Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC19DB2CAC611EF82F3EB80762E951A.roa
File: 1BC19DB2CAC611EF82F3EB80762E951A.roa (raw, json)
Hash identifier: DbHObNlMQ2gNMMJ+5QYYy2lBZbi6mXDmvcBE3zd/2lI=
Subject key identifier: B2:1E:3A:70:72:00:D7:33:18:D9:EC:A3:C3:DE:69:33:03:56:0E:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC19DB2CAC611EF82F3EB80762E951A.roa
Signing time: Sat 04 Jan 2025 18:02:49 +0000
ROA not before: Sun 05 Jan 2025 18:02:45 +0000
ROA not after: Fri 17 Jan 2025 18:02:45 +0000
asID: 39600
IP address blocks: 45.203.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63286 (0xf736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:02:45 2025 GMT
Not After : Jan 17 18:02:45 2025 GMT
Subject: CN=677977c9-e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:d3:78:9d:4a:ee:3d:0b:04:7f:ae:d7:c2:
43:09:7e:b9:0e:84:df:2e:8e:ed:42:5d:31:6a:47:
61:fb:b0:5a:34:72:c5:d3:10:f3:8b:1a:77:50:24:
6a:c3:a1:1d:f3:e2:e0:72:64:62:87:71:91:49:e2:
b0:20:41:5c:91:4e:6b:1b:bd:ad:b1:b6:d7:4d:b3:
9c:95:ef:8c:bc:4e:11:e7:12:a0:cf:14:a4:5f:dd:
2a:59:a8:f7:72:d1:a4:a6:9e:fb:72:ff:5e:80:83:
a7:ef:37:4f:7d:0a:49:f3:db:2a:da:c6:da:8b:15:
2f:37:75:66:59:fa:b5:98:b2:e7:f6:f1:ad:5c:b6:
c1:4a:27:f6:f3:8e:ff:8c:80:50:df:b0:d7:48:5e:
5f:3c:45:3e:b4:c6:7b:31:d1:74:ad:f6:1e:33:e9:
c2:b2:5a:62:fa:d7:5e:e3:06:9b:e7:ab:33:15:90:
ef:22:08:22:c6:17:1e:71:68:a4:bb:80:1f:9b:07:
39:74:5b:3b:44:11:47:df:b4:cb:26:11:54:44:9a:
13:f5:30:f9:98:12:e6:81:86:56:57:01:91:f1:39:
12:86:e0:be:d5:a7:8a:c0:40:d0:d4:30:54:37:57:
2c:55:64:d7:e3:d5:6c:5d:d7:13:1c:16:00:5f:8a:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:3A:70:72:00:D7:33:18:D9:EC:A3:C3:DE:69:33:03:56:0E:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC19DB2CAC611EF82F3EB80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.58.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f5:cb:b2:aa:4f:30:7f:37:a2:7b:ab:1f:41:0b:f3:6f:73:
48:62:fb:d5:52:54:9c:32:8f:37:4d:c2:40:e8:da:13:86:05:
94:dd:c1:35:15:db:3b:e4:22:35:94:1f:a4:35:d5:c1:fe:14:
85:1c:df:5f:41:4c:72:8f:f9:67:a4:31:fa:30:75:75:87:80:
8d:f3:d8:46:a1:5a:1f:74:8d:ae:db:bf:c5:16:62:b3:13:47:
2f:4c:ce:85:4b:92:2f:11:ad:98:b3:05:e5:53:9a:9f:3e:50:
c2:37:0e:8d:60:4e:bc:c2:62:e6:dd:8e:02:41:63:b1:45:73:
27:09:5b:36:81:f0:11:9d:c7:7b:55:fa:72:32:37:29:e8:77:
82:a0:5a:9f:e2:fb:1e:75:f7:e5:36:d7:45:98:96:2b:f4:7b:
e5:14:9c:d0:bb:68:aa:43:24:de:c3:73:96:2f:d1:b0:1c:63:
2e:aa:d2:47:01:27:87:bc:41:67:4a:9a:0a:9a:7a:21:93:65:
bb:da:cd:7a:8a:37:e3:1a:18:27:13:87:d1:35:4c:42:54:ef:
5d:e1:54:a2:13:9e:91:46:20:61:89:49:7d:78:ad:56:43:79:
62:1d:7d:a5:4d:45:28:fd:b6:96:d3:96:90:bc:3e:f4:a9:c3:
48:1c:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:27 2025 by rpki-client