Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D468290C9A311EFA014C859762E951A.roa
File: 4D468290C9A311EFA014C859762E951A.roa (raw, json)
Hash identifier: /y7KxF5hx92/SdMsRlMprapytGLL6AR6fWLlEHwJI60=
Subject key identifier: 68:A8:59:3C:5F:B5:BB:67:DC:1A:57:5C:0B:87:14:04:00:89:29:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F675
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D468290C9A311EFA014C859762E951A.roa
Signing time: Fri 03 Jan 2025 07:21:08 +0000
ROA not before: Fri 03 Jan 2025 07:21:05 +0000
ROA not after: Sat 18 Jan 2025 07:21:05 +0000
asID: 54801
IP address blocks: 45.207.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63093 (0xf675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:21:05 2025 GMT
Not After : Jan 18 07:21:05 2025 GMT
Subject: CN=67778fe4-0c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:bd:9c:36:db:c3:1e:cc:48:70:0f:04:52:
b0:87:54:df:df:c5:b7:4e:57:c2:26:2e:e7:5d:bb:
3a:82:6f:75:65:eb:9b:07:c6:de:2b:8f:7a:19:9e:
93:aa:bd:87:c8:bf:a7:bb:74:6d:c2:dd:44:3a:c5:
2b:2e:b4:28:94:31:49:ed:d2:56:09:45:4d:aa:ab:
1a:57:ad:9d:64:ba:33:31:92:06:fc:b3:2f:d1:88:
7b:4d:9d:df:58:5c:22:b2:3c:cb:07:8a:b6:47:ef:
f5:b0:aa:5b:ea:b8:79:0f:c5:bd:54:c6:2f:cc:52:
b6:66:6f:33:2b:9d:92:46:c5:29:06:63:05:ba:68:
6c:7b:7b:fc:d0:ca:2d:40:58:36:06:42:06:5f:22:
06:64:9b:6e:b3:b6:e8:78:e2:30:44:93:fa:8a:fe:
69:0d:79:2d:1a:e5:5f:20:ce:41:2c:82:1e:59:7e:
c2:9b:53:3b:66:ff:28:76:46:18:33:1c:5d:f7:1b:
fc:8f:e4:e0:7c:19:a0:f2:b8:17:41:1f:6b:d7:4d:
ea:44:cd:7a:ed:3b:75:35:2b:fb:45:f1:a0:55:10:
c5:f0:f4:ef:bc:06:2e:29:0e:10:67:30:57:f8:d2:
54:56:1f:eb:bb:74:8e:69:e0:09:02:0d:31:08:51:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:59:3C:5F:B5:BB:67:DC:1A:57:5C:0B:87:14:04:00:89:29:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D468290C9A311EFA014C859762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:33:07:3b:cf:de:93:e5:db:e6:92:22:e5:28:f3:a3:8b:35:
34:a8:3e:02:d8:30:41:9a:13:dc:ee:eb:f5:10:0d:59:d6:aa:
7e:94:34:02:7e:7f:c8:02:d0:83:96:93:f6:f4:4e:a6:ed:6f:
9e:01:be:22:85:a5:a1:16:94:23:1c:40:74:db:a6:82:e7:50:
fc:b9:10:f0:84:38:81:03:3d:dd:c6:11:9c:43:fe:b0:99:e9:
f8:e8:80:ee:fa:38:b9:2c:7d:c7:76:10:69:ed:77:69:7e:8e:
4d:3e:65:2e:86:17:06:bc:ae:f7:85:6b:3e:ba:7e:5d:fc:61:
d9:47:04:2f:a4:ef:8a:53:4f:e0:73:f1:37:05:a2:de:50:e2:
5b:d2:57:a1:37:f0:a7:cf:ca:56:a8:40:0a:72:6d:35:73:49:
4c:28:b1:f9:4a:e0:23:12:a4:ed:6c:4a:db:52:04:55:12:dc:
44:15:90:b0:d5:65:e5:80:a2:86:1e:68:3f:ec:74:40:97:84:
07:1a:39:4f:5a:e3:fc:88:4e:85:ad:6d:c6:e5:7a:3c:34:93:
b6:e5:da:1e:86:ac:2a:8d:b3:87:a5:d5:92:8b:26:3c:ce:f8:
a9:c7:00:60:cf:58:f5:31:47:ed:16:0e:ee:d1:80:32:cc:f8:
13:a8:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:04 2025 by rpki-client