Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/407A05B2B92411EF9BF92475762E951A.roa
File: 407A05B2B92411EF9BF92475762E951A.roa (raw, json)
Hash identifier: 43ClF/6P6r/6FphNtn3LuSUxG1ICGt/RBvAHs0TDrz0=
Subject key identifier: B3:9B:01:6A:7D:A6:43:6F:3A:DE:00:B3:F2:AB:94:ED:44:F0:9F:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/407A05B2B92411EF9BF92475762E951A.roa
Signing time: Fri 13 Dec 2024 07:31:22 +0000
ROA not before: Fri 13 Dec 2024 07:31:19 +0000
ROA not after: Sat 25 Jan 2025 07:31:19 +0000
asID: 44559
IP address blocks: 45.200.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58097 (0xe2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:31:19 2024 GMT
Not After : Jan 25 07:31:19 2025 GMT
Subject: CN=675be2ca-5d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:48:fe:41:3c:22:9b:fe:e8:50:43:f9:45:
9c:a0:cf:75:c4:4c:5a:57:79:53:f8:1d:51:36:52:
65:61:f5:93:d3:a4:4f:cc:96:15:a7:52:54:a1:62:
f1:fd:ea:66:d5:cc:a7:6b:22:a0:7b:36:64:4b:93:
43:a4:8c:61:bf:d8:f8:f9:b8:2c:dd:35:24:2f:a9:
65:28:c5:ab:ba:38:b3:25:2b:0c:51:25:b3:69:76:
5d:b8:f9:03:1b:2f:f0:5d:0e:25:b7:f5:4b:0f:57:
10:23:78:89:45:5f:f5:2f:22:7e:2b:61:ac:8c:1b:
91:13:29:9e:e7:ca:78:ce:cf:f6:7a:52:ad:78:8b:
54:13:80:f5:79:18:39:4e:34:06:ef:11:9d:b0:ff:
55:05:b6:b7:06:32:76:18:92:ee:59:c6:d9:59:44:
23:bd:9d:b7:dc:bf:c0:96:87:78:4a:5a:82:b9:d7:
3b:0d:5b:95:c8:97:d4:7e:2c:eb:64:4c:de:f6:a0:
82:42:12:67:19:e2:89:2a:c0:eb:25:b5:94:19:07:
9e:83:d4:b3:e6:9b:b7:fa:7e:bc:fd:b3:fb:3a:bb:
30:87:1a:05:b2:27:ef:d3:65:70:78:6d:d7:0c:7c:
23:2e:f7:a8:4d:15:d0:73:67:0e:4f:3c:dd:38:02:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9B:01:6A:7D:A6:43:6F:3A:DE:00:B3:F2:AB:94:ED:44:F0:9F:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/407A05B2B92411EF9BF92475762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.180.0/24
Signature Algorithm: sha256WithRSAEncryption
64:72:88:97:7b:a2:3f:36:18:19:39:dd:b1:0d:11:9d:e8:12:
50:10:64:18:9b:43:d7:1a:70:5d:22:e3:37:9c:45:18:51:87:
eb:cf:76:1f:1b:0f:79:ce:20:3c:7d:86:63:0c:2a:c9:7c:de:
8f:05:65:f4:62:06:98:16:15:a4:96:6b:b7:34:4d:14:2c:99:
ba:9d:38:cd:ed:5c:11:96:fc:c7:3d:01:da:ac:a9:15:c9:fe:
d5:7a:a6:ba:52:90:7c:e5:70:87:30:74:37:3a:87:74:66:65:
a5:bf:1a:22:80:af:1f:f1:77:18:94:a3:76:ad:10:67:59:80:
1a:72:95:a6:5e:de:16:35:48:ab:22:47:74:d7:27:be:f8:08:
bd:a0:d9:4c:aa:a7:0d:c1:c3:20:c5:e0:95:06:90:a0:4d:c3:
ff:46:b6:34:b3:c1:10:96:45:b8:37:f1:6f:90:80:1d:d3:b6:
3a:f0:12:91:ec:60:d9:39:9a:dc:e2:e7:45:e9:a2:9b:0e:2f:
5e:8d:d6:33:97:82:4b:27:46:60:dc:d1:2a:10:39:1e:98:0d:
4c:52:b4:ae:8e:e2:fe:1d:87:6c:d2:ad:9b:36:5c:0a:78:65:
a6:be:ed:57:31:49:66:15:e0:9c:13:35:8c:49:a4:21:62:74:
38:53:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:50 2025 by rpki-client