Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C5617AB92411EF9D75D274762E951A.roa
File: 17C5617AB92411EF9D75D274762E951A.roa (raw, json)
Hash identifier: ed3FfJJ0xAeq137xEt1tmCwSfUKD+bD1UYz+Go5TQ58=
Subject key identifier: 6B:E5:A8:68:76:63:D6:E8:BD:85:39:9B:D9:68:96:6F:C7:23:76:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C5617AB92411EF9D75D274762E951A.roa
Signing time: Fri 13 Dec 2024 07:30:14 +0000
ROA not before: Fri 13 Dec 2024 07:30:10 +0000
ROA not after: Sat 25 Jan 2025 07:30:10 +0000
asID: 48031
IP address blocks: 45.200.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58095 (0xe2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:30:10 2024 GMT
Not After : Jan 25 07:30:10 2025 GMT
Subject: CN=675be286-a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:8b:3d:32:60:bb:fe:21:43:1f:47:cc:7c:
1f:b1:d1:54:01:01:7c:76:9f:bf:97:57:f0:7d:77:
e9:de:52:3c:05:31:c0:fa:3b:6a:2b:e6:97:20:3f:
a9:11:86:d9:b5:26:3a:be:b5:9a:59:e5:e3:6e:50:
b6:b8:76:bc:09:6f:99:f1:23:1a:8b:42:22:41:05:
d3:61:6a:b6:24:b4:8f:9a:b0:59:93:5d:d1:0e:3f:
85:ab:df:d3:57:28:a6:f3:52:24:6c:8f:06:9d:b4:
fc:ad:d6:d3:e2:31:f5:f7:b6:ad:fd:af:ed:9c:83:
25:39:52:29:04:5d:f2:ea:5e:cc:37:7e:82:d6:87:
25:ad:c7:f6:f2:2f:e4:e1:08:18:81:88:cd:49:ea:
98:54:a6:23:fa:60:4a:91:20:55:cd:5a:28:f6:4b:
b7:0e:61:bf:b3:05:c8:89:a5:f8:58:35:6b:1b:62:
24:28:1b:f8:46:bf:55:59:90:f0:ea:32:e4:02:be:
f9:e7:18:b7:bd:68:78:f8:b9:66:ab:32:d3:fb:bd:
09:e5:8a:76:3b:a8:61:58:93:ec:48:77:6d:0f:91:
d1:ca:9e:47:54:6b:20:2b:03:90:55:6a:5b:c6:8a:
7d:ce:fc:a0:a9:b2:39:fd:ea:99:2c:ea:3b:59:89:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:A8:68:76:63:D6:E8:BD:85:39:9B:D9:68:96:6F:C7:23:76:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17C5617AB92411EF9D75D274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.184.0/21
Signature Algorithm: sha256WithRSAEncryption
50:98:fb:43:72:df:5d:87:ef:76:9d:46:15:65:df:9e:97:8b:
2d:d9:c7:3a:58:39:f5:7a:8f:5e:71:15:3d:6e:ff:a9:9b:c2:
5c:7c:b7:91:08:f5:d7:08:0f:42:a7:04:48:66:64:7d:cd:d5:
57:81:93:85:3c:dd:82:2a:83:e5:36:f0:21:03:34:7d:af:f1:
8b:76:6a:12:3e:9d:a6:ce:62:fa:cd:d3:44:89:5d:b9:0b:4e:
42:1c:ec:cd:39:f1:72:c8:d3:02:56:17:46:f3:8b:f1:5d:03:
4b:b2:b5:61:bd:20:d6:91:22:86:c6:78:43:ba:9d:f4:df:b3:
d0:34:2d:cc:15:cf:c0:b1:07:74:a7:91:8e:6f:57:d8:63:ee:
45:ee:f1:86:55:72:6e:b9:2a:ee:a5:82:d1:a9:dc:27:3d:31:
a7:6a:2a:b1:f6:95:31:c9:d4:03:45:47:5f:46:81:be:ac:05:
8d:64:5e:d4:cf:d7:e6:fb:48:1a:55:45:6a:f7:c2:46:2b:b8:
82:f5:b5:1b:28:4d:c8:aa:d5:ba:45:a7:f9:3b:ef:5d:66:d2:
6e:74:e3:40:a1:66:d0:a5:35:a9:1e:a8:7d:13:b4:60:c0:08:
42:e8:0d:0d:91:14:87:03:c5:e4:bf:9d:ea:b4:7e:84:8f:9b:
55:b9:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:49 2025 by rpki-client