Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CCC2C6C6CC11EFB0D525B5762E951A.roa
File: 57CCC2C6C6CC11EFB0D525B5762E951A.roa (raw, json)
Hash identifier: Qp3f5nEqcXEzbVQm7EgVOm9BDQODID51R8UGsBWkIGo=
Subject key identifier: B8:72:00:24:DC:90:D1:A0:AF:68:22:5B:DA:2A:9D:8D:05:9E:FA:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F27D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CCC2C6C6CC11EFB0D525B5762E951A.roa
Signing time: Mon 30 Dec 2024 16:37:22 +0000
ROA not before: Mon 30 Dec 2024 16:37:18 +0000
ROA not after: Sun 02 Feb 2025 16:37:18 +0000
asID: 398823
IP address blocks: 45.205.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62077 (0xf27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:37:18 2024 GMT
Not After : Feb 2 16:37:18 2025 GMT
Subject: CN=6772cc42-885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:23:bb:1a:81:0f:f4:58:e6:91:8d:86:6e:
51:55:0b:5f:cc:0f:05:ba:e7:7f:83:44:e2:6a:24:
6c:02:06:93:b7:35:e1:17:cf:bc:ea:64:88:fa:b6:
fe:16:c7:89:d7:b2:09:8b:07:17:3e:a8:49:53:dc:
2c:98:d7:bd:01:4d:eb:e1:66:3a:e0:77:36:57:22:
f3:af:71:fd:c5:d4:8b:50:73:c7:b4:75:43:6d:3d:
a8:b3:75:db:31:d3:25:0b:86:2c:7f:d2:37:e3:20:
cf:38:fb:49:a6:0b:1c:55:15:45:d9:67:39:fd:81:
45:0f:75:d5:27:3e:fd:9d:ed:b5:ad:ea:d8:2e:be:
db:a2:23:2f:ed:c5:12:8b:3f:5b:09:b8:a4:d4:29:
02:aa:a1:ea:c2:fb:f2:36:fe:7d:28:45:66:b8:16:
8f:42:e5:b8:70:24:7d:f2:5d:cd:57:19:ad:48:1e:
61:4e:03:09:8c:50:93:77:69:3e:ad:66:4b:18:39:
5f:b0:2d:c5:44:29:d4:fb:d5:b0:b6:6b:61:c3:08:
e3:07:b7:05:84:99:3d:6d:ef:be:8c:86:b6:2c:ae:
6c:ec:4d:b9:fa:8c:d0:37:a2:6c:5e:48:49:53:5c:
90:e2:19:e5:91:ca:17:29:a2:32:b5:55:c3:71:a3:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:00:24:DC:90:D1:A0:AF:68:22:5B:DA:2A:9D:8D:05:9E:FA:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57CCC2C6C6CC11EFB0D525B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:bb:1f:da:a3:22:ab:87:9e:ed:e4:75:98:82:c8:e2:25:a7:
8f:83:fe:7b:d7:08:e5:24:a6:b7:cc:2c:ab:cd:64:53:b7:ae:
51:2e:2e:7a:fa:00:f5:58:36:5a:2c:19:7f:03:f4:44:90:98:
db:e4:b3:d1:6f:52:5e:ac:35:d8:71:f8:6b:6c:a9:f9:0a:b0:
c5:8d:87:dd:af:2f:59:80:92:c2:b7:9f:f4:16:07:d2:7f:0a:
67:b3:af:ee:b7:5a:a2:0f:a1:16:5b:26:cb:7c:ef:76:cd:43:
37:35:c0:59:e7:7b:cb:de:ca:5c:be:31:99:84:6d:87:78:e8:
90:b4:a6:11:d1:fe:db:8a:cc:bd:7d:fd:56:0f:ec:9e:e8:d9:
f0:e4:89:a2:a7:9d:df:b3:d4:41:9b:85:4f:a5:fc:da:e1:96:
c2:7a:87:7a:70:39:6e:e9:0b:86:31:3d:a0:e0:2b:f8:6e:9e:
38:1d:15:8c:a8:84:c6:6e:ac:69:d5:26:a0:95:40:43:8a:19:
51:66:b6:d9:3f:55:ad:d4:7e:7c:40:0b:48:64:0e:89:c5:d6:
b4:38:5d:d3:96:49:26:b4:4f:af:93:71:b2:42:b3:aa:a7:8b:
7e:af:a2:cd:07:5e:27:48:1b:2d:3f:ad:77:b9:60:7c:2e:55:
aa:b1:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:36 2025 by rpki-client