Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0823F084D0C511EFA436F29C762E951A.roa
File: 0823F084D0C511EFA436F29C762E951A.roa (raw, json)
Hash identifier: s5ceLerD00dSO180qVmU4e/4Xa+mkJG95vrYRKLpN4k=
Subject key identifier: 9E:E3:F6:AA:4B:B1:F9:30:B2:0E:F2:28:7A:B6:DD:0A:62:05:3E:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01064B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0823F084D0C511EFA436F29C762E951A.roa
Signing time: Sun 12 Jan 2025 09:10:13 +0000
ROA not before: Sun 12 Jan 2025 09:10:10 +0000
ROA not after: Sat 25 Jan 2025 09:10:10 +0000
asID: 141883
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67147 (0x1064b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 12 09:10:10 2025 GMT
Not After : Jan 25 09:10:10 2025 GMT
Subject: CN=678386f5-bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:11:a1:6c:a3:2c:f6:22:19:5a:24:56:f2:
75:3b:77:87:d5:24:94:05:8a:c7:7d:1e:9c:d0:27:
cc:b2:52:f0:89:06:98:e3:fb:e1:cb:50:e4:93:5f:
b9:29:eb:04:9a:71:9c:74:88:db:b7:15:ac:15:f6:
9a:b1:29:ea:1e:12:8e:4b:ec:67:fe:61:c5:a4:c9:
59:b0:f5:c5:08:43:ff:94:e9:a1:97:ac:1a:1d:08:
1c:65:b1:8d:0e:ca:4a:a4:01:f9:e9:b1:7d:02:12:
c3:67:07:b0:58:4e:43:01:d9:e7:7b:42:89:e8:b4:
ba:17:9a:57:53:bd:71:6f:3d:f3:e8:37:f6:2c:96:
b3:12:c0:eb:76:21:91:1d:f3:f8:68:54:cb:b3:5f:
e3:f5:57:a1:e3:5a:2f:c7:4f:e3:ec:c5:55:1a:23:
b0:86:a5:e2:a8:07:50:05:3e:1c:fd:41:c2:86:62:
6d:cd:14:90:85:74:c2:1a:78:bf:d8:af:9e:8f:ff:
dc:36:51:fe:cf:e4:84:f0:ae:29:d0:bd:25:c2:a5:
02:49:48:19:ef:14:1d:02:36:72:ed:15:b5:3a:3f:
a9:36:3f:c3:3e:56:88:e3:d2:b4:f0:08:7b:03:9b:
f8:b6:e3:e3:1e:e8:e4:c7:61:91:9b:8d:b9:21:d9:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E3:F6:AA:4B:B1:F9:30:B2:0E:F2:28:7A:B6:DD:0A:62:05:3E:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0823F084D0C511EFA436F29C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
57:8d:d6:e2:ec:a0:da:18:36:ae:b9:f9:0b:8b:16:ba:30:f7:
dd:68:99:c7:3a:85:7a:ce:84:34:d3:d1:64:31:f5:66:a5:8b:
ce:a5:12:d4:2f:1c:a6:ca:36:3e:1c:0c:fe:ef:b3:61:ba:00:
e3:e9:bc:23:39:59:2e:ed:b9:21:e9:34:24:02:2f:f7:54:9a:
07:5d:8f:e6:bf:a9:36:8d:60:cd:7c:49:2d:94:b3:75:e8:19:
84:1d:7b:7a:ab:7b:c5:47:3f:3c:34:80:e1:95:d8:ef:12:79:
17:be:43:f6:df:c4:ab:d1:b6:f4:ef:a1:d1:94:05:cf:43:ea:
67:66:1b:91:56:73:d8:c5:21:b2:6b:d2:a0:12:06:7a:70:bc:
cf:58:c7:71:56:49:0a:07:4b:07:bb:0f:d2:88:ad:7a:21:d6:
90:5c:15:9a:b5:8c:06:fb:0a:1c:cb:ae:24:b0:ed:23:67:fa:
17:f6:d4:59:d6:b5:42:73:a6:3b:3f:79:f7:65:61:c2:a7:51:
9d:ec:00:33:da:da:00:54:43:95:a7:d4:cc:d4:b8:00:85:30:
37:28:5c:37:c7:72:ce:a9:50:f0:7e:04:8f:a6:5e:87:95:24:
97:7d:96:a8:75:ab:dc:ec:9e:4c:35:70:96:8a:91:66:02:9a:
a0:1c:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:42 2025 by rpki-client