Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381A4634CAC711EFBA375C87762E951A.roa
File: 381A4634CAC711EFBA375C87762E951A.roa (raw, json)
Hash identifier: C64sLY5gKaT7dru0PEGLYXjohe0VHriqhtcmR1hNpa4=
Subject key identifier: 2C:22:07:2F:B9:CA:9E:EB:AA:13:6E:6A:C9:F8:AD:A2:37:D1:3D:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F740
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381A4634CAC711EFBA375C87762E951A.roa
Signing time: Sat 04 Jan 2025 18:10:46 +0000
ROA not before: Sun 05 Jan 2025 18:10:42 +0000
ROA not after: Fri 17 Jan 2025 18:10:42 +0000
asID: 39600
IP address blocks: 45.204.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63296 (0xf740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:10:42 2025 GMT
Not After : Jan 17 18:10:42 2025 GMT
Subject: CN=677979a6-981c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:65:99:e1:fc:ad:8b:c9:6b:f7:7b:c6:a9:
da:01:ab:45:eb:c5:bd:42:2f:b8:21:bd:08:26:c9:
72:67:2d:2f:7a:c1:ff:ba:fb:f3:df:f8:1a:87:cc:
cc:6d:4a:f2:56:6c:ec:f5:ea:4e:d1:fe:ec:8f:4b:
52:5f:4f:c4:57:ad:8f:cf:7e:bc:b7:1a:01:a8:17:
44:bd:48:ac:89:0d:f1:f3:62:4c:56:5b:3c:0c:ad:
89:32:3a:43:85:b9:0d:98:ff:cf:3d:bb:d0:0c:34:
56:30:15:f6:00:8f:f6:4c:b4:5f:9a:63:be:9b:aa:
22:2b:36:3d:a2:cd:22:6e:01:9c:33:30:5a:8a:ce:
9d:d8:0b:97:17:2a:2c:84:89:1f:ca:ee:a0:2f:b5:
75:78:9b:73:39:b7:80:7f:4e:b3:9e:a7:2e:c6:c3:
f0:3b:ab:ee:ca:f9:8e:93:32:48:db:f8:83:6a:38:
d9:56:7f:f3:9a:69:96:9a:c4:aa:0d:e4:65:d6:0e:
99:75:8e:a9:8f:ec:c6:a1:c1:b0:6b:b4:07:6e:6a:
0d:ef:c3:4d:f8:db:17:3c:98:1e:ab:f5:4b:80:ba:
0f:ee:94:da:06:ce:f4:8f:39:94:67:bb:88:87:c3:
6a:2c:27:d2:7e:89:0c:77:df:4d:16:32:17:2b:14:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:07:2F:B9:CA:9E:EB:AA:13:6E:6A:C9:F8:AD:A2:37:D1:3D:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381A4634CAC711EFBA375C87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b4:cd:76:1e:89:4d:d1:7b:0c:92:6a:54:72:5b:e9:09:11:
67:11:1c:9f:5a:ac:e5:b2:32:2f:97:33:f9:e2:96:41:19:0c:
18:ad:20:70:13:81:e5:2b:4e:cd:11:a7:62:97:8d:cf:a3:2f:
68:36:eb:d0:88:46:21:85:c3:25:67:dd:25:b1:55:e6:b4:e5:
87:eb:b1:11:6c:d3:83:6e:02:50:51:a9:f5:c0:3f:62:49:ef:
82:b3:77:ef:ea:9b:cc:52:c3:e1:92:d8:15:f9:14:4c:6b:57:
33:93:fc:9d:13:59:2e:ae:28:26:0d:13:75:5f:c6:4a:63:7d:
07:bb:92:c0:db:c2:a4:18:f9:ff:04:67:a5:3c:d1:03:e2:c5:
bc:98:d6:55:95:3b:6c:c8:e8:f5:12:79:77:6d:19:5f:62:6b:
58:4d:08:af:c1:84:38:27:4a:0f:5a:ef:e4:0e:e2:2a:98:ec:
87:60:9d:42:a9:4e:73:f1:63:2d:90:5e:b4:95:bd:4d:81:15:
e0:d1:27:50:67:66:04:ed:32:d7:39:02:a3:5b:fe:d0:28:51:
e0:29:b5:87:02:d4:fd:e7:46:82:13:db:66:7b:45:0f:46:85:
2e:29:e2:f9:04:77:19:65:62:bc:13:a6:23:d9:f9:23:dd:5b:
7b:45:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:57 2025 by rpki-client