Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16442CE6BEB011EFAC38AF53762E951A.roa
File: 16442CE6BEB011EFAC38AF53762E951A.roa (raw, json)
Hash identifier: c5Q9G+78cWB86naObH1Uye6mOTD6xLFo55njeF36cxY=
Subject key identifier: 4E:19:42:27:74:7D:03:68:EE:77:39:6D:43:65:AE:21:F2:84:7C:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E741
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16442CE6BEB011EFAC38AF53762E951A.roa
Signing time: Fri 20 Dec 2024 08:54:57 +0000
ROA not before: Fri 20 Dec 2024 08:54:53 +0000
ROA not after: Sat 25 Jan 2025 08:54:53 +0000
asID: 6079
IP address blocks: 45.203.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59201 (0xe741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:54:53 2024 GMT
Not After : Jan 25 08:54:53 2025 GMT
Subject: CN=676530e1-9241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:e8:77:38:45:72:7b:64:b4:bb:62:72:06:
f6:63:39:de:f6:fe:6b:c2:cf:bd:70:5c:3b:10:26:
6c:0a:38:15:be:39:69:44:81:fb:94:8b:dc:33:0a:
a3:be:6a:c2:a4:5e:d4:88:c0:8e:25:cf:94:c5:e1:
82:83:e3:23:f7:fe:b3:79:3c:70:e4:a3:d8:b3:d1:
2d:65:69:0b:e5:27:02:c8:0b:41:bd:a4:a3:77:8c:
c9:af:b4:19:56:4d:c5:d8:1a:f8:00:b0:5b:39:56:
a6:6c:11:a2:52:85:7e:e2:26:78:21:41:44:e6:66:
cb:b8:22:f4:dd:31:9e:1a:49:e8:5e:eb:03:b5:b3:
e2:29:41:d3:82:83:b3:87:98:0b:b2:f9:ee:54:1c:
fe:8a:be:90:a4:59:e5:70:4e:a7:46:e6:7d:78:f9:
5e:b5:85:07:a7:cf:6f:ec:c1:5f:9f:c2:73:7d:08:
aa:02:50:b6:35:8a:98:a1:d6:03:8e:60:94:a5:5f:
d0:57:33:0c:48:95:5a:91:64:04:fa:53:13:57:55:
2c:ed:12:b1:c5:a3:af:f9:b2:df:4a:d7:39:8c:4a:
9f:00:92:b1:32:ca:c3:fe:5f:ba:21:37:8e:88:6d:
c8:0f:59:a5:90:d4:1a:91:8e:1a:2d:5d:ec:19:1a:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:42:27:74:7D:03:68:EE:77:39:6D:43:65:AE:21:F2:84:7C:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16442CE6BEB011EFAC38AF53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.210.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8d:eb:69:33:96:c1:7f:91:6f:1d:26:31:ba:80:3c:2f:7c:
6b:27:07:68:81:b1:af:36:e9:88:7b:ae:aa:10:6b:e4:de:f0:
04:25:99:78:8f:0f:cb:e7:55:b9:a2:66:4b:30:d7:8a:0a:3e:
a9:2c:c1:7e:60:88:ef:c1:38:d1:2e:ea:4b:8b:e9:7c:42:f4:
90:5a:84:ed:f8:2d:bb:32:f3:e0:a3:4c:40:6d:5e:56:68:44:
7a:b2:85:d6:0e:66:49:60:3f:ef:8c:b4:c7:4f:ad:8b:e2:03:
dc:af:fc:b7:8f:e3:de:a1:98:f4:95:ee:64:61:df:f9:0a:a9:
a2:08:5f:c2:47:1b:58:d0:bd:5d:e8:d8:a7:44:2b:1b:00:3c:
70:89:dd:88:e7:ea:f1:78:6f:80:51:c8:77:a7:e3:e8:93:aa:
54:e3:bf:e0:72:42:99:c2:74:03:9e:6a:a8:48:12:45:d7:58:
c4:b0:84:c1:d2:25:36:74:fd:77:78:cb:7a:8f:f4:d3:4f:68:
49:bb:b1:2b:c3:74:ce:9c:99:c4:b7:76:40:d8:0e:30:13:8e:
40:fb:1b:22:b9:22:90:d1:a1:a8:a9:ca:79:95:dc:66:c0:c2:
73:7a:3a:83:5c:bb:4a:0f:8c:c7:6e:42:8c:35:8d:34:0a:1f:
2e:f9:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:40 2025 by rpki-client