Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581DEB48BFA011EFA33154B4762E951A.roa
File: 581DEB48BFA011EFA33154B4762E951A.roa (raw, json)
Hash identifier: avRyjvjO6DWKXVof1uEiPYSDUdJ1fxQb+iFtxMwj+Ig=
Subject key identifier: 43:2F:B6:54:25:19:75:6A:D7:04:BF:17:34:36:90:80:8E:E7:C9:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581DEB48BFA011EFA33154B4762E951A.roa
Signing time: Sat 21 Dec 2024 13:34:47 +0000
ROA not before: Sat 21 Dec 2024 13:34:43 +0000
ROA not after: Sat 25 Jan 2025 13:34:43 +0000
asID: 30781
IP address blocks: 45.198.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59348 (0xe7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:34:43 2024 GMT
Not After : Jan 25 13:34:43 2025 GMT
Subject: CN=6766c3f6-a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:7c:da:ed:d1:e0:3f:cb:77:7c:a4:ef:fc:
38:0d:52:8f:3d:7d:57:28:e9:af:f6:41:ed:3f:fd:
40:f6:bb:2c:0c:8d:41:61:34:d1:e8:43:43:25:ff:
04:9c:59:ce:8e:29:17:57:b2:f8:bf:bc:a2:d0:8d:
df:05:b9:72:10:18:af:a6:b9:0f:0c:d0:a7:f2:30:
dc:c7:c0:96:ed:57:36:06:31:ce:4e:dd:0f:09:a0:
ae:30:a7:3a:3d:97:1f:75:52:80:6e:9e:ed:e9:bb:
64:b5:50:24:d6:c5:c0:55:ed:00:25:b0:50:39:18:
32:dd:5c:b7:c8:e3:2c:d7:fb:6f:37:ca:c4:2f:44:
d0:2c:85:a3:07:52:9e:35:43:32:89:f4:6d:6f:10:
0c:18:08:f5:75:25:28:64:6a:b8:ed:26:d1:e7:fc:
86:cd:b7:e3:c9:e6:b8:3a:5e:80:fc:30:6b:e0:2c:
14:3b:ae:10:48:9f:70:1e:a3:7c:95:b4:82:7c:ab:
8c:66:25:7d:50:5d:7a:7c:10:48:5c:64:a3:ff:1e:
74:9a:11:3c:04:a9:0d:22:bf:81:2b:37:d7:98:df:
e6:c2:d2:49:d0:5a:16:07:b0:a2:a7:96:09:81:6b:
53:7b:bd:56:35:03:ef:96:cb:ee:06:54:fd:11:9b:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:B6:54:25:19:75:6A:D7:04:BF:17:34:36:90:80:8E:E7:C9:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/581DEB48BFA011EFA33154B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.208.0/20
Signature Algorithm: sha256WithRSAEncryption
43:e2:69:1a:17:47:b3:a1:92:c2:22:cc:3b:5c:49:6a:84:36:
7e:63:c1:e9:1f:a2:b6:85:92:ee:f6:9a:44:44:07:14:b4:c1:
b2:93:8c:7a:c5:19:39:77:26:eb:26:f5:95:78:14:8b:10:df:
46:01:f6:f6:1e:e6:4b:a9:8c:02:e5:bd:eb:d6:8b:22:c4:ff:
87:37:28:9e:60:2d:c0:f7:01:5b:37:3f:41:a3:76:39:b1:04:
67:5c:83:7d:5a:7d:50:88:77:f2:5d:3c:f7:9e:ab:6d:1a:5f:
0a:92:33:d1:bb:73:2f:85:b3:a1:a4:1f:3d:48:86:63:31:1f:
1f:34:57:a4:d5:b8:d5:91:be:4a:42:b9:1b:07:ab:38:b0:d7:
4f:ef:b0:05:b6:7b:7a:74:85:31:4b:a0:9f:1d:16:14:7a:94:
5b:43:9e:06:3d:b2:d1:5f:12:69:2f:14:0e:07:59:a4:a0:5c:
f9:ce:7f:c6:08:c4:2d:c1:7f:05:32:28:c2:c9:ea:2e:5e:3a:
78:1e:77:3b:9c:66:1e:7e:c4:68:47:c4:5b:b9:03:86:bc:98:
e4:e8:bc:79:6b:3f:46:80:80:77:01:bb:57:31:63:49:47:47:
e4:61:67:18:76:02:1e:75:97:41:ac:17:c3:30:73:8e:c4:a3:
e3:31:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:30 2025 by rpki-client