Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10402740BF9C11EF8629EA98762E951A.roa
File: 10402740BF9C11EF8629EA98762E951A.roa (raw, json)
Hash identifier: DSMs6a0Qtz4Pk2YWfUEA8j+oOvRZHLIoVMTAnTH7dD4=
Subject key identifier: 8C:09:69:4C:05:2F:E0:3F:28:A5:5B:6F:17:AF:55:D9:91:60:BE:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10402740BF9C11EF8629EA98762E951A.roa
Signing time: Sat 21 Dec 2024 13:04:08 +0000
ROA not before: Sat 21 Dec 2024 13:04:04 +0000
ROA not after: Fri 31 Jan 2025 13:04:04 +0000
asID: 984
IP address blocks: 45.198.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59308 (0xe7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:04:04 2024 GMT
Not After : Jan 31 13:04:04 2025 GMT
Subject: CN=6766bcc8-9168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:c3:00:bf:c1:51:c5:0f:1d:ab:f8:c7:4c:
2a:bb:26:a3:41:35:4c:c6:8c:eb:4a:fa:a7:12:24:
ee:86:76:c9:05:a9:e5:8d:6d:78:77:2f:01:3c:f4:
a1:00:66:78:5c:9d:9d:27:16:cd:ec:74:49:af:7a:
12:64:dd:90:6f:48:e7:e0:aa:4b:c3:19:e9:81:45:
d3:76:36:63:30:14:2d:84:7d:e3:e9:c8:4e:d3:63:
90:41:f1:72:fd:07:b2:c5:89:0a:18:36:15:6f:f8:
a3:03:9b:9b:49:8b:38:58:fc:fd:62:73:82:7a:47:
79:7a:a2:55:ed:de:20:ae:66:b3:79:16:cd:1b:c9:
db:95:aa:e2:9d:ec:a8:8a:cf:81:6d:f2:d3:cb:c3:
f6:b9:fc:e2:ab:cc:8d:d3:82:b0:93:86:b0:d2:d5:
45:98:6b:80:ef:4b:05:27:2d:30:8d:35:3b:5e:bd:
dc:dc:33:9c:e8:26:c7:07:ff:4a:c1:9c:33:1f:fb:
e6:69:65:3f:af:eb:6b:68:51:6a:f5:d1:b6:34:1b:
f3:81:e3:c1:47:55:63:f1:ff:72:b9:6f:11:ba:d5:
60:b3:a3:d6:99:55:b1:fe:90:6d:e9:c1:bd:75:38:
fb:c5:f0:f2:33:cb:c3:30:85:73:28:5d:01:e0:f7:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:69:4C:05:2F:E0:3F:28:A5:5B:6F:17:AF:55:D9:91:60:BE:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10402740BF9C11EF8629EA98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e0:7a:bd:46:3b:48:cc:d3:bc:f1:df:d0:71:b5:5a:87:ad:
f4:ae:d6:a9:39:64:a1:85:3a:9f:2a:e4:18:64:28:40:10:98:
08:9b:e9:ea:64:8e:95:11:8b:48:37:10:f9:e7:c8:a2:2f:10:
f3:c9:36:99:2d:50:a8:8f:76:a8:da:55:19:48:89:21:d6:51:
be:b6:9d:c4:c5:14:f3:25:35:88:2e:5d:26:0f:8f:43:59:8a:
83:b2:46:a8:8b:c0:45:43:2a:31:55:02:62:de:11:e8:82:7c:
e3:de:9b:4f:69:e7:dd:d8:3d:2c:6e:f8:15:c3:c7:7f:f9:c8:
07:69:45:c0:7c:c0:be:bb:73:13:74:fe:c6:a4:bb:fd:20:e3:
8f:03:0d:9c:b3:1a:c6:f7:8b:5a:fc:f9:6f:0f:a2:8a:33:a5:
68:74:36:e2:12:44:8d:5c:4e:70:08:bd:8a:c0:b1:86:09:97:
c7:88:0e:00:4c:96:23:bd:15:66:72:e1:5f:54:96:d7:15:cc:
7b:2f:23:e5:74:89:23:8e:fd:40:3d:03:dd:c7:4b:c8:6a:64:
07:76:ce:e9:31:b0:78:50:37:e4:f7:e9:bb:05:11:39:2c:45:
0e:a9:f8:95:87:42:3e:ae:89:76:54:9d:54:74:ef:03:bf:c6:
ae:0b:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:14 2025 by rpki-client