Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABB6D80CE5F11EFAB03DC75762E951A.roa
File: 5ABB6D80CE5F11EFAB03DC75762E951A.roa (raw, json)
Hash identifier: ZBHTLAGu0zp8L4vlreTcRjrB3cU18d1KiNAyv/MKzJw=
Subject key identifier: C2:43:DB:52:16:A7:3F:88:B5:68:9A:71:82:DB:FF:4D:56:E7:AE:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010310
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABB6D80CE5F11EFAB03DC75762E951A.roa
Signing time: Thu 09 Jan 2025 07:57:21 +0000
ROA not before: Thu 09 Jan 2025 07:57:17 +0000
ROA not after: Wed 22 Jan 2025 07:57:17 +0000
asID: 5065
IP address blocks: 45.199.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66320 (0x10310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:57:17 2025 GMT
Not After : Jan 22 07:57:17 2025 GMT
Subject: CN=677f8161-1165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:10:59:42:3f:0d:c4:b4:ba:73:43:28:a0:
c4:7f:9b:58:cf:6d:f4:a8:98:e5:4e:63:a2:ff:ce:
29:d4:00:5d:80:3a:1b:d5:ef:e5:ec:bf:2a:6d:da:
37:82:3e:7b:17:a1:6f:8a:a4:c4:04:10:b5:63:9b:
7b:16:6c:5e:91:68:01:9d:2f:46:73:e8:cb:be:d0:
2e:b2:9f:49:c5:68:15:ef:28:52:e6:1a:e1:c2:75:
87:3d:ee:1a:1d:7d:34:88:33:9c:42:b9:d7:a6:b9:
5f:1e:7c:ab:eb:b1:f0:83:e8:ae:fa:ec:0e:18:3f:
91:e5:a4:46:73:12:22:29:24:86:dc:53:a2:fd:ea:
a5:86:3d:11:60:d6:4f:f0:b4:2e:e8:d0:47:ff:55:
32:bc:dc:4e:02:44:e8:f3:40:57:c0:11:f5:5e:a0:
36:d3:a1:96:7f:18:2a:4c:d5:90:39:21:49:3e:9c:
91:f5:07:68:95:c3:93:85:a8:7e:78:54:5b:7a:04:
c1:9f:f0:26:e9:e4:41:1b:d2:02:4a:8e:d3:58:8e:
b8:97:27:4c:18:53:25:d5:f7:0a:69:58:7c:c1:e7:
87:27:2b:17:bf:14:9f:28:6c:bd:82:91:b2:f3:f6:
71:d1:4f:eb:a8:28:38:93:e6:40:3e:94:64:a9:aa:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:DB:52:16:A7:3F:88:B5:68:9A:71:82:DB:FF:4D:56:E7:AE:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ABB6D80CE5F11EFAB03DC75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.156.0/24
Signature Algorithm: sha256WithRSAEncryption
62:06:0f:cf:14:f3:e5:ba:c6:1b:d8:0d:99:ae:e2:8a:29:0d:
e7:3f:03:e8:b7:8c:5f:84:02:6c:ce:dc:02:7d:c0:34:6e:9e:
7f:dc:4a:38:70:44:36:91:64:cf:17:dc:81:22:a8:5c:52:5e:
87:d0:9a:0c:42:dc:3e:5b:08:4a:5b:c8:86:dd:04:b8:98:17:
af:af:23:95:8d:fc:7f:3a:d3:c6:96:37:47:ec:f5:c2:bc:b7:
fa:ac:2c:a6:1e:69:fe:42:84:7e:25:85:df:79:a0:a7:d5:dc:
5c:44:68:92:2d:6f:eb:2c:a8:92:db:e8:21:90:b4:24:76:3f:
27:2f:63:b4:8f:ce:2d:cf:90:63:32:66:1a:54:e9:8a:64:ad:
73:f8:d6:b1:bb:81:40:5d:fc:3f:cd:5c:ca:5f:05:64:2c:12:
7b:9b:a8:be:37:ff:38:fe:69:f8:6b:14:3b:01:69:c4:95:46:
41:9e:c5:22:ba:81:ad:95:3a:79:c3:2b:2c:c2:93:0a:f9:8d:
98:17:4a:08:07:78:e7:d9:61:c6:41:f0:09:e7:ac:df:30:e8:
7f:4a:a4:21:51:2c:ca:ec:37:fe:63:60:9b:b5:8a:ea:d9:1f:
ac:01:68:e8:61:6f:fd:e2:21:33:cd:ba:58:4a:d2:bf:dd:9d:
56:20:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:55 2025 by rpki-client