Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/585975A6CE9F11EFAEC8F389762E951A.roa
File: 585975A6CE9F11EFAEC8F389762E951A.roa (raw, json)
Hash identifier: MsUwQ77y/pUcnYA3NGF/I5NVkYmkeryBL0ypWcHVpFw=
Subject key identifier: 50:AA:5C:C1:84:15:01:85:18:60:8B:38:28:5C:8C:BF:AD:43:85:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010438
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/585975A6CE9F11EFAEC8F389762E951A.roa
Signing time: Thu 09 Jan 2025 15:35:25 +0000
ROA not before: Thu 09 Jan 2025 15:35:21 +0000
ROA not after: Fri 24 Jan 2025 15:35:21 +0000
asID: 39600
IP address blocks: 45.204.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66616 (0x10438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:35:21 2025 GMT
Not After : Jan 24 15:35:21 2025 GMT
Subject: CN=677fecbd-965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:44:02:ce:2e:1c:83:e8:ec:d4:0d:0e:64:
c5:d4:65:62:13:cb:85:0d:07:17:27:04:07:2d:57:
8f:0e:a3:bd:aa:97:0f:f3:69:6d:52:d7:c5:f4:f7:
90:3a:12:bf:67:0c:62:c2:e3:51:5f:36:34:b7:ce:
19:6f:6d:ef:fb:36:0b:4c:98:81:e3:9f:06:68:c1:
64:f5:20:d5:92:61:fb:d5:38:75:ce:94:d9:28:b6:
ca:f7:5b:a7:3a:54:55:44:36:7e:81:15:2e:f0:7a:
b9:14:e8:4f:f1:64:15:91:7c:f5:a0:cd:41:22:b0:
cb:dc:c3:64:3e:aa:dd:e4:0c:44:86:4d:5c:26:41:
f3:47:af:19:55:26:d7:dc:a9:a7:6e:fb:8b:87:fb:
9a:9b:d7:fe:b6:83:2d:6f:96:34:ba:2a:f3:25:fb:
ca:7d:ab:6c:da:72:7c:e1:72:c1:41:3f:91:bd:ed:
ad:15:33:5a:db:d7:8f:7e:54:72:15:54:75:e3:c1:
80:f7:6b:57:fb:9c:f5:bc:89:12:b0:74:45:4b:a0:
60:22:e6:ec:cb:2b:9a:65:57:2e:63:5b:3a:fd:ca:
2f:52:86:a5:6f:01:93:db:57:bc:ac:4b:a7:7f:50:
c0:c7:1a:a6:ac:d1:e4:07:89:4a:61:83:2d:57:5f:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:5C:C1:84:15:01:85:18:60:8B:38:28:5C:8C:BF:AD:43:85:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/585975A6CE9F11EFAEC8F389762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8f:bd:ea:2e:a0:d5:3d:09:4d:1b:69:d0:fa:8a:c9:7e:c6:
00:e6:d2:c7:87:18:f6:f8:ad:4f:47:a4:c1:fc:18:d2:cb:af:
54:41:cf:79:5f:22:9b:e0:ae:7a:73:df:f0:e2:51:f4:f8:25:
4a:e3:72:a0:4b:5e:7f:55:b8:b3:a2:0f:69:1a:01:3c:2c:8a:
04:4e:17:04:98:d6:94:29:1c:b0:24:95:0b:0a:a2:c5:60:b1:
75:ba:56:d1:6a:39:9b:0a:15:e2:c5:43:80:0c:ce:4f:7b:05:
86:a0:2a:3b:3e:75:c4:60:89:9f:76:78:1b:de:d3:41:7e:a3:
16:bc:6f:48:ec:90:e7:93:56:9c:32:8a:a8:af:d3:a2:d7:98:
e7:ea:69:f6:9a:0a:b0:15:68:76:0a:0d:c5:a3:d0:2a:e2:d9:
cd:fd:ea:4d:cd:1b:65:7f:d6:50:aa:34:20:f6:ef:ad:7b:90:
fd:dd:26:a1:1e:c6:fa:0b:52:cd:3e:84:ec:bb:4c:ef:d9:72:
04:e4:bd:02:4f:1f:a9:3b:f4:4c:ae:c2:f8:07:13:b1:21:7f:
12:f3:e5:a9:b5:6b:47:b7:90:30:57:73:59:bf:3a:86:b0:73:
d3:66:65:56:f8:67:1a:a5:ea:ee:50:68:62:fe:f5:5b:fc:27:
a4:34:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:50 2025 by rpki-client