Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004AF930BAF811EFBD39AD68762E951A.roa
File: 004AF930BAF811EFBD39AD68762E951A.roa (raw, json)
Hash identifier: 1HiyOvfEh8cud3iGE3/teXKKJ4QQg+a0kQsHWzUUJBk=
Subject key identifier: C4:25:04:37:A2:83:DD:D7:9B:5D:91:3F:37:D8:27:A8:FB:68:D3:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004AF930BAF811EFBD39AD68762E951A.roa
Signing time: Sun 15 Dec 2024 15:19:39 +0000
ROA not before: Sun 15 Dec 2024 15:19:35 +0000
ROA not after: Mon 20 Jan 2025 15:19:35 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58355 (0xe3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 15 15:19:35 2024 GMT
Not After : Jan 20 15:19:35 2025 GMT
Subject: CN=675ef38b-43c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:91:30:b6:97:56:60:b0:01:ad:f3:e0:e1:
dd:54:2c:fa:ce:64:22:f7:24:e3:72:95:0a:e8:ba:
f2:7c:27:87:8e:29:6e:7b:57:4b:39:49:d1:48:76:
de:7f:c9:19:a4:c2:7f:a1:c7:53:ae:ef:75:12:61:
cd:ed:5e:11:a8:7b:42:43:e2:8c:73:f4:c2:83:a9:
ec:c2:e8:91:2e:08:18:50:ab:58:53:41:57:3b:04:
2b:44:c9:f9:f9:7b:7f:7d:5a:29:a5:d2:17:ea:10:
8b:e4:1a:ca:55:07:68:1a:4b:e3:14:de:19:8e:21:
0c:03:eb:a3:af:77:dd:f6:16:48:70:b2:3e:d4:22:
33:f7:86:5b:1c:c6:8f:be:fc:8f:70:18:f9:83:71:
d9:a7:9e:d8:f2:ec:b2:0f:7c:7a:8c:d0:ea:bf:c0:
75:f7:fa:a8:3e:80:a3:10:46:94:b3:5e:b2:41:85:
2e:83:61:b0:33:12:24:b9:93:a3:9b:d7:f3:e3:20:
cb:6f:13:85:3c:d8:4e:51:7e:20:f4:a6:17:2e:17:
67:78:af:4b:69:f3:79:d3:0b:a6:61:eb:03:71:65:
3d:b7:c4:30:24:c1:c8:53:53:0e:a6:c8:3b:9d:e6:
15:7d:0b:20:0f:eb:2c:23:5b:08:ef:c0:1d:55:11:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:04:37:A2:83:DD:D7:9B:5D:91:3F:37:D8:27:A8:FB:68:D3:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/004AF930BAF811EFBD39AD68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:bc:a3:ac:d0:42:98:e1:70:70:dd:d0:78:ba:e0:16:d8:35:
81:bd:72:e6:a1:a0:28:59:9b:1b:b4:99:47:fb:0d:5b:b6:78:
d6:86:b4:60:32:3c:80:63:79:76:23:6d:95:96:0c:10:de:80:
a3:a8:0d:0f:56:3c:7e:d6:bc:fa:06:28:4e:59:e2:8f:cc:6a:
e3:8d:dc:a3:4d:18:bd:74:1c:f8:1e:54:e2:e7:33:ed:f0:01:
ae:86:a9:e6:35:2a:96:3b:23:b8:0b:a5:21:2a:58:f3:c5:fc:
b6:7f:ff:9c:f3:ac:14:1c:f3:e0:bf:75:a2:07:2d:fe:44:bc:
65:51:be:f7:32:28:8f:cf:73:4d:9e:09:95:80:1b:a9:e0:32:
e4:81:1b:47:c9:30:c5:df:a1:50:5d:2a:15:cb:4e:68:e9:77:
09:a4:fa:7a:f9:14:f2:98:c9:7c:28:9e:72:c0:54:a8:fb:73:
47:ae:36:7d:72:1b:a2:43:60:df:66:69:bc:65:78:27:70:12:
3d:2c:cc:3e:c7:83:d7:58:31:09:7b:43:62:79:ab:95:ad:21:
c2:27:80:8a:5f:1f:16:3b:74:08:a7:4b:e1:b9:e1:16:a6:5e:
d2:e6:f7:b0:11:a0:93:a7:6e:6c:bb:c2:de:f5:5c:32:0c:8d:
db:8b:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:24 2025 by rpki-client