Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB5BB5CCE9E11EFA9979D81762E951A.roa
File: 2EB5BB5CCE9E11EFA9979D81762E951A.roa (raw, json)
Hash identifier: Pvx47twB3kSUHSEnVSKFQdY7oa9kbhOv+CxqGtXV8G0=
Subject key identifier: 07:EB:3A:72:85:85:B1:D5:7D:9C:77:F6:2C:24:49:42:BC:55:63:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010430
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB5BB5CCE9E11EFA9979D81762E951A.roa
Signing time: Thu 09 Jan 2025 15:27:06 +0000
ROA not before: Thu 09 Jan 2025 15:27:02 +0000
ROA not after: Fri 24 Jan 2025 15:27:02 +0000
asID: 39600
IP address blocks: 45.203.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66608 (0x10430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:27:02 2025 GMT
Not After : Jan 24 15:27:02 2025 GMT
Subject: CN=677feac9-f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:95:34:ce:73:3b:20:58:89:ef:35:12:18:
53:53:a9:1e:77:f5:8c:b7:81:42:95:c0:87:14:13:
ec:69:fa:de:a3:2f:b2:7d:c4:7d:97:6e:4d:8d:8b:
c9:8e:02:7e:1b:95:3f:09:e7:9c:75:0a:9b:8d:3e:
5e:d8:58:75:7d:83:c5:69:f4:0e:4c:71:23:39:15:
07:05:4f:9a:de:ac:ab:fb:bc:1c:19:86:fe:0b:33:
bc:05:be:9f:30:c0:4f:b7:f3:26:fa:6a:e2:c2:37:
9e:14:73:d8:5e:a2:ef:4c:99:11:4b:b7:84:7e:c6:
7e:eb:e3:27:54:5e:59:74:d6:53:2c:4c:03:86:06:
23:fb:5c:9e:d3:63:ad:6d:8b:1e:70:c5:19:ee:9b:
f2:a5:84:87:12:ab:bc:1d:5e:d0:33:cd:37:e6:9e:
fb:60:38:c3:1e:c1:8a:a8:87:ea:33:f0:d7:a3:6c:
01:2c:5b:3b:b7:59:fd:05:49:a0:4a:71:38:0a:39:
a1:5e:2a:b2:ba:c7:c8:a8:15:39:3a:b9:cb:fb:54:
4a:b5:cf:e0:0c:42:5e:79:01:96:6c:0f:9b:6b:c7:
f5:2d:4c:84:7c:1b:ae:eb:ae:6d:94:c1:74:d8:e5:
2d:33:5c:ee:83:b5:9c:7d:8b:1f:59:25:15:b9:8e:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:3A:72:85:85:B1:D5:7D:9C:77:F6:2C:24:49:42:BC:55:63:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB5BB5CCE9E11EFA9979D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.62.0/23
Signature Algorithm: sha256WithRSAEncryption
05:cf:7b:6a:63:6c:62:fa:53:24:b2:1b:35:8c:6e:6d:21:b5:
b6:80:5b:ec:5e:c5:97:1e:9b:20:f6:0c:cd:e1:70:d7:c0:e8:
c7:51:bd:a7:8a:4f:17:8f:b3:cb:02:f8:b3:d3:cb:cd:49:d7:
f8:eb:19:0a:b7:1c:1d:93:f8:8c:93:28:e3:9f:2d:4d:d8:67:
d6:20:3d:df:ad:ed:d7:1a:33:2a:e2:9f:e1:e1:61:86:0c:fe:
b8:dd:b0:c3:33:33:3a:db:85:2e:6a:cc:7c:d2:ca:d5:72:6c:
78:eb:7e:ef:7e:bb:ad:da:47:86:10:7f:8b:37:f9:7b:62:f4:
16:ce:61:3a:a4:be:87:b5:ee:60:c0:98:bc:b8:40:c6:1d:29:
eb:4f:45:0e:a7:1a:ea:36:9f:50:13:47:96:18:7f:e6:20:2b:
a0:18:25:52:83:22:9b:90:c2:a9:9b:2e:87:af:02:c7:84:62:
1e:c7:1e:fd:0e:a5:83:72:ed:67:da:dc:f6:6c:11:71:ba:ca:
7c:9b:9e:45:76:da:be:16:7c:a3:d8:8c:f4:85:f1:28:fd:44:
30:69:4f:e9:68:d9:10:a8:ae:51:0a:38:ed:13:48:0b:3c:5b:
0e:37:e7:4a:c5:24:2f:25:26:b0:10:79:8c:e8:16:37:a9:37:
5f:ac:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:50 2025 by rpki-client