Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049C7E24C6CD11EF8FB86EB9762E951A.roa
File: 049C7E24C6CD11EF8FB86EB9762E951A.roa (raw, json)
Hash identifier: POIgSGwF64BIi5Ikv7E7N2ZPrZ5X2fPH+PfTrJAf6xM=
Subject key identifier: 21:BA:F1:EC:6F:DF:3B:03:EF:78:4A:F0:C6:7E:D0:82:4C:AB:91:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F27F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049C7E24C6CD11EF8FB86EB9762E951A.roa
Signing time: Mon 30 Dec 2024 16:42:12 +0000
ROA not before: Mon 30 Dec 2024 16:42:08 +0000
ROA not after: Sun 02 Feb 2025 16:42:08 +0000
asID: 54600
IP address blocks: 45.203.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62079 (0xf27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:42:08 2024 GMT
Not After : Feb 2 16:42:08 2025 GMT
Subject: CN=6772cd64-f6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:20:2c:c3:fa:a1:75:a6:9a:bb:61:1d:7e:
1d:a1:f6:61:c2:55:9d:20:30:47:da:c2:1d:15:eb:
21:e5:40:86:b6:40:00:9c:5c:cd:67:d0:7e:34:a4:
12:c5:56:00:df:27:da:bf:3d:6c:fd:96:31:75:8e:
a4:61:13:8f:dd:20:d8:69:45:40:55:d6:10:66:1f:
86:f0:85:a2:b7:4f:0a:68:25:18:22:39:e5:9e:c0:
38:0c:cf:19:ee:db:66:c2:d5:17:ab:95:1f:54:bf:
08:6e:7f:72:18:67:c5:38:ab:90:9a:b7:c5:ec:4e:
11:68:c4:8e:c6:7e:84:fe:a4:ec:45:d7:00:b5:f0:
3e:32:e0:22:c8:d2:0e:0f:35:f6:64:5e:d4:e9:45:
ed:ec:c2:c6:fe:b6:d8:e6:a2:89:fd:7e:51:ed:73:
9b:3d:9d:d9:3d:94:a1:3a:35:e4:4d:e5:63:02:88:
73:4a:b6:26:71:c9:6d:a6:a2:4a:7e:e4:65:08:54:
d1:e1:0c:5d:d0:03:c0:38:2e:0d:3c:54:ef:ab:76:
09:f6:c8:e5:3a:b6:57:72:92:24:1a:64:1d:52:83:
58:96:d0:a8:d8:51:d4:dc:df:f7:c1:83:94:be:d5:
ba:19:24:8f:5f:ad:0a:05:78:cc:e5:71:94:ee:57:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:F1:EC:6F:DF:3B:03:EF:78:4A:F0:C6:7E:D0:82:4C:AB:91:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/049C7E24C6CD11EF8FB86EB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:e2:6f:f7:db:01:34:a0:63:d2:bf:e5:01:38:15:9a:d3:99:
4e:60:c3:e1:c1:14:8e:3f:e0:a9:15:06:83:03:10:6c:fa:59:
52:0d:00:13:f0:1f:ef:3f:38:7f:60:f5:d1:b2:ab:01:43:f0:
f5:2b:28:70:6b:b4:9a:83:64:35:c2:25:6d:1d:47:ae:ef:a1:
44:51:6a:56:8d:b1:dc:62:90:57:52:76:22:93:eb:a6:94:8e:
2a:36:79:4a:51:53:a5:57:ad:8a:7f:39:e0:94:3a:a4:be:16:
0b:72:ce:4f:5f:7e:14:3d:c1:1e:84:52:76:e0:64:26:0f:31:
87:ed:7b:d3:96:7c:f7:a6:69:97:14:bb:c5:d9:1b:43:20:22:
11:fb:a0:31:57:37:71:2d:92:10:8b:23:83:0d:35:12:eb:ff:
b9:91:63:a1:27:1a:5d:e9:d0:a4:25:29:ab:06:fd:b8:cc:d8:
06:0f:3f:76:84:aa:af:90:cb:09:60:a0:97:a7:35:23:d7:ca:
4e:2c:b6:68:d1:6a:a7:cc:8c:e8:ad:a4:7f:30:75:49:45:cf:
47:7a:00:e3:6c:8a:e3:80:9f:22:47:75:e2:20:57:c9:a1:4d:
5d:0f:77:a8:6f:41:b2:c5:05:74:0a:69:2a:d1:ab:46:8d:20:
90:a5:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:25 2025 by rpki-client