Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5149D570C74311EFA007DCAF762E951A.roa
File: 5149D570C74311EFA007DCAF762E951A.roa (raw, json)
Hash identifier: D7R36LEoYmXKqrPCY2gaWSuOWqqdaf9vb7vS/UQ5ce8=
Subject key identifier: C7:84:37:5D:51:5C:2C:98:25:70:36:4B:BE:AA:BD:DB:41:9C:21:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F296
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5149D570C74311EFA007DCAF762E951A.roa
Signing time: Tue 31 Dec 2024 06:49:01 +0000
ROA not before: Tue 31 Dec 2024 06:48:58 +0000
ROA not after: Tue 04 Feb 2025 06:48:58 +0000
asID: 272369
IP address blocks: 45.202.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62102 (0xf296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 31 06:48:58 2024 GMT
Not After : Feb 4 06:48:58 2025 GMT
Subject: CN=677393dd-8cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:5f:a3:8c:3d:0e:24:2a:13:6c:4b:b7:a7:
5e:27:58:71:1a:19:63:f6:a0:92:9e:2f:76:a3:bd:
bf:d7:d9:1c:77:93:d1:26:cc:29:73:48:df:b5:b4:
fe:63:ac:a4:4b:89:0f:e5:50:9c:78:99:1d:ab:0b:
2a:5a:d8:8a:99:83:28:a2:8d:28:fc:49:fd:9f:5c:
7e:50:f1:d4:52:e4:61:4a:ec:5a:24:8b:16:75:56:
60:f9:96:61:3e:9e:70:30:c6:c5:46:5c:a1:d5:e3:
c6:20:cb:56:9c:ca:f9:c2:ae:21:8e:79:b2:1b:64:
16:63:f0:25:ce:0b:4f:1a:23:95:0c:bd:4d:78:ed:
55:38:31:a1:c9:90:5d:b3:96:71:42:dd:65:2f:b5:
58:cf:4f:82:44:77:ba:78:37:86:32:b9:bb:58:ff:
42:b7:fb:37:ae:f7:49:8e:b4:ff:1c:99:08:38:71:
bc:84:80:37:53:a2:e4:ac:45:61:09:a6:a5:50:77:
b2:2a:9d:85:76:3b:9f:10:c9:af:c4:ec:96:47:b5:
64:1a:57:82:05:da:63:60:79:3b:2c:ee:d9:e4:ac:
f4:ad:79:84:47:48:cb:94:cc:cc:a6:ad:c4:e8:6f:
e8:c4:cd:55:45:c9:e0:30:6f:7f:52:35:73:ac:6e:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:37:5D:51:5C:2C:98:25:70:36:4B:BE:AA:BD:DB:41:9C:21:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5149D570C74311EFA007DCAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c5:db:32:57:11:40:8b:29:3a:68:5c:de:24:d1:d3:86:98:
07:34:b8:b7:96:3d:fe:1d:ad:b8:2e:c5:98:54:75:0e:45:18:
0d:5a:5b:c6:1c:b3:3b:59:2a:e0:2a:76:4f:e9:23:78:14:8e:
f3:29:15:60:dd:ad:bd:58:7b:9c:c1:0f:de:52:ee:d6:f0:f7:
f5:da:50:16:f9:3a:5d:7f:84:f3:67:f8:a0:39:e2:ef:59:13:
fe:a4:3e:33:11:2c:8b:ce:68:16:97:e2:64:da:87:49:20:ab:
cb:c8:b2:84:c0:08:d2:40:ca:87:b7:59:f6:71:91:3a:8f:47:
8d:4b:df:95:80:4a:b0:b1:b9:3f:fe:18:b3:d8:8c:da:b4:17:
6f:7a:40:b4:ef:ae:ff:75:d1:e9:8e:4e:2c:53:bf:03:4f:63:
f7:c4:7c:15:bb:61:59:96:1a:e8:87:49:80:ad:0c:ed:0e:e1:
f0:34:c1:a8:bb:c2:12:c2:5b:9f:5c:b1:0f:ea:06:ac:ac:e0:
0d:7c:26:e4:38:09:6b:4e:28:b2:55:b7:72:81:50:3f:5e:b8:
71:38:59:ad:4d:5d:dc:f8:70:41:94:35:8e:04:3a:13:cc:3f:
f8:bf:65:94:d3:5c:4c:b3:08:59:31:6c:a0:0d:ca:a9:73:f3:
c4:e4:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:01 2025 by rpki-client