Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D481B72CE7F11EF875542BD762E951A.roa
File: 1D481B72CE7F11EF875542BD762E951A.roa (raw, json)
Hash identifier: FGidpX2cPxNf37PYP5ISLP7medYs8fYzYWy7CKVh/OM=
Subject key identifier: 46:8A:24:A7:09:5B:A9:5B:11:70:38:B0:E8:D8:36:86:7D:34:EE:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010384
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D481B72CE7F11EF875542BD762E951A.roa
Signing time: Thu 09 Jan 2025 11:44:42 +0000
ROA not before: Thu 09 Jan 2025 11:44:38 +0000
ROA not after: Sat 01 Feb 2025 11:44:38 +0000
asID: 17561
IP address blocks: 45.203.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66436 (0x10384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:44:38 2025 GMT
Not After : Feb 1 11:44:38 2025 GMT
Subject: CN=677fb6aa-524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:5d:5c:84:9d:c4:b8:8a:45:47:f3:71:2b:
42:16:20:ef:3f:55:82:cc:89:54:d4:0b:ea:64:0f:
bf:70:f6:68:6e:f7:ed:48:0a:97:76:ba:9a:86:df:
cc:dd:0a:2c:42:e7:8e:a7:23:de:74:59:d4:1a:ee:
68:68:c9:a8:3c:c2:bc:75:9f:88:4f:9e:43:62:72:
7c:d6:8e:00:16:8b:6c:b5:c5:2a:08:b7:2a:60:d0:
a2:92:a0:5e:f8:f5:4f:73:34:86:ea:5a:35:de:dc:
a7:78:49:e1:a4:79:94:a8:a2:52:c7:61:94:b9:f3:
b3:a6:19:1d:59:75:9f:92:8f:94:9e:6c:83:e7:55:
73:37:73:9d:49:41:55:9b:a3:c8:9a:9e:fa:1b:01:
39:79:63:e8:5f:68:ea:f5:f2:10:90:bc:68:5b:d6:
2d:9d:17:9d:bb:b4:99:d3:bc:05:f8:e5:40:22:ca:
73:88:2b:dc:dc:36:0a:34:34:f3:0b:4d:db:22:00:
6a:8b:67:34:0b:54:50:fe:08:19:eb:86:a5:8c:75:
d2:a4:bf:b4:68:24:5d:b6:24:fa:18:0a:87:d4:fc:
2a:cb:98:b4:95:1e:69:1b:1d:8c:e7:70:dd:d0:c4:
d9:a9:af:22:14:98:2f:c8:b5:1f:fa:6a:b7:49:fb:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:24:A7:09:5B:A9:5B:11:70:38:B0:E8:D8:36:86:7D:34:EE:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D481B72CE7F11EF875542BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5a:af:06:71:e7:0b:f0:13:36:8f:72:f6:4c:34:14:f3:d9:
55:34:e4:42:6a:34:b2:72:33:ad:b7:fd:18:d6:2e:33:6e:e5:
9f:57:ba:6d:9a:8e:1b:b4:6e:d1:85:28:86:da:0d:44:26:d1:
c6:06:2e:eb:18:35:33:27:a7:af:6e:9f:3e:c0:6e:81:74:46:
bb:11:df:7c:b6:2e:98:f7:da:ea:d6:92:b9:f6:58:62:8a:23:
0f:8b:f4:52:ed:cd:0b:d7:22:21:1f:3d:b1:ad:24:0a:2c:92:
05:eb:70:14:dd:1c:f7:8b:3a:46:84:ce:c5:64:dc:a1:08:56:
05:fc:e6:dc:90:84:a5:43:15:e5:93:8d:b1:98:6c:db:89:d7:
35:a9:41:6d:6e:eb:48:c9:de:b1:f5:89:46:ce:26:2f:a6:3e:
b5:6b:b1:d3:4f:ec:a3:73:13:45:a4:43:c0:91:8e:ac:94:ad:
7f:95:4b:4e:36:87:c5:f3:bd:ee:11:43:68:dd:be:26:22:a0:
57:94:0a:29:29:92:42:b9:95:20:cc:31:8d:63:e7:94:c3:15:
64:50:7b:55:c2:05:6a:0b:00:1b:f6:bc:20:fb:f1:d7:8a:75:
1d:30:ba:19:74:c6:b6:a4:82:d5:4f:db:90:fc:0b:0b:5b:75:
5f:a5:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:13 2025 by rpki-client