Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D08C5CCC9B611EFA14E5A50762E951A.roa
File: 0D08C5CCC9B611EFA14E5A50762E951A.roa (raw, json)
Hash identifier: 8TUafLsto/l8uTo75pMYDk3wQdeFZT8rysherdJub1Q=
Subject key identifier: C0:EF:8B:95:A0:17:C5:01:F5:A1:7C:68:14:37:A6:1A:DF:DD:1C:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D08C5CCC9B611EFA14E5A50762E951A.roa
Signing time: Fri 03 Jan 2025 09:35:21 +0000
ROA not before: Fri 03 Jan 2025 09:35:17 +0000
ROA not after: Sat 18 Jan 2025 09:35:17 +0000
asID: 141883
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63187 (0xf6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:35:17 2025 GMT
Not After : Jan 18 09:35:17 2025 GMT
Subject: CN=6777af59-80a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9a:1a:c5:78:57:45:6c:10:7b:62:9c:8f:0b:
78:62:35:9b:47:d4:1b:0d:e5:0e:07:4b:11:c4:e8:
d9:46:ec:aa:d9:9b:a4:39:58:ec:f8:ca:f5:2e:2f:
78:17:2a:59:ba:03:6f:19:cc:2b:4d:b6:f9:8a:d9:
79:26:bf:40:0a:61:79:22:eb:24:36:d4:1c:3a:a4:
d2:bf:73:e2:ea:5d:94:4c:1f:a6:ec:79:ed:d8:9c:
94:6f:36:8c:e2:2c:bf:11:9b:ad:9e:a0:57:bd:52:
ed:51:5b:b4:87:1c:00:76:2b:29:bf:ab:d6:1e:59:
08:a3:15:5a:bb:de:f3:01:30:a3:3e:d5:4e:5a:07:
c5:14:c0:e5:d3:2c:46:09:1f:5b:7d:1f:74:51:b5:
84:3c:16:6d:4a:6b:9e:e8:6a:54:1e:51:f5:ce:8a:
e0:10:cb:e1:e6:61:6a:e4:e1:ad:5d:ca:ab:8a:d0:
16:4f:0b:2c:0c:d4:4a:77:59:d9:37:27:eb:b6:cd:
ed:de:06:a1:dd:21:8d:86:c5:79:48:74:4f:0a:aa:
47:4f:dc:e0:57:ab:51:34:37:3b:74:16:d0:db:2b:
ec:5a:90:4f:45:26:76:58:3c:58:da:81:90:ec:64:
d0:d7:ec:7a:16:46:42:1f:9a:9f:15:50:8f:8b:93:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:8B:95:A0:17:C5:01:F5:A1:7C:68:14:37:A6:1A:DF:DD:1C:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D08C5CCC9B611EFA14E5A50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
42:b9:95:6e:a1:9b:52:f7:27:17:61:da:c8:45:98:56:e4:30:
40:d9:fb:c3:21:7f:96:d4:30:b2:fe:a1:bf:86:b2:14:1b:7c:
27:e4:36:a5:37:53:9f:0b:f2:31:f0:32:0f:22:dc:d6:6c:01:
0b:2f:73:91:06:7c:00:f4:c4:fa:49:24:57:c0:69:23:42:00:
7b:ee:5c:c8:fc:f1:66:58:41:45:01:9e:1a:ff:be:09:be:1c:
5a:d3:7a:ea:2f:9b:11:94:34:0a:2c:ba:9f:43:d9:14:ca:05:
70:a9:a0:14:ca:d2:6a:f6:a3:c2:8e:46:65:63:36:69:99:a2:
94:f0:9b:33:04:89:11:a7:13:eb:5a:6a:4b:aa:52:c6:1f:4c:
3c:36:51:01:c2:98:fe:fd:d8:9d:ed:fa:d2:f9:a5:81:b5:1f:
3b:d5:23:60:27:d5:f3:28:d4:77:6d:66:fd:bb:2b:74:c0:1c:
c3:f1:2a:54:2c:c0:52:d8:0c:73:de:ce:a3:50:26:aa:40:64:
6d:15:b5:db:ad:c5:27:72:e8:be:c0:f8:ca:d8:2c:7d:b6:ee:
ce:61:16:e7:10:2a:e0:c3:d4:51:39:bb:32:0e:6c:0c:a8:de:
71:93:90:a8:28:3b:57:d3:c3:5f:b1:88:ed:ca:4e:6c:4b:63:
ff:2b:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:23 2025 by rpki-client