Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB2CB76D30D11EFB7298A9C762E951A.roa
File: 2FB2CB76D30D11EFB7298A9C762E951A.roa (raw, json)
Hash identifier: najyxO7JBWgGJSqTuDXcfNGk1SVdImMbPUWdb+MKGUY=
Subject key identifier: EF:CC:B2:70:EF:A3:94:25:7F:78:F6:98:F0:E1:43:95:F0:1C:21:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010833
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB2CB76D30D11EFB7298A9C762E951A.roa
Signing time: Wed 15 Jan 2025 06:51:46 +0000
ROA not before: Wed 15 Jan 2025 06:51:42 +0000
ROA not after: Mon 27 Jan 2025 06:51:42 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67635 (0x10833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:51:42 2025 GMT
Not After : Jan 27 06:51:42 2025 GMT
Subject: CN=67875b02-2105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:74:71:f1:33:ce:ed:7f:5c:8a:11:e8:30:
3b:3a:e5:e7:16:95:41:93:66:34:bd:94:7d:b3:44:
e6:15:a4:de:bc:49:b9:cd:62:d1:63:1c:2a:8f:30:
a9:d8:64:6d:7b:c4:13:c8:af:98:7b:6b:58:6a:d5:
61:a0:44:ee:da:94:88:e7:8f:be:c4:77:f3:e0:30:
33:ac:02:32:96:20:ba:20:f9:69:0a:b8:1f:76:a4:
68:62:ea:8b:22:0e:e9:e4:a6:18:cd:83:b3:ee:50:
f6:77:7f:38:97:82:a6:32:89:47:a2:64:21:9a:11:
a4:f5:0e:26:65:49:4b:18:4e:55:99:fb:25:f4:58:
7f:21:5d:e6:15:70:e4:5d:f1:2b:e7:93:4a:2e:bc:
e1:f7:cf:e1:bd:4c:a7:fa:5b:04:50:c5:af:ae:40:
8c:fd:16:b5:02:b0:d1:29:97:05:32:49:93:56:c4:
59:d7:66:07:61:04:bc:54:bc:c3:35:ff:b2:d7:ef:
6d:05:5e:54:83:b8:90:41:eb:bc:b9:17:b7:c1:25:
e8:d3:d2:e4:8e:76:d9:2f:47:42:12:e4:27:f6:f8:
08:8f:df:d7:fb:a5:a4:49:c5:de:a2:3a:d9:5e:31:
28:10:d6:72:40:95:8a:db:cd:c7:24:80:1c:2b:f5:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:B2:70:EF:A3:94:25:7F:78:F6:98:F0:E1:43:95:F0:1C:21:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB2CB76D30D11EFB7298A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
20:0c:1b:0b:4b:fc:ad:03:13:c4:ad:49:b5:cd:5c:47:1c:46:
99:5f:38:68:cc:18:de:93:36:35:2c:b4:d8:08:d3:5a:32:1f:
80:35:4b:09:c1:c2:eb:5d:a4:ab:f0:bd:c1:9c:41:6c:86:d2:
b1:35:e4:c8:8a:88:10:6e:f4:fa:5b:8f:e8:23:f1:52:fe:cb:
be:1b:60:20:89:cd:52:cb:ad:24:13:c8:ef:73:08:78:75:a2:
c5:fc:f8:61:27:b7:3b:9a:1b:fe:55:57:c0:3f:70:85:cf:37:
ec:18:13:f0:14:4e:6d:10:65:8f:0d:c2:3b:6e:69:47:91:03:
86:39:a2:04:3c:a7:5e:c0:17:a3:93:0e:88:6f:12:5c:db:6a:
27:b7:7c:c6:3b:d7:72:a7:6a:c1:aa:ee:ed:07:70:48:49:7c:
5f:c1:b7:df:85:72:be:fe:42:17:da:b7:91:2a:90:18:a8:c8:
7f:1e:b9:25:15:1a:86:95:0d:21:54:3a:08:d8:44:a6:96:40:
b3:75:ff:9a:8d:e7:0c:27:c2:d1:93:63:ff:f3:fb:44:11:af:
d4:b9:ae:b4:b6:b9:ca:cf:9c:2c:de:f5:8a:39:6e:bd:e3:06:
c0:92:c9:12:98:67:69:52:26:2b:29:6e:52:11:08:02:7c:3d:
08:79:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:09 2025 by rpki-client