Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245C3C3ABF9E11EF97FFBFA5762E951A.roa
File: 245C3C3ABF9E11EF97FFBFA5762E951A.roa (raw, json)
Hash identifier: CeXXrCQSOgQu3VLZzLQpRtSgyM9MCrx2CPYp4IwjeiY=
Subject key identifier: 3B:97:83:D0:A8:84:EA:CA:AA:4F:15:09:2C:61:D7:6D:04:68:FC:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245C3C3ABF9E11EF97FFBFA5762E951A.roa
Signing time: Sat 21 Dec 2024 13:19:01 +0000
ROA not before: Sat 21 Dec 2024 13:18:57 +0000
ROA not after: Fri 31 Jan 2025 13:18:57 +0000
asID: 62816
IP address blocks: 45.205.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59326 (0xe7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:18:57 2024 GMT
Not After : Jan 31 13:18:57 2025 GMT
Subject: CN=6766c045-a256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:79:b8:d7:34:ac:1f:33:cd:2b:a0:3c:cf:
78:a4:6c:ad:e6:10:9f:95:31:8b:df:3a:e7:22:97:
d5:4f:ff:07:8e:ea:ea:06:45:45:98:be:a2:72:dd:
f5:09:50:89:08:91:37:83:12:30:83:3b:69:88:37:
9d:41:2c:51:38:8f:52:ad:23:b0:7e:1e:83:28:80:
5e:2d:7d:63:90:02:e2:35:89:bc:18:4d:3a:17:71:
e0:c5:0c:99:76:d3:5f:00:6e:46:0f:85:09:f0:80:
5b:e8:d2:dc:31:ca:8c:50:6f:10:bb:bc:82:4d:aa:
c5:c6:a6:a7:66:ea:05:03:e3:25:43:0e:69:14:d7:
b1:7e:33:9c:c3:9e:c1:6b:11:3b:8a:5b:9d:cb:96:
f4:0d:20:50:f2:3e:cb:29:be:2d:f9:aa:30:19:b4:
f0:a4:73:b0:cf:3c:e4:37:7a:b6:a5:dc:b5:4b:8f:
07:d0:11:5b:b5:1d:97:c7:f7:12:53:83:0e:fc:c7:
53:58:a5:6f:0b:9a:c4:73:59:73:7d:40:66:38:91:
a6:fd:5e:be:fa:35:0f:57:1e:a1:f6:b3:5d:4d:b6:
31:24:07:40:4e:80:4a:c5:13:84:da:a1:d9:f2:27:
10:7d:6d:95:33:4a:1d:87:a5:8b:4e:df:ff:3e:09:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:83:D0:A8:84:EA:CA:AA:4F:15:09:2C:61:D7:6D:04:68:FC:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245C3C3ABF9E11EF97FFBFA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.174.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0a:aa:3c:ab:a0:7b:f8:21:8d:8d:ec:26:78:87:ac:f4:f7:
fc:f9:05:1c:d6:b7:3b:24:c9:6e:6d:c5:5c:19:4c:52:89:58:
a2:12:a2:83:e4:c1:ea:b8:74:9e:62:c8:87:3a:29:18:6b:a2:
e7:cb:5d:e3:03:ae:3f:09:4f:ca:9e:2f:d3:3d:41:df:a4:6e:
fa:c5:5a:a2:54:4a:d7:80:51:48:9f:e7:74:d5:e0:a3:0f:34:
46:fa:d6:0b:5c:5f:d5:28:dd:e2:0a:7f:d5:41:c8:38:c3:24:
71:99:96:d1:2b:70:40:af:0f:a6:73:b5:52:99:aa:d4:7d:ae:
a6:50:a2:4c:9c:2a:b8:7b:c1:10:79:c3:00:16:f0:34:63:9e:
65:1e:d6:87:99:37:ee:2f:3f:c8:17:cd:7b:9b:03:19:32:aa:
39:aa:68:a8:6b:70:c1:a8:90:62:30:3e:d5:7b:10:d5:52:0d:
ea:26:ec:e8:78:24:78:49:1b:68:cd:cd:0c:1e:68:a2:a9:22:
85:00:37:b2:5b:40:32:f3:9e:ba:7a:a2:8f:75:0b:63:d6:05:
14:b6:33:d1:61:2c:8a:a2:6a:bf:7c:09:dc:18:58:4a:41:af:
66:d0:5e:1e:87:cf:b6:28:f5:a5:d6:0e:de:7b:8f:8e:b6:62:
a7:9c:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:33 2025 by rpki-client