Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A959FC0CE8211EFAC4CF552762E951A.roa
File: 4A959FC0CE8211EFAC4CF552762E951A.roa (raw, json)
Hash identifier: +6SsZ6xvNWL745k1qNgJPDNX0bvi0w8XHZJri3RTd00=
Subject key identifier: 5C:88:A1:76:2E:CA:9D:AF:B8:30:05:D3:EF:30:BE:4C:03:77:A8:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A959FC0CE8211EFAC4CF552762E951A.roa
Signing time: Thu 09 Jan 2025 12:07:26 +0000
ROA not before: Thu 09 Jan 2025 12:07:23 +0000
ROA not after: Sat 01 Feb 2025 12:07:23 +0000
asID: 17561
IP address blocks: 45.203.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66479 (0x103af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:07:23 2025 GMT
Not After : Feb 1 12:07:23 2025 GMT
Subject: CN=677fbbfe-d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:8c:ea:87:e3:6f:4a:83:7f:e0:20:f1:3b:
d1:d6:06:58:a6:6c:c1:ab:2f:63:94:3a:0b:ba:50:
11:fc:0d:d2:bf:72:a1:d6:1d:f1:5e:df:5c:3b:62:
05:2c:78:bf:e3:35:ce:7c:52:b4:53:fe:14:9c:c2:
e5:73:76:02:50:c0:60:ee:3d:84:fb:1c:94:72:84:
97:79:db:c9:68:cd:28:a1:21:94:f7:43:89:f5:bb:
f1:0f:f5:aa:80:2a:da:5c:ff:8b:bf:49:46:20:81:
d1:cf:fe:63:2b:4d:d6:85:a3:2e:6b:17:80:12:2c:
94:10:69:c7:f3:78:ff:06:28:f7:71:20:e3:50:46:
8f:a0:4b:e8:07:3b:34:18:97:db:77:ee:c9:d3:07:
bd:f8:3d:d6:55:61:c2:32:75:b2:f6:c5:c9:45:8b:
db:f8:96:9e:20:60:1f:1e:26:cc:0d:05:f5:57:f6:
8a:19:f2:78:29:44:79:fb:13:09:8c:e3:e5:fc:9d:
95:dd:1b:4f:30:80:d6:95:a8:7e:d5:07:9c:df:86:
f2:7c:74:e9:37:2f:0d:4a:00:d6:b5:b7:b7:4c:44:
8c:09:d6:1f:2c:ee:c1:4b:7c:b0:25:f2:97:99:b9:
8b:31:bb:92:95:49:c9:47:7c:f6:28:42:2c:78:ac:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:A1:76:2E:CA:9D:AF:B8:30:05:D3:EF:30:BE:4C:03:77:A8:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A959FC0CE8211EFAC4CF552762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.18.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0b:99:2a:bf:cf:42:a8:a5:34:5d:f5:15:a1:1f:1f:65:9a:
52:8f:3f:0d:74:cf:ce:b1:96:28:50:bd:1e:fd:01:e2:08:71:
aa:0b:33:94:28:ce:99:6b:b8:f6:6c:b2:53:f1:1e:7b:21:c5:
ff:78:80:b3:f6:93:81:7c:c5:d0:5c:14:bb:24:ef:b6:55:e1:
9f:5b:f3:4e:7f:83:29:fb:8b:82:34:ef:96:ee:8e:3a:d0:4c:
df:24:a2:6c:4c:d4:c4:2c:cd:3c:77:23:bb:6a:b5:12:cc:a4:
29:4e:08:c7:09:ec:c3:75:ce:e5:1b:9a:da:5c:dc:7d:a6:66:
e0:e9:c6:b6:98:55:04:0b:d7:25:e1:2b:91:62:14:10:ea:5e:
0f:36:28:47:6f:da:a3:82:d7:f4:06:91:d3:26:fb:00:6e:4c:
df:2d:a1:9d:c2:b5:5f:9f:5f:f9:f9:3f:26:97:16:0d:1b:1e:
a7:e1:f8:54:1a:3b:38:56:4f:d5:9c:c5:74:d0:7b:48:7f:21:
07:ea:6c:e2:ef:4a:4f:66:27:49:f4:31:4e:62:a6:08:29:42:
6a:f0:bb:78:73:aa:4c:49:3e:f1:c3:4c:f9:0e:96:48:84:6b:
a0:0e:72:9d:85:66:0a:da:34:9e:19:c1:54:56:3b:8e:7c:b4:
88:e5:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:37 2025 by rpki-client