Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/551CFED2CE9D11EF9BE0207D762E951A.roa
File: 551CFED2CE9D11EF9BE0207D762E951A.roa (raw, json)
Hash identifier: Dj2XUFspv7+VuZ+Q+7bRV6kOXLrDql02Bv1PpfpbZ9Y=
Subject key identifier: C8:8D:36:8D:D6:D6:E5:05:D4:E5:6A:4C:17:6E:AF:1A:28:4A:CE:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01042A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/551CFED2CE9D11EF9BE0207D762E951A.roa
Signing time: Thu 09 Jan 2025 15:21:00 +0000
ROA not before: Thu 09 Jan 2025 15:20:57 +0000
ROA not after: Fri 24 Jan 2025 15:20:57 +0000
asID: 39600
IP address blocks: 45.203.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66602 (0x1042a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:20:57 2025 GMT
Not After : Jan 24 15:20:57 2025 GMT
Subject: CN=677fe95c-45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:00:84:dc:58:f0:42:c1:00:2e:33:29:29:
68:b7:66:2b:ad:f7:fa:09:e4:bf:a5:4c:c5:a1:03:
c2:50:30:c3:71:27:15:bc:44:78:c4:c0:92:d1:5d:
87:de:da:7a:48:22:d3:62:45:d9:b8:e4:4a:80:15:
58:30:c8:75:b0:a0:ed:3c:92:ca:e8:2b:3e:0d:0b:
0f:4b:dd:f0:b3:f2:be:28:0e:ca:55:99:dd:4b:89:
c0:04:09:17:f9:a0:e9:55:65:f4:28:e1:56:58:b9:
ab:73:e3:fa:09:a9:f7:c1:1f:d7:17:98:18:8a:0d:
4c:01:eb:bd:3b:bf:06:b8:bb:00:80:a4:e0:ba:f2:
a1:b2:d6:07:60:dd:48:75:d9:3a:db:6d:88:e7:67:
42:6e:9d:59:fd:f8:ef:b9:00:61:00:97:de:39:15:
89:40:14:04:37:73:21:f1:36:7f:71:d3:a0:2e:2f:
26:e4:45:a6:6b:25:34:91:23:cf:b9:fc:cf:19:da:
61:8a:ce:d3:db:86:37:5c:ea:51:49:0e:36:d4:12:
47:b9:5a:40:23:32:28:4e:04:d8:6c:18:11:c0:c9:
c1:aa:43:3d:7e:54:e7:53:3a:60:d6:bc:72:c4:bf:
2d:27:25:6f:91:a7:6b:ce:bf:9a:80:04:5b:90:44:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:36:8D:D6:D6:E5:05:D4:E5:6A:4C:17:6E:AF:1A:28:4A:CE:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/551CFED2CE9D11EF9BE0207D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:02:f9:d7:ec:d0:06:6f:88:25:10:79:b6:c4:8c:2d:e3:8a:
7d:0c:b3:27:3d:d6:ed:9a:46:7d:36:06:ea:7b:5c:c9:c9:d0:
03:bf:00:ee:9a:4f:cc:cb:45:4c:ab:ff:9a:bb:b5:2b:66:03:
ac:be:f8:55:18:90:a6:5a:86:3a:98:4b:98:7b:75:c7:29:c1:
6b:f1:e4:68:a8:be:45:c7:92:97:43:e1:91:21:cf:03:4b:05:
9a:8c:81:eb:48:2e:88:df:d4:ec:9e:b9:b7:33:bb:0e:09:e4:
7c:fb:cf:97:06:6b:ae:41:e8:f4:df:af:cb:34:3e:aa:a2:44:
ba:68:4f:3a:08:a1:a6:b4:30:77:7f:d9:cf:84:7f:b2:a1:9e:
eb:9f:5d:d1:c4:ee:3e:17:43:e2:cd:b0:ad:f0:7b:aa:a0:fb:
cc:c1:c1:b5:b2:d2:bf:b8:14:ca:1e:ad:d3:c3:e2:e8:5f:7b:
b6:c3:62:43:92:9a:8e:e9:7f:f9:1c:47:94:15:95:97:d9:a0:
b1:e8:73:45:cb:0b:1b:ba:6e:20:22:3f:a0:13:1a:2a:6c:fc:
df:bc:30:ea:39:d8:a5:fe:60:ca:d4:51:04:38:47:09:0c:b0:
e1:e1:65:b1:ff:f9:53:40:56:9f:c7:83:6f:25:83:ac:b3:c2:
85:1c:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:13 2025 by rpki-client