Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11E7B522A5911F0BB09DDD0DAE4EC9C.roa
File: C11E7B522A5911F0BB09DDD0DAE4EC9C.roa (raw, json)
Hash identifier: rbpuekQM+hwrDJoidC9Gj+1lpSTngEAOg69xwHuaOAc=
Subject key identifier: 09:78:C7:44:CC:09:82:6A:B6:F8:6C:CC:57:69:D8:81:E5:D6:D4:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01524F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11E7B522A5911F0BB09DDD0DAE4EC9C.roa
Signing time: Tue 06 May 2025 09:09:03 +0000
ROA not before: Tue 06 May 2025 09:08:59 +0000
ROA not after: Tue 13 May 2025 09:08:59 +0000
asID: 137263
IP address blocks: 45.195.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86607 (0x1524f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 09:08:59 2025 GMT
Not After : May 13 09:08:59 2025 GMT
Subject: CN=6819d1af-5294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:a8:5b:79:8d:14:1a:be:55:99:66:9f:a8:
2c:22:5a:c4:12:22:a6:23:6a:07:53:9c:22:06:17:
c7:c2:f5:44:84:fd:14:f0:55:93:d6:ab:64:22:7b:
37:e2:b5:a5:b0:e8:da:df:92:aa:31:d0:b9:58:89:
a9:6c:7b:3c:bf:c1:5d:0c:77:3f:5a:af:3e:ca:00:
02:60:29:85:86:57:30:0d:25:3c:3a:7f:a1:cf:ed:
85:4f:01:f7:82:dc:96:65:f2:de:82:37:41:44:d0:
aa:d7:f9:ae:b9:88:8f:04:1c:98:eb:03:10:78:93:
3f:d5:77:9c:c7:9d:e1:44:ec:d5:c4:42:69:49:60:
be:e7:cf:3b:06:9f:17:71:ff:90:a8:2e:12:cc:bd:
d6:51:4d:db:99:26:b5:95:17:4d:e3:85:4e:60:9c:
51:67:17:46:35:83:77:fa:42:d8:e4:4a:d6:20:87:
dc:f8:09:ba:fc:7c:16:c8:f4:52:a2:64:0a:c7:a2:
a9:55:39:b2:86:24:4d:e2:a0:f7:15:6b:f1:ac:11:
a8:5d:8d:d7:ad:dc:53:01:ac:a9:91:ff:ae:80:cc:
f9:7f:9f:8a:b6:82:1a:68:b0:5c:59:99:23:b2:80:
aa:c6:d9:88:a1:33:78:b1:e5:2d:9c:ae:36:74:b7:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:C7:44:CC:09:82:6A:B6:F8:6C:CC:57:69:D8:81:E5:D6:D4:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C11E7B522A5911F0BB09DDD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.24.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6d:b9:4c:d7:4d:03:b6:3b:74:43:f4:59:13:04:00:32:aa:
89:59:4d:0b:5d:25:b4:bb:01:e5:0a:fb:ea:2d:fa:27:79:88:
b9:65:c8:16:d5:f6:58:51:05:31:f7:86:57:ca:d1:40:e1:ef:
b2:2a:f2:cd:8c:b5:06:df:ac:17:8e:7d:9b:b7:d3:78:d6:db:
65:ed:c9:a8:47:03:c2:c2:3a:07:00:b4:39:0f:3d:e9:05:d1:
20:41:c9:bc:90:ef:af:91:4c:6b:99:36:91:59:a4:1c:07:6a:
32:df:ca:8c:4c:78:e7:70:ae:a3:66:d9:c8:85:ba:44:be:2a:
bf:5b:72:13:b4:0d:b9:7b:07:d7:6c:40:3a:9e:62:27:51:a6:
1d:d5:a0:af:01:f9:14:4e:1f:3d:d6:1a:ca:31:62:d1:b4:d3:
58:02:d4:fe:47:c1:eb:dc:44:23:ba:7a:e0:1c:c2:4e:ed:2d:
fb:47:19:22:47:9f:b9:a1:5e:12:07:94:12:ec:35:a8:5d:ce:
59:68:4b:3a:c8:24:b7:8b:87:c9:07:f7:d8:53:e0:ab:a1:a8:
7a:9a:33:1f:ea:48:b5:c2:e3:28:8c:ce:ac:0d:bb:2f:bf:c1:
49:1e:ed:5d:f9:81:97:90:09:02:52:16:d6:bf:44:93:e3:ab:
bc:10:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:10:56 2025 by rpki-client