:0b:be:57:af:6d:c4:07:e1:08:ad:bd:0c:1a:e9:dc:6b:40:
82:29:45:57:29:5f:1e:21:e9:bd:3d:90:ed:d7:58:d1:fd:e3:
ef:bc:e2:eb:f2:69:27:a9:7f:33:8c:68:6a:90:e9:43:55:fc:
59:92:ca:85:cb:5e:06:78:ac:bc:97:2a:bf:67:a0:87:b8:73:
9a:1d:ea:84:d0:95:d5:af:53:6b:3f:41:57:de:a8:51:36:69:
fb:91:2a:ab:fb:e5:e3:ac:32:c2:70:f2:62:d6:16:41:c0:90:
ff:b4:85:2e:6b:c8:22:fa:92:95:47:90:ae:7e:ac:20:09:fb:
72:2c:38:4c:e0:bb:6e:d4:60:42:9d:69:33:a5:d1:b0:e8:75:
2f:0c:7c:b1:72:60:f0:8b:56:59:d2:04:49:47:70:f5:01:dc:
44:11:32:44:ed:31:1d:01:b5:35:d6:89:12:7f:7b:fb:58:7c:
e9:e0:14:34:ed:ab:29:b8:35:ee:6d:cb:d2:a7:c6:2f:c1:92:
b2:84:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:21 2025 by rpki-client