Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D7D364CE9A11EFAE6FD469762E951A.roa
File: 54D7D364CE9A11EFAE6FD469762E951A.roa (raw, json)
Hash identifier: ciRe+NHtNtrOzsbRU3hQGkqWT1F3JcdhE8E1N6Do/AU=
Subject key identifier: 10:AE:48:A1:0F:3D:C6:75:FB:2C:23:32:CE:9F:24:48:2D:EE:A2:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010416
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D7D364CE9A11EFAE6FD469762E951A.roa
Signing time: Thu 09 Jan 2025 14:59:32 +0000
ROA not before: Thu 09 Jan 2025 14:59:28 +0000
ROA not after: Fri 24 Jan 2025 14:59:28 +0000
asID: 5065
IP address blocks: 45.203.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66582 (0x10416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 14:59:28 2025 GMT
Not After : Jan 24 14:59:28 2025 GMT
Subject: CN=677fe453-e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:35:e0:3a:f8:f5:4e:4d:56:e1:37:ae:09:
c4:a0:37:fd:9a:3c:29:ed:bc:b8:24:61:71:b8:5e:
0c:5b:47:f7:a3:ec:cd:79:27:15:05:b1:5a:23:d0:
86:b6:3c:38:df:48:aa:42:77:79:35:a5:6c:18:e6:
88:ba:d6:0d:42:eb:52:4e:4e:5c:3f:34:5b:4f:ca:
64:ea:38:f4:9b:3d:35:ea:03:a6:ad:5b:a7:54:8a:
97:04:3f:a3:40:34:6a:48:6a:26:9b:b9:11:6d:82:
2b:1d:9c:a4:9e:64:16:37:ce:de:7c:97:9d:d5:72:
d0:c7:c7:ed:38:72:56:a9:3a:f0:81:d8:3d:f1:af:
68:dd:fd:b9:11:7f:9b:c5:ff:b5:e0:6f:86:e8:75:
e1:a3:bf:04:74:3d:10:a9:e1:a8:16:51:7e:1f:5f:
dc:05:91:8b:cf:c8:29:04:59:1a:70:38:de:15:1d:
1b:b5:e2:be:e9:cf:d2:d5:52:93:f7:b5:1e:fc:bc:
2c:8c:11:cf:47:52:b9:38:ce:ac:6c:12:be:ff:75:
af:35:99:b3:ed:20:9b:fe:38:62:9a:9c:47:49:03:
41:47:82:23:4d:5f:6f:26:dd:0c:b3:50:ab:d4:7a:
5f:1d:a6:c0:ef:21:6c:07:a6:62:05:55:3d:32:05:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:48:A1:0F:3D:C6:75:FB:2C:23:32:CE:9F:24:48:2D:EE:A2:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54D7D364CE9A11EFAE6FD469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.61.0/24
Signature Algorithm: sha256WithRSAEncryption
43:23:bc:cb:a5:fb:6d:d0:c9:94:ce:42:f2:6e:7c:df:85:4e:
0a:65:69:97:1c:d6:65:fa:1f:82:ac:fc:97:bb:42:23:72:8a:
9f:01:b8:33:f7:81:05:da:ed:a9:02:58:f0:91:a9:94:7c:33:
6a:44:c9:47:e5:8b:09:75:75:16:4e:28:f1:99:60:61:88:0d:
49:84:82:5d:73:e7:a8:98:b2:c9:87:76:10:9e:13:cd:b4:d9:
a5:25:36:10:63:00:fb:d6:5f:92:03:a9:0c:4d:0b:84:ae:95:
6f:02:42:33:9c:c8:67:a6:06:6d:71:7e:ca:30:f4:90:4d:96:
7e:16:4c:39:62:51:3e:f2:52:57:4d:0a:7c:ff:2c:c4:53:61:
49:74:3f:f7:b3:9d:f0:b5:8b:28:c1:0e:09:5d:67:60:5c:43:
8e:05:a9:d4:1d:36:23:af:3a:70:5f:4b:56:db:87:3f:c0:71:
95:8b:d1:b4:ab:5e:39:b1:c0:5c:73:a9:4d:cf:70:15:11:08:
bc:cd:a0:e7:5b:e1:3f:d7:ad:36:bb:fb:39:d8:b6:a9:0d:93:
32:c6:45:bd:68:a7:c5:ed:55:96:e7:0a:d6:3b:8c:c6:c2:c7:
f2:36:9f:f4:0c:4c:05:6f:92:9d:e0:43:54:19:d8:df:dc:5d:
e1:92:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:01 2025 by rpki-client