Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B3665CC9B711EF8A51DA56762E951A.roa
File: 35B3665CC9B711EF8A51DA56762E951A.roa (raw, json)
Hash identifier: ktA2gFzw/eeeXEXoU0jLzCXItGpDTW9UWvyQrBLGY7M=
Subject key identifier: E1:CE:1D:35:2A:12:19:FD:5D:3E:1E:25:90:C1:49:8C:AB:F0:7B:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B3665CC9B711EF8A51DA56762E951A.roa
Signing time: Fri 03 Jan 2025 09:43:39 +0000
ROA not before: Fri 03 Jan 2025 09:43:35 +0000
ROA not after: Sat 18 Jan 2025 09:43:35 +0000
asID: 139646
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63193 (0xf6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:43:35 2025 GMT
Not After : Jan 18 09:43:35 2025 GMT
Subject: CN=6777b14b-8629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:17:67:e2:62:06:25:b9:89:75:c2:c9:68:
97:4b:ac:4b:4a:be:ae:d6:81:36:bb:aa:3e:74:2c:
df:df:83:11:3b:cb:2f:4b:7d:49:de:a9:fc:3c:3d:
e1:9e:15:30:0c:00:62:c1:1c:c7:dd:02:dc:82:4b:
af:29:f2:ce:b1:bb:ce:9a:37:a5:73:73:b6:c6:f1:
e1:59:6c:32:4e:2d:c3:95:29:7a:64:a1:ac:27:05:
f1:58:54:1d:e4:1a:6e:aa:09:15:1a:f6:62:7d:85:
6a:b9:96:87:6c:35:a9:77:25:dc:69:38:ee:43:06:
b1:b8:2e:92:66:48:fd:e0:a6:10:be:ee:12:80:ad:
a9:16:74:db:f6:3e:5f:ce:9a:f5:3f:61:47:93:19:
3c:35:2f:5a:3c:39:18:8d:78:c6:3f:7e:86:fa:e6:
45:93:11:1d:06:bc:ef:ef:93:41:26:3e:9b:4e:31:
6a:36:d0:f1:f2:27:e3:46:95:0b:4b:cd:97:50:66:
2c:a4:9a:c2:c2:e9:e6:dd:9a:41:7d:79:58:50:31:
58:ec:cd:02:cd:ef:2b:38:ed:77:56:05:52:dc:96:
ae:6b:b8:4f:bd:d9:8d:53:e2:9b:f4:1a:ba:e4:67:
31:e7:39:e6:a4:0e:a6:51:e8:44:b6:8d:17:41:b5:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:1D:35:2A:12:19:FD:5D:3E:1E:25:90:C1:49:8C:AB:F0:7B:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B3665CC9B711EF8A51DA56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
62:c2:68:28:e7:9b:6b:de:2f:02:0e:46:a9:27:dc:1e:04:c0:
be:e7:6f:a2:2f:ab:f7:82:02:e3:d5:0b:9c:bb:d0:ad:7e:6f:
a2:f2:5d:ec:85:99:17:e4:3e:7c:c1:a2:26:e8:20:b0:64:73:
59:a7:39:db:3f:b7:f6:4f:0a:ca:56:7c:08:c6:0a:db:d0:53:
e9:cd:91:a3:40:38:42:bf:07:b0:09:92:9a:1c:2d:9f:7c:7b:
2a:ab:b3:05:55:4e:22:7e:8c:c3:80:69:3e:b2:15:49:12:86:
c0:45:8d:f6:e6:30:f1:d6:9c:ae:ba:d8:39:d7:1a:a7:87:2b:
81:7a:40:26:b4:45:c4:82:33:bf:25:27:08:02:13:4d:05:55:
45:3c:c7:60:b3:44:18:fa:6c:d4:6b:f6:95:c5:5b:3c:79:86:
00:50:3e:6f:2f:0c:1e:98:58:65:b3:09:a7:28:87:45:d3:52:
e7:bd:ea:ca:f0:07:9e:09:3a:c9:36:2e:e1:7c:a2:6a:a7:ae:
b8:e4:39:8a:b3:f5:d3:45:0f:6f:37:a8:00:78:3e:20:89:c3:
d1:36:a7:ca:71:fc:aa:22:b2:e0:c1:60:9f:c0:94:d3:b1:d3:
e3:32:7f:18:c6:7a:9c:62:67:c5:3b:d6:7d:4e:88:3e:cd:f1:
a4:5b:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:33 2025 by rpki-client