Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45481BF4C9B611EF95B39850762E951A.roa
File: 45481BF4C9B611EF95B39850762E951A.roa (raw, json)
Hash identifier: g2IdWOYG5zueIiA2/NaFvq37TVyZCSFZMZKwgZ8gLQ8=
Subject key identifier: 44:E9:C4:FA:CF:9A:1B:22:3C:AF:2F:0C:E8:8A:92:3F:BF:08:28:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45481BF4C9B611EF95B39850762E951A.roa
Signing time: Fri 03 Jan 2025 09:36:55 +0000
ROA not before: Fri 03 Jan 2025 09:36:52 +0000
ROA not after: Sat 18 Jan 2025 09:36:52 +0000
asID: 139646
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63189 (0xf6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:36:52 2025 GMT
Not After : Jan 18 09:36:52 2025 GMT
Subject: CN=6777afb7-0a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:eb:32:ff:12:2f:f5:bc:97:6b:19:1d:97:
73:40:b4:60:8c:c0:40:60:34:89:2d:9a:a8:35:a8:
f5:91:0e:61:76:c0:27:e9:87:34:a2:f0:6c:f8:27:
f0:98:3c:6d:56:36:ab:26:0b:da:ce:95:e8:81:11:
05:da:ea:6d:c2:90:19:3d:18:8b:23:70:89:92:38:
0f:af:90:cc:c2:46:52:6d:a0:9f:18:8f:2c:e4:3e:
d7:53:50:6d:48:fb:3b:6b:46:7a:d2:75:5c:0b:06:
12:96:18:de:69:16:da:6d:2b:84:fd:78:2f:35:f3:
62:fe:41:03:2e:cf:ae:3c:24:4e:fd:85:25:e1:06:
be:66:ea:45:be:7f:04:91:d5:15:b5:1a:4a:b7:ca:
f6:54:99:b9:de:c7:b0:f4:a2:30:e3:8e:2c:e8:74:
65:d3:0a:c7:9e:d9:74:7b:34:73:ef:9c:97:45:94:
4a:65:8a:9c:2e:aa:0c:bf:12:3b:a3:fc:9f:a6:1e:
bd:2b:e2:10:bd:6e:a9:62:af:6e:a9:1f:f7:34:26:
66:03:bc:38:d6:d8:39:39:73:e9:1b:9d:1a:ef:77:
a8:29:14:a5:5b:a6:0b:a6:4d:96:d3:98:40:29:e6:
da:cc:e4:d3:5c:44:1e:3f:27:b1:33:cd:1c:69:5f:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:C4:FA:CF:9A:1B:22:3C:AF:2F:0C:E8:8A:92:3F:BF:08:28:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45481BF4C9B611EF95B39850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
08:4b:cb:04:c1:95:75:01:8b:ab:e4:41:d3:67:86:e1:e2:6c:
cd:32:28:4e:ca:f1:65:67:ec:c9:d5:fc:b1:57:2a:f6:26:d8:
ca:80:62:bb:54:91:01:a9:0f:c4:c8:9e:65:bb:ce:e5:29:bb:
49:ee:54:5c:c1:46:4d:d7:2b:0b:34:05:28:90:17:58:31:00:
f1:72:b4:4e:41:a2:74:d5:fd:f1:a8:6c:d0:83:5e:b5:9a:f1:
5f:a2:4b:7d:68:b4:6f:a9:20:c2:a8:18:ed:76:be:97:ad:06:
d2:79:65:90:63:70:f7:10:48:20:92:1e:4b:9c:20:f7:18:24:
70:59:08:be:64:08:d5:d6:e1:99:9b:2e:c2:bd:b9:f3:85:c0:
65:02:09:8a:e1:0c:8c:27:c8:1b:24:53:89:39:d6:86:65:44:
47:a1:08:24:06:1c:cc:ca:93:63:6d:88:7d:89:6b:83:43:1a:
fc:70:90:79:5f:dd:9f:f6:79:18:6b:8d:c5:6f:34:20:94:95:
dc:aa:ac:fb:17:8e:84:1c:d6:16:db:36:d3:44:c2:26:41:3a:
d0:38:7c:3a:f7:08:48:e6:77:c9:39:49:4e:33:24:67:f6:23:
3a:b3:de:0e:37:fe:55:c7:78:16:e8:45:44:92:fb:99:ac:cf:
a9:27:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:21 2025 by rpki-client