Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FBAD000D02211EFAAACB1A5762E951A.roa
File: 4FBAD000D02211EFAAACB1A5762E951A.roa (raw, json)
Hash identifier: VlucYiQ+dNWiYoSdC+97vonR5lLWClW9i2GkEoPVbk4=
Subject key identifier: BC:15:33:F4:61:14:31:F3:13:B9:01:7D:E7:15:85:D3:1E:78:D6:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010606
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FBAD000D02211EFAAACB1A5762E951A.roa
Signing time: Sat 11 Jan 2025 13:45:26 +0000
ROA not before: Sat 11 Jan 2025 13:45:22 +0000
ROA not after: Sat 25 Jan 2025 13:45:22 +0000
asID: 141883
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67078 (0x10606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 13:45:22 2025 GMT
Not After : Jan 25 13:45:22 2025 GMT
Subject: CN=678275f6-87eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:f2:51:36:95:f0:6e:91:e3:6c:a3:4a:38:
90:c2:0d:f3:b8:3d:94:46:cf:e5:ab:ce:fc:81:83:
1a:f2:61:5a:e0:dd:c7:b8:72:cf:74:98:66:0a:c6:
bd:e4:fe:5e:20:aa:bb:3e:46:bc:43:b9:7f:ca:67:
5e:1d:d3:3f:60:70:2f:01:2d:a8:e1:c7:b8:5c:53:
f6:c3:0a:d2:6f:6e:ad:4d:37:29:5e:f7:47:00:26:
a4:2c:e0:7c:fa:76:86:42:4f:88:0f:86:ce:77:68:
a3:76:36:8d:42:78:90:e2:17:24:af:2f:fa:39:58:
bf:99:df:ed:49:8f:03:68:96:8d:e3:e9:b1:a6:b3:
6d:ec:e4:b0:e7:0f:56:16:5e:93:56:21:a7:98:13:
02:16:52:8a:66:34:db:d3:74:3f:10:d9:f0:cb:25:
f4:3b:2d:91:56:1c:19:c9:fe:95:e1:56:63:44:8c:
13:00:5e:b0:49:eb:98:12:e3:48:cb:b2:d3:d2:79:
cb:34:40:c8:0d:77:0e:34:23:3a:8c:d7:2c:00:7b:
cd:17:a3:0b:16:0b:98:88:05:e1:c9:b1:d5:eb:4f:
86:e2:a9:14:39:5e:50:87:af:ab:0e:b7:49:39:99:
7b:a4:8c:43:f3:0c:43:50:d7:4d:7e:e4:07:f5:56:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:33:F4:61:14:31:F3:13:B9:01:7D:E7:15:85:D3:1E:78:D6:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FBAD000D02211EFAAACB1A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:06:ff:50:b7:20:31:23:d1:ce:20:8b:3e:d8:44:b3:2e:22:
12:27:2b:d4:e8:ba:66:a8:47:c0:3c:79:21:64:89:a2:00:12:
48:73:10:a4:57:90:1d:fc:ff:2a:94:a9:b9:e4:ae:e5:e8:be:
14:a4:22:7f:45:b5:3e:51:4d:5f:f1:b3:c2:48:66:12:5b:24:
e6:3d:1d:80:b1:21:99:bf:4e:2e:e1:8b:07:93:c5:35:db:40:
6d:24:ca:6f:e5:8c:6d:3c:66:2d:24:5b:70:fa:5d:c2:0b:14:
e7:61:99:20:d8:98:4c:3a:88:25:a4:2e:d1:52:db:d8:fb:86:
f4:c9:13:d0:7f:3a:de:48:84:8d:27:22:a7:6e:37:ba:f9:c2:
f9:b0:2d:97:09:76:5d:24:85:1b:c7:ab:93:65:38:de:62:d7:
cf:85:3e:39:d3:56:50:5d:62:a9:ec:ae:27:f5:91:e1:59:9f:
06:23:bd:bf:da:dc:68:a7:d4:e0:3d:8f:5b:c6:88:97:3d:79:
2e:47:2e:62:b0:66:02:47:b0:2f:81:0a:86:6f:cf:ca:e9:d9:
c1:f8:73:d3:06:62:78:5d:b2:cf:80:16:d5:a5:03:96:ca:e6:
17:49:7c:90:47:b1:f8:40:6b:f7:ef:1b:28:12:16:fe:c6:bc:
62:2f:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:00 2025 by rpki-client