Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F75B06BD1111EFB4FFA0A0762E951A.roa
File: 14F75B06BD1111EFB4FFA0A0762E951A.roa (raw, json)
Hash identifier: Dhx+KmS+QO+dk+nB/89XT+2boQKEaPHzKV/FRm0o6N4=
Subject key identifier: 60:97:B1:3F:E8:E2:98:B2:AB:C6:7E:81:FD:06:1C:18:A9:F3:21:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E482
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F75B06BD1111EFB4FFA0A0762E951A.roa
Signing time: Wed 18 Dec 2024 07:24:14 +0000
ROA not before: Wed 18 Dec 2024 07:24:10 +0000
ROA not after: Thu 23 Jan 2025 07:24:10 +0000
asID: 395793
IP address blocks: 45.201.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58498 (0xe482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:24:10 2024 GMT
Not After : Jan 23 07:24:10 2025 GMT
Subject: CN=6762789d-a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:40:54:49:b8:3a:fd:87:f1:00:3a:a9:98:
55:08:22:e1:4e:14:00:77:ce:de:35:e2:6c:b7:b3:
6b:1a:bd:b3:f2:6a:8f:7a:4b:b0:6c:e3:66:85:f6:
80:df:4d:e1:83:de:45:ca:21:50:3e:b3:73:f0:d4:
ed:81:26:8f:cc:a5:95:0b:f6:7c:ba:5d:8e:e4:af:
1e:a2:53:d1:95:86:1c:4c:a3:f3:b8:af:e0:c6:5b:
6c:e9:96:db:d2:a0:c3:16:63:79:d6:ac:f5:7c:dd:
f1:e8:39:bc:2f:9f:67:96:b5:51:c7:d8:0a:b5:6c:
45:65:65:67:7e:a1:fa:95:91:6f:cd:ec:86:5c:bc:
8e:30:7e:c2:a3:f2:9c:73:37:b5:94:fd:a0:76:88:
4c:f0:fb:4f:64:41:2d:ed:e1:e6:ef:59:ae:9b:21:
02:50:fa:b6:b0:7a:d3:95:ba:e8:90:5c:e2:1e:c5:
76:38:dc:78:9e:4b:02:f0:0d:5c:f4:6d:17:34:27:
63:54:0f:45:5a:f8:75:9f:2f:23:e1:69:81:93:7f:
40:4c:50:bd:41:1f:49:90:08:32:32:79:af:52:57:
78:74:8e:b0:bf:02:35:9a:bf:61:b4:99:c1:f6:a9:
b9:bd:4c:b5:c0:69:d7:f5:67:3f:56:45:aa:14:e1:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:B1:3F:E8:E2:98:B2:AB:C6:7E:81:FD:06:1C:18:A9:F3:21:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F75B06BD1111EFB4FFA0A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:1d:d6:ff:9e:15:74:58:70:1e:04:c4:b9:b3:c2:96:0e:07:
7a:96:80:03:16:cb:6a:7f:3a:9b:1d:d2:d4:34:89:c0:68:8e:
36:0b:69:ac:18:ba:45:1c:4a:a7:14:b1:5e:b3:af:8e:ab:57:
90:fa:75:8b:7d:03:37:b4:e7:9d:8a:c3:17:3a:2b:bd:d1:11:
8f:9c:b9:a6:a8:a8:0f:08:77:59:f7:16:34:66:be:b6:aa:26:
86:40:a8:63:ea:39:0a:b0:1f:e7:ca:58:27:a1:33:9a:e4:cc:
f0:5a:8d:fd:e7:4a:c7:67:f4:03:cd:8c:62:6d:5f:d4:ca:3e:
18:55:f7:59:ac:9e:9b:73:db:25:12:fc:d2:53:33:70:29:ac:
6b:ce:7c:e8:5f:e4:99:b9:00:4f:90:1c:8a:12:25:14:5f:3a:
92:88:28:c3:5c:87:f1:d3:3e:7f:e9:a8:88:81:b8:ff:ea:a5:
f5:1a:ec:99:c0:38:43:40:0a:65:bf:1e:a4:64:74:16:b2:9d:
09:b1:31:51:6f:bb:66:27:1a:07:47:f2:9e:1e:07:b5:ec:cc:
25:30:94:b0:56:9e:40:cb:35:be:ef:f8:7e:ad:41:99:7c:a1:
1a:10:d9:99:23:35:99:5d:af:ad:55:2b:d8:95:24:73:bc:b7:
6e:94:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:02 2025 by rpki-client