Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEC6810B92811EFA524888C762E951A.roa
File: 2CEC6810B92811EFA524888C762E951A.roa (raw, json)
Hash identifier: BCUPoQ2EVyelaI3+4R8n0FQqT+DpucBsFmgkegU/K1c=
Subject key identifier: C4:98:8A:51:3A:13:43:FD:7B:9A:29:FA:6C:C5:6E:70:E9:DB:F3:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E321
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEC6810B92811EFA524888C762E951A.roa
Signing time: Fri 13 Dec 2024 07:59:28 +0000
ROA not before: Fri 13 Dec 2024 07:59:24 +0000
ROA not after: Sat 25 Jan 2025 07:59:24 +0000
asID: 44559
IP address blocks: 45.199.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58145 (0xe321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:59:24 2024 GMT
Not After : Jan 25 07:59:24 2025 GMT
Subject: CN=675be95f-c810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:54:f9:24:ec:76:d3:bd:12:1d:9b:f3:64:
e1:21:12:90:cf:57:9d:17:d6:5a:b9:32:4d:68:c1:
75:95:0c:52:40:33:1b:91:0a:8a:ac:37:e4:94:4b:
e3:9e:c7:23:c2:69:98:23:52:17:06:f7:d9:2a:74:
99:65:5b:97:18:80:51:9f:82:81:02:51:19:bd:8d:
8e:cc:d7:67:bc:5e:11:e2:81:9d:e2:98:e9:7e:dd:
e6:5c:1d:0e:13:16:1b:76:55:88:18:f5:f7:b4:5a:
8b:b3:14:1f:fb:3a:7a:73:fe:ed:17:de:66:34:f7:
4d:99:ae:ac:8b:9d:24:6b:f1:1b:6b:63:19:6f:93:
fd:76:23:1a:2e:cb:18:76:7c:28:bc:4f:3c:1a:47:
6e:56:cb:2a:48:20:1f:d8:cd:8f:d6:3a:21:9d:d2:
89:65:d5:e3:8b:b6:90:73:84:5e:26:97:16:d8:db:
30:76:16:4f:88:37:77:3d:f1:a4:04:de:66:75:b0:
45:db:65:8e:bf:27:28:19:11:5d:1a:3b:f6:8a:26:
60:c4:ee:76:8b:cf:c5:de:52:da:62:f1:42:6e:c9:
e9:11:7c:b3:29:13:ef:af:5b:56:01:5a:35:9d:4a:
35:da:4e:f9:7f:10:23:2d:8c:8f:40:9e:98:0d:08:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:8A:51:3A:13:43:FD:7B:9A:29:FA:6C:C5:6E:70:E9:DB:F3:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEC6810B92811EFA524888C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.216.0/23
Signature Algorithm: sha256WithRSAEncryption
57:fb:73:54:de:91:09:0b:89:5f:93:a6:0d:3d:88:c9:c2:ff:
ad:3c:9d:dd:4f:c6:56:b7:50:e6:7b:1a:7d:71:3d:b9:d5:9f:
f9:09:0c:95:20:26:b0:67:e2:4c:be:3a:c9:ab:eb:80:ad:b5:
3c:f7:43:7f:8f:3c:52:64:d4:ef:a0:ba:74:81:af:c3:ca:36:
42:b9:4a:50:2f:ae:eb:a7:32:74:a4:b2:ee:c7:74:20:a7:f5:
98:73:95:ee:f3:ca:9a:12:24:cc:a6:c8:57:ad:e6:3e:d6:d6:
1a:3b:b0:5a:0a:c1:17:37:8e:d2:ad:a7:43:7f:41:59:85:c4:
63:a3:fb:94:b0:85:e2:4c:d0:42:61:eb:42:09:d3:4a:d0:a9:
77:77:6a:c7:78:26:6f:3e:ca:eb:32:68:ca:bf:7d:af:12:81:
25:30:39:e8:56:24:04:6b:17:2f:33:dd:95:37:fe:04:94:eb:
9a:f2:46:af:12:22:9c:08:b5:15:24:a9:49:a2:3c:cc:5b:9b:
d8:73:a3:25:f6:1d:ec:b2:bd:b4:f4:c4:e5:73:ba:8b:de:c8:
98:39:72:da:f5:ec:5b:44:36:07:78:34:12:f2:37:7d:e0:7b:
97:de:c5:a1:e2:4d:04:db:28:42:e5:1f:60:04:13:78:80:2f:
c5:c0:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:34 2025 by rpki-client