Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AA20C04C9A111EFB6CA2B4D762E951A.roa
File: 5AA20C04C9A111EFB6CA2B4D762E951A.roa (raw, json)
Hash identifier: 9DfoW2I1n6NnVNBFgQLN2Y5QFKihYZwPKI/A9B0mVCY=
Subject key identifier: EC:7F:BD:AA:50:4B:46:C5:5F:73:15:DD:25:F5:A1:59:3D:19:09:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AA20C04C9A111EFB6CA2B4D762E951A.roa
Signing time: Fri 03 Jan 2025 07:07:12 +0000
ROA not before: Fri 03 Jan 2025 07:07:08 +0000
ROA not after: Sat 18 Jan 2025 07:07:08 +0000
asID: 54801
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63077 (0xf665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:07:08 2025 GMT
Not After : Jan 18 07:07:08 2025 GMT
Subject: CN=67778ca0-fa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:0d:d0:91:f8:58:d7:cf:3c:d6:1e:db:5c:
ac:dc:d0:5f:5d:b4:fe:08:80:58:a1:1d:dc:ad:65:
fd:97:30:d3:64:54:4d:b6:24:93:1c:28:ca:8f:db:
1d:a0:08:f8:a7:83:02:92:91:f9:3f:a9:55:aa:3e:
64:d7:e4:a3:1b:94:7b:db:b6:1b:a3:17:86:78:02:
03:d1:88:e3:5c:a0:d0:83:10:97:e6:e1:61:e6:f9:
21:ee:98:9f:6b:b5:79:c8:b3:7f:ff:65:ac:24:78:
b7:4d:01:1b:f7:ce:72:ef:d5:60:0d:81:a1:f3:60:
6d:e6:bb:43:57:56:3a:0e:37:b1:03:c9:39:f7:16:
3a:46:42:02:81:6c:d1:1c:fd:1d:d0:18:00:af:ee:
46:3f:5d:7e:a4:8a:2a:17:ef:b4:46:53:e0:64:64:
44:06:95:d5:dd:ad:92:aa:8f:d2:8b:57:a7:92:08:
dc:44:a7:4e:8c:bd:8b:d0:89:8a:09:45:c8:98:a3:
5f:54:da:55:08:d2:b0:cc:16:31:1d:bb:11:ce:04:
02:b7:e2:59:8e:1b:6e:7d:5c:e6:62:43:05:fa:94:
0d:d1:e5:27:dd:87:3a:f4:7b:5b:2f:49:d0:b1:01:
97:8c:bc:04:dd:87:5e:06:e5:39:10:e6:71:63:77:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:BD:AA:50:4B:46:C5:5F:73:15:DD:25:F5:A1:59:3D:19:09:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AA20C04C9A111EFB6CA2B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e6:e8:60:43:a1:ba:2d:08:2a:4c:29:49:c1:cd:ec:81:3b:
32:b5:f7:99:2f:e0:e4:b5:c4:cc:82:8e:eb:f5:03:6b:eb:e6:
09:2d:06:e2:ac:05:dd:95:ae:bf:56:d9:48:9e:08:05:c7:28:
3f:8f:9d:4b:a6:b0:e9:5a:76:4a:9b:56:e6:21:aa:83:34:8b:
e1:ec:ef:e9:38:37:48:2c:fd:eb:0a:70:9a:0e:3b:3a:ea:05:
d6:d9:bd:0a:7f:d1:8c:e5:f1:42:6e:9c:20:b8:8f:b0:86:25:
69:af:6c:28:e4:ed:50:ab:83:d2:db:20:73:f8:76:21:e9:84:
4b:1b:04:a0:0f:24:e2:a2:ef:d7:18:8b:7f:3d:e7:26:38:19:
46:5f:13:d2:b9:12:0b:c6:ab:dd:5c:c0:e8:26:2c:3a:30:11:
67:23:f8:7f:5a:00:0c:93:6f:ea:56:20:18:6c:e2:ad:a1:f8:
8b:e5:d1:cc:c5:51:2a:7d:a0:87:b9:7f:2c:3e:c7:27:be:be:
d9:2f:2f:84:ef:0e:8a:9b:7b:c7:cf:bc:90:b2:55:d8:7c:67:
e5:75:bc:a5:aa:0c:9c:09:de:73:0f:e2:8c:be:a2:89:ef:9e:
06:9a:63:aa:f8:81:52:c0:ae:23:a0:9f:8b:92:18:ee:9d:0b:
63:64:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:23 2025 by rpki-client