Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A60C9ECBC4411EFB4FD1C97762E951A.roa
File: 1A60C9ECBC4411EFB4FD1C97762E951A.roa (raw, json)
Hash identifier: 2KE535GjwdHZ3ER5oXRBLtSOVeYgznZTGFK8+zHefOQ=
Subject key identifier: 84:2D:24:2F:0D:50:B4:9A:93:37:1D:53:D0:91:F1:81:03:4B:2D:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E457
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A60C9ECBC4411EFB4FD1C97762E951A.roa
Signing time: Tue 17 Dec 2024 06:56:56 +0000
ROA not before: Tue 17 Dec 2024 06:56:52 +0000
ROA not after: Tue 21 Jan 2025 06:56:52 +0000
asID: 212667
IP address blocks: 45.207.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58455 (0xe457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 17 06:56:52 2024 GMT
Not After : Jan 21 06:56:52 2025 GMT
Subject: CN=676120b8-cd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:ca:12:15:b5:4c:27:ee:34:6f:8d:ba:81:
a8:30:bd:02:c1:10:45:0a:1f:98:3a:40:b3:4b:be:
ba:26:7a:c0:8f:25:03:18:71:7b:dc:dc:f7:e0:2f:
ec:33:95:06:bf:45:df:ca:2e:6a:b5:a2:26:95:1d:
ed:78:cd:95:c2:c9:db:6d:8c:63:6f:f6:aa:f3:38:
73:48:24:6b:46:ab:64:7b:62:3c:7f:ad:60:e8:4d:
c3:de:1a:3d:9c:77:35:9d:17:eb:13:81:d8:88:71:
33:4c:c3:7b:7b:b5:5e:83:f8:3e:65:3a:b6:51:a0:
a4:17:d9:87:a4:25:6f:a8:ca:d0:2c:55:91:b8:a4:
c4:bd:f0:d9:98:68:ef:5c:65:00:1a:a6:b0:c5:1f:
8c:3c:c2:97:47:25:9c:7c:c9:82:e4:92:48:46:04:
7a:37:02:93:d5:87:ba:e8:87:6d:18:63:a7:3c:82:
4f:25:19:10:fb:f4:47:5a:59:2f:7e:e8:25:6b:4f:
3f:74:9c:ad:6b:d5:be:aa:37:83:fb:27:71:38:ca:
b0:c6:2d:69:63:53:c8:ac:c8:59:de:2e:3c:35:a0:
2c:56:82:6c:e5:37:8c:e0:e2:8e:ff:7a:6a:f5:dd:
74:48:99:78:99:b1:1a:ce:1d:f3:58:fd:0f:18:95:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:24:2F:0D:50:B4:9A:93:37:1D:53:D0:91:F1:81:03:4B:2D:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A60C9ECBC4411EFB4FD1C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1f:d0:e7:5d:36:2e:e9:42:88:6c:9c:aa:ba:0c:53:09:98:
af:b2:af:fa:c8:76:e1:96:fe:89:74:bf:21:68:1e:d7:1a:d3:
f0:fd:b1:0f:3d:f4:e0:24:e4:2d:9d:4b:d7:73:b9:86:87:64:
0c:50:05:35:62:3d:27:d9:b5:14:19:9e:94:a2:cb:1a:ad:a0:
be:1a:61:40:5d:92:8e:16:c6:5c:57:55:b9:24:c9:54:89:3c:
c1:86:49:77:b9:55:2d:a6:37:19:63:23:65:33:63:5c:83:16:
c8:ea:f1:1b:06:e3:d2:fc:c3:17:10:8f:31:45:ce:40:c0:d8:
3a:30:93:a3:c5:c6:a7:5d:f8:24:0f:70:df:ee:64:4b:c3:4b:
26:29:2a:a9:b9:cb:69:54:74:6e:b4:a3:06:8d:29:b9:43:79:
d1:36:87:c4:47:65:f6:eb:ad:8c:06:97:a3:ec:7f:bd:79:00:
8b:ab:bc:f0:66:e4:86:cd:fe:11:1b:c8:39:31:62:34:11:bd:
5c:80:3e:5e:17:5a:9c:0f:85:82:a3:46:a1:bc:ae:24:80:e4:
ea:86:6e:79:3e:43:92:c8:de:c2:10:de:90:50:4f:21:2e:90:
d0:c6:d0:7a:85:05:e2:7a:6c:6f:cc:5b:56:66:31:a9:d5:30:
ac:3a:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:42 2025 by rpki-client