Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FC60248C47111EF9C82BE48762E951A.roa
File: 4FC60248C47111EF9C82BE48762E951A.roa (raw, json)
Hash identifier: 1pymgCMyH1y79KKZ8ENgXl73arga/rxGUGobDqNowZg=
Subject key identifier: 60:A0:33:D0:6F:1D:4A:5F:6A:F4:44:56:19:03:7C:E5:5B:52:FC:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FC60248C47111EF9C82BE48762E951A.roa
Signing time: Fri 27 Dec 2024 16:40:42 +0000
ROA not before: Fri 27 Dec 2024 16:40:38 +0000
ROA not after: Sat 25 Jan 2025 16:40:38 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61624 (0xf0b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:40:38 2024 GMT
Not After : Jan 25 16:40:38 2025 GMT
Subject: CN=676ed88a-8ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:07:c7:d4:93:df:fe:fd:e2:c9:03:36:aa:
af:7e:c9:9c:55:bb:89:bc:60:f3:01:98:ff:51:1c:
1b:63:6d:41:8e:47:f4:a8:06:57:fa:ab:ce:8e:8c:
90:65:88:5c:02:0b:ee:7a:c7:e4:40:e5:d8:46:08:
87:7a:59:0b:c1:97:67:e2:fe:d4:79:ba:0f:b4:0f:
44:f1:99:4b:87:8f:1b:19:76:2c:bf:be:8f:82:d7:
01:ea:29:78:da:43:82:be:5b:56:f1:79:8f:9a:78:
ff:13:90:cb:89:43:09:d4:7f:c8:e9:81:e6:5a:82:
f6:20:5e:f8:69:91:38:85:a9:be:2a:5a:b7:fd:61:
5c:27:ed:3d:6e:eb:3e:d4:d9:a8:f1:42:68:c0:51:
a4:b1:a9:94:f7:c4:9e:5d:e7:86:d0:6c:8a:d6:c5:
5a:4b:14:50:bb:ca:37:97:a3:3e:46:7e:b5:20:98:
72:b6:bb:87:1b:cb:38:20:e3:f1:eb:24:c4:c0:58:
73:12:6c:5f:0a:26:50:dd:b8:fb:2c:f6:66:00:37:
6f:b1:aa:da:1d:d0:99:af:81:e7:a7:3b:2f:ba:7c:
eb:67:9f:36:bc:a4:1b:9c:29:3e:be:ff:a1:cd:5a:
77:9a:53:d4:37:06:35:35:ee:51:de:f8:3c:2f:96:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:33:D0:6F:1D:4A:5F:6A:F4:44:56:19:03:7C:E5:5B:52:FC:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FC60248C47111EF9C82BE48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0/23
Signature Algorithm: sha256WithRSAEncryption
af:55:6a:7c:e4:70:c7:7a:20:c9:3d:c3:12:71:0f:41:83:1d:
91:be:d1:f8:ad:90:16:ad:44:dc:54:c1:85:48:db:3b:d8:2f:
19:7d:8b:f6:24:e8:b9:21:cd:8f:4e:1c:b6:0b:17:1b:1b:83:
10:64:fb:b9:dc:78:5f:94:53:01:fe:79:da:e4:31:6f:d7:fc:
fb:91:ef:a8:7c:77:42:08:23:0f:55:77:bc:39:2c:36:f2:03:
e4:95:f2:38:0e:b5:66:f6:36:c5:43:22:a7:c0:35:b1:b7:bd:
2d:eb:d7:54:5b:44:d2:07:56:28:9a:74:6b:6c:98:b6:7d:19:
46:d7:f0:ba:74:16:ab:2b:a7:b5:fe:03:31:6b:c2:46:b1:4c:
d3:09:38:65:76:6d:1c:aa:d9:14:24:a5:87:b3:6a:5a:9c:7f:
fe:3a:cc:a8:a1:a9:d8:bc:41:57:29:59:f8:67:0b:f0:77:04:
0b:34:83:eb:35:08:75:a6:c3:8d:69:73:df:79:76:5c:24:bd:
1e:af:b1:04:1a:be:0a:cd:a3:dc:5d:ca:a4:4d:64:28:09:09:
2f:c6:60:ff:72:97:72:b9:7a:3d:4c:1e:e6:b4:6f:e5:e6:c8:
d6:69:28:f4:7d:6e:8a:d5:0c:4a:13:55:d8:a7:c0:4b:1e:dc:
17:95:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:06 2025 by rpki-client