Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E78FFFCCC1E11EFAD7ADE8C762E951A.roa
File: 0E78FFFCCC1E11EFAD7ADE8C762E951A.roa (raw, json)
Hash identifier: iqvnjLokekngyHRB3W1I0H073mF6m90jdb6adOULUiY=
Subject key identifier: 4E:BF:0D:10:A9:41:05:3F:40:6E:55:73:0A:78:BA:AB:6A:26:CF:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E78FFFCCC1E11EFAD7ADE8C762E951A.roa
Signing time: Mon 06 Jan 2025 11:04:54 +0000
ROA not before: Mon 06 Jan 2025 11:04:50 +0000
ROA not after: Wed 15 Jan 2025 11:04:50 +0000
asID: 40065
IP address blocks: 45.205.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63649 (0xf8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:04:50 2025 GMT
Not After : Jan 15 11:04:50 2025 GMT
Subject: CN=677bb8d5-e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:ce:4d:6d:24:7f:ef:2c:06:43:2d:87:ee:
6d:e1:86:bb:3b:0f:9f:e9:8d:b1:ac:c3:56:55:b6:
c5:fa:53:9b:fb:21:21:0f:c0:bf:8e:d8:dc:e8:c7:
0e:84:c1:91:31:e8:f6:18:a6:df:19:3b:03:0d:54:
de:64:c9:78:64:e2:24:c2:17:61:d1:16:34:d8:f0:
4d:ca:3c:10:38:c6:07:74:98:47:b2:b4:e3:72:29:
8c:e4:e3:36:2a:ac:90:1c:63:97:6f:04:df:90:81:
27:c9:fb:81:6b:3b:f4:3f:78:ac:5b:2c:88:55:83:
e1:de:89:d7:56:b7:11:46:32:15:45:67:79:66:21:
01:a1:96:1e:1a:e3:7d:cb:93:4a:0f:52:b0:6f:9c:
fa:09:79:e1:e3:e7:a4:71:ec:d8:18:1f:8f:27:5e:
54:93:d8:b3:d7:6e:d0:87:3e:b2:59:69:53:0e:00:
b1:6c:c4:64:19:47:f7:9c:53:ca:78:7f:10:fa:6c:
7e:a1:85:27:78:80:c8:13:85:67:d3:c8:b2:c1:8a:
bd:9f:22:11:0a:b0:15:2f:fd:3c:2a:fa:33:fe:0c:
80:bf:fd:69:00:4e:fc:8b:50:61:8f:3d:93:6d:99:
47:9d:89:a2:3c:a8:21:87:6f:3d:1b:35:ef:f9:d0:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:0D:10:A9:41:05:3F:40:6E:55:73:0A:78:BA:AB:6A:26:CF:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E78FFFCCC1E11EFAD7ADE8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.2.0/23
Signature Algorithm: sha256WithRSAEncryption
16:4e:12:08:31:17:98:65:35:6e:e8:f9:00:19:0d:3c:19:ca:
3d:7e:1f:7b:2c:c0:16:09:c7:9d:4b:c9:cc:19:2b:d7:93:5e:
4b:e5:78:af:a9:3e:9f:47:14:60:31:35:9d:4c:7d:e1:56:e5:
36:4f:60:25:52:fb:5b:95:29:a5:d9:c1:15:95:39:75:05:1f:
73:4d:ce:e7:49:f2:9f:81:ab:19:08:f8:1e:58:15:fa:24:b5:
b3:de:7a:a1:e2:13:c3:0e:89:b0:bb:5f:87:47:56:9f:42:71:
c1:aa:03:6c:70:65:ef:90:ea:9f:da:e6:79:5c:a0:18:da:90:
bc:81:f8:b9:b6:36:85:75:a5:ff:88:89:7d:9d:bd:33:a7:59:
15:4b:bf:33:c4:36:b0:d2:f5:bd:37:c4:8b:a8:27:98:03:91:
a5:d0:91:18:8f:a6:9a:ea:5b:ba:b6:2d:e5:9d:cd:27:ea:5a:
07:ae:c3:59:58:d0:c2:77:56:cb:85:ff:74:2c:6e:dd:e2:bb:
d7:1c:b8:38:f0:9c:ea:cc:4d:b1:92:73:c0:d7:5e:0d:66:f6:
70:78:77:18:bc:28:db:5a:c4:2a:1a:23:6e:75:09:aa:57:34:
a7:ea:8e:70:64:4a:ca:6f:3c:eb:24:bf:05:2e:bc:9c:7e:18:
37:91:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:39 2025 by rpki-client