Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2393F66AC9AA11EFB9946684762E951A.roa
File: 2393F66AC9AA11EFB9946684762E951A.roa (raw, json)
Hash identifier: hXtx4jMs6nFUvIXAkbfviKCGjOEzXmpd03nElSvugUc=
Subject key identifier: 7C:E3:44:1B:53:C8:1D:05:66:C7:C2:EF:AB:6E:F2:E6:D8:E7:11:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F69B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2393F66AC9AA11EFB9946684762E951A.roa
Signing time: Fri 03 Jan 2025 08:10:05 +0000
ROA not before: Fri 03 Jan 2025 08:10:01 +0000
ROA not after: Sat 18 Jan 2025 08:10:01 +0000
asID: 139646
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63131 (0xf69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:10:01 2025 GMT
Not After : Jan 18 08:10:01 2025 GMT
Subject: CN=67779b5d-0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:cc:fa:fd:c4:0e:ef:28:c5:d7:4c:a6:72:
5b:04:36:ad:35:56:4d:06:dc:f4:9b:f3:cf:dd:28:
49:24:e3:cc:a2:57:61:93:61:07:d1:47:cd:2e:2c:
12:cf:dc:f9:77:15:ca:78:b8:60:7f:59:c2:28:5e:
a6:63:2a:d4:d4:a7:77:da:d9:89:09:06:80:c6:1a:
7d:b4:ce:aa:59:3a:2b:e7:64:13:01:8f:2d:69:ee:
84:3e:8c:88:21:b8:64:80:5e:11:cd:2e:c4:f8:ed:
2a:58:3d:11:d7:9e:25:6a:48:ef:71:cb:78:8b:19:
e8:82:80:32:77:78:57:ea:76:bc:bb:14:b3:f4:e8:
8e:9d:96:e7:c1:e4:d3:f6:ae:ce:bf:a6:db:3d:e2:
ac:91:84:8d:fd:d2:55:18:d4:23:18:94:3e:a2:09:
32:7f:33:15:32:de:67:e7:d2:69:89:72:d5:f7:c4:
26:55:f0:ff:fd:5a:c8:80:6d:b2:87:26:25:04:8a:
0a:81:15:b6:12:63:bd:c4:de:8b:ed:26:78:1a:27:
ec:a5:61:e5:33:36:06:36:62:6e:02:05:81:93:f4:
64:fb:ea:b5:d0:79:20:22:5d:2a:e1:0e:13:27:74:
ce:23:5d:5e:05:db:92:58:cf:7a:b6:cc:40:a8:90:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:44:1B:53:C8:1D:05:66:C7:C2:EF:AB:6E:F2:E6:D8:E7:11:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2393F66AC9AA11EFB9946684762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
49:e4:0f:c0:d6:04:90:5e:00:e8:20:f7:06:11:da:e5:4a:9b:
f4:6b:d1:fa:85:87:c2:91:59:38:91:2d:38:56:99:cc:ab:42:
a0:d4:45:02:92:00:67:de:d5:66:80:23:ee:93:c0:fd:a5:48:
b5:f0:06:1a:9d:ee:88:ee:95:bf:e5:51:ef:c2:18:ee:ed:0c:
ec:35:1d:57:5d:c7:d2:d0:a2:fe:a1:fd:6f:ce:ba:05:1f:9b:
fd:98:31:2a:cc:c5:85:8b:92:41:dd:f2:3d:f1:2e:ed:44:63:
f9:47:91:ed:4c:f2:a8:e5:d2:ab:df:a3:6c:ea:a6:4f:e1:dc:
d0:c3:cf:8c:f2:8f:8f:03:69:92:c0:31:c5:e4:f1:59:07:03:
87:c2:ef:a4:c1:9a:5e:75:68:a0:80:16:21:f7:7c:0a:3a:42:
39:c3:ac:d2:5b:3a:dd:4b:6b:32:2a:39:39:01:c1:1e:2c:65:
7c:ee:81:f7:01:06:dc:8d:cf:c0:7b:bf:b8:03:9a:c9:d8:6e:
fe:fc:86:58:e2:8d:c9:ab:31:e4:d0:83:f7:38:c6:ae:b9:c1:
8d:4b:c0:7f:6d:03:24:5c:3b:07:85:8c:c5:ce:53:99:a6:0d:
af:e9:1a:57:e7:09:35:0f:03:28:a1:7e:ae:f0:34:e4:a4:68:
75:4e:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:36 2025 by rpki-client