Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C7A415EBEAD11EF95702842762E951A.roa
File: 4C7A415EBEAD11EF95702842762E951A.roa (raw, json)
Hash identifier: t3nNBTeGeAvR0iq5ToS/V4+WskA/Ag/dfU85fvlo/Yk=
Subject key identifier: D6:1F:E4:98:CB:47:67:00:D4:14:23:00:E9:DC:64:47:5A:27:0C:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E72D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C7A415EBEAD11EF95702842762E951A.roa
Signing time: Fri 20 Dec 2024 08:34:59 +0000
ROA not before: Fri 20 Dec 2024 08:34:56 +0000
ROA not after: Fri 24 Jan 2025 08:34:56 +0000
asID: 395793
IP address blocks: 45.206.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59181 (0xe72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:34:56 2024 GMT
Not After : Jan 24 08:34:56 2025 GMT
Subject: CN=67652c33-6ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:fb:ee:1f:f7:dc:4d:01:fd:b4:01:e6:98:
31:4e:26:d3:bb:5f:14:06:bd:07:a6:00:77:f1:aa:
34:99:b1:38:c9:f2:3e:d9:39:be:94:79:68:5c:d7:
24:91:df:7c:72:d6:12:aa:1f:bd:dd:1b:b4:f9:c7:
20:45:a8:56:cb:66:fd:56:29:58:c8:c6:2e:41:1b:
76:c9:99:97:c0:86:f6:82:be:4b:a5:97:21:62:77:
8f:b4:dc:c4:c6:49:e0:04:ec:cf:d1:ec:34:68:ee:
f8:1f:97:f1:5b:9b:39:44:33:cb:57:cc:a0:f5:94:
16:68:d7:f8:f8:da:80:ad:1e:5a:fe:5a:88:5f:1c:
e0:6b:fd:0e:6d:db:03:f9:70:47:25:02:b5:04:52:
a4:3e:a6:e3:82:1a:0f:e7:85:7b:48:3e:03:12:2f:
4a:a7:35:2d:ff:fd:51:cf:1e:94:07:df:42:c8:bf:
ed:7c:d8:e6:85:f0:85:69:b3:4e:22:df:41:05:35:
77:d7:48:d8:9c:0b:a1:42:88:8a:3d:cb:2d:8c:88:
12:63:12:e3:15:01:bf:4b:b8:b9:4d:12:f2:18:74:
63:c7:60:07:c3:46:20:47:2f:8b:d8:d3:b6:d2:34:
78:df:0f:57:57:44:bb:18:74:b3:96:27:e2:c9:cc:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:E4:98:CB:47:67:00:D4:14:23:00:E9:DC:64:47:5A:27:0C:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C7A415EBEAD11EF95702842762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6b:87:e3:af:44:d3:99:05:fb:9e:76:d8:fe:d3:09:b0:f5:
49:66:a0:2c:74:e7:b2:48:fc:82:55:c3:09:2f:94:10:2f:3e:
ba:c9:51:f3:1f:72:3a:2e:16:71:69:d0:aa:1f:0c:a4:c6:09:
20:cf:db:b4:ff:18:05:4a:87:68:cd:1e:52:00:3c:a5:88:df:
59:8d:dc:fc:e0:f2:b3:e8:2c:ed:26:ba:f1:9d:21:68:7a:f5:
6d:aa:54:2d:ab:83:8a:cc:f8:63:c8:74:77:d6:61:d2:3a:b0:
e9:2b:7b:ee:bd:90:d3:da:fe:49:bb:51:fc:a6:4f:e5:f2:98:
d5:10:24:31:db:62:e2:4b:22:00:9d:bc:2e:70:ab:48:d2:3b:
b4:5c:1a:0d:2c:fc:31:ff:22:27:d2:12:05:8d:f5:7e:d8:e9:
a8:0a:ef:73:d6:c8:4e:0c:e5:02:af:b6:32:37:c1:50:cf:de:
f0:5f:5b:12:f9:e7:9e:0e:b6:0f:f3:64:26:15:3c:9f:b1:cb:
0a:46:bf:23:61:2a:8b:74:56:64:a4:45:1f:1c:8f:6a:c6:eb:
e0:c3:6e:75:c2:78:a1:b7:06:43:8a:14:90:13:53:91:d7:68:
57:a7:cc:a5:bc:ba:c3:0c:89:f4:de:2a:2d:bd:d8:93:f9:29:
1a:f8:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:12 2025 by rpki-client