Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC306FCC9AA11EF8C07BA84762E951A.roa
File: 5BC306FCC9AA11EF8C07BA84762E951A.roa (raw, json)
Hash identifier: iXWXa7BA5nFAZG/7LX4c0yVu91WDe5zl7kelE4bWkt8=
Subject key identifier: EC:02:85:E0:C0:C8:9B:2B:1B:0C:3E:62:B7:DE:80:B4:3D:C5:BD:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F69D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC306FCC9AA11EF8C07BA84762E951A.roa
Signing time: Fri 03 Jan 2025 08:11:40 +0000
ROA not before: Fri 03 Jan 2025 08:11:35 +0000
ROA not after: Sat 18 Jan 2025 08:11:35 +0000
asID: 139646
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63133 (0xf69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:11:35 2025 GMT
Not After : Jan 18 08:11:35 2025 GMT
Subject: CN=67779bbb-b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:d2:42:25:b9:53:4f:2d:38:8e:89:9a:29:
c3:13:c6:f2:52:1b:d3:99:c4:c1:52:65:7d:2d:33:
30:10:c2:e6:45:86:ad:33:a5:da:98:df:21:32:be:
8e:79:40:50:1d:eb:b8:0d:69:7a:9f:51:75:cd:d6:
59:9c:c5:4e:24:0d:3e:9f:0c:d2:bd:6d:24:ef:98:
fc:7d:fb:8d:10:47:9d:7f:79:36:7c:12:3c:24:47:
55:28:71:78:ba:21:66:34:d8:c9:eb:fe:2c:a9:e8:
80:30:26:ae:dd:c1:90:4f:b9:76:bb:94:c6:aa:73:
80:c3:be:fb:e9:30:ab:d1:54:2b:72:24:d8:f3:69:
cc:e6:0d:54:95:9e:13:91:94:6f:44:85:a9:bf:9d:
86:2d:2d:06:4b:f4:9b:f5:33:fe:68:e1:4b:ec:1b:
09:b0:a0:9f:1e:bc:c7:28:e7:86:ee:63:61:0a:c0:
fe:00:87:f2:c8:95:9a:e7:56:c7:2d:88:9f:84:3f:
ab:0a:16:af:aa:c8:78:fa:fc:cc:46:1d:47:df:fe:
5a:6b:e4:8e:13:d6:53:2a:a4:60:b3:38:8b:6c:ad:
e0:2b:de:b6:ca:23:fe:77:ab:5f:a2:2f:bc:48:59:
f9:12:46:33:9c:7d:df:63:d3:60:9f:24:2c:62:fe:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:85:E0:C0:C8:9B:2B:1B:0C:3E:62:B7:DE:80:B4:3D:C5:BD:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC306FCC9AA11EF8C07BA84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
17:5b:87:51:30:8d:2b:81:ad:27:e1:ff:5f:8a:4f:08:11:f8:
03:48:0d:22:9b:4d:d1:b6:a9:c5:6e:39:e1:d7:93:cb:54:fd:
93:36:6c:9a:af:93:2e:dc:b8:b0:cb:c3:e4:f8:79:eb:9c:bb:
eb:57:b6:cb:be:c8:70:8e:09:a7:1e:ba:10:5f:75:8d:3f:42:
9a:93:6b:ee:8c:7c:1c:2f:b7:de:26:88:5a:e7:77:c2:35:df:
08:10:79:a1:40:4b:fc:3f:9e:5a:b0:1c:5f:16:94:ba:fa:f1:
d5:1a:43:2a:74:f1:89:5a:ca:c5:38:49:c3:95:23:7e:69:01:
d6:06:8c:0f:ee:63:57:c5:91:2f:23:ff:09:ae:a6:c5:bd:cf:
ef:32:d8:28:f0:09:d7:78:93:51:75:0f:ca:0c:bb:bb:41:48:
18:a5:83:92:e7:29:49:1a:42:f7:d6:d6:74:96:b6:fb:23:35:
35:dc:5a:fc:9e:9a:6d:bd:fe:97:40:3a:12:24:11:08:89:2d:
27:69:1d:b7:cf:c7:4f:d6:aa:f3:0d:34:74:d2:49:22:5c:57:
9b:0a:51:91:f6:44:e1:21:60:71:84:7e:a8:91:11:5b:98:e8:
3f:54:ea:e6:f4:4e:55:ae:0a:f6:4b:3e:f4:2a:39:11:12:83:
8b:da:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:06 2025 by rpki-client