Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED323CECBEC11EF95C09F55762E951A.roa
File: 5ED323CECBEC11EF95C09F55762E951A.roa (raw, json)
Hash identifier: wSMS5Odgl4GdpJaOl4mJFG6H8RyzC47C8dAB+mwVh8o=
Subject key identifier: 88:60:2F:19:A0:29:B0:75:68:A4:0B:16:39:0E:9F:50:18:EE:45:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F82E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED323CECBEC11EF95C09F55762E951A.roa
Signing time: Mon 06 Jan 2025 05:09:14 +0000
ROA not before: Mon 06 Jan 2025 05:09:10 +0000
ROA not after: Thu 16 Jan 2025 05:09:10 +0000
asID: 5065
IP address blocks: 45.200.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63534 (0xf82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:09:10 2025 GMT
Not After : Jan 16 05:09:10 2025 GMT
Subject: CN=677b6579-6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:c2:44:cc:94:c6:73:69:75:c6:04:ca:1e:
27:5f:ae:9a:8b:5a:9b:3a:91:47:a6:6b:78:0c:bb:
86:52:88:c4:bf:98:ce:5d:29:7d:32:77:27:81:c2:
a9:f6:c3:c3:75:a8:b4:22:09:69:56:59:6b:b6:7f:
c0:3a:a2:39:58:cb:78:4d:65:8f:b3:ed:72:bd:9c:
dc:1d:86:44:a6:61:e5:16:ae:c2:70:99:17:7c:9a:
43:db:db:f2:28:bf:2c:a3:67:d9:7f:4e:ee:f5:d9:
a7:36:30:06:ef:08:80:79:f1:53:64:de:86:e7:fe:
12:df:70:4e:05:f6:69:a3:8d:51:2e:e5:ec:bb:28:
40:5e:17:b0:8d:b8:8c:f0:a5:c2:84:1f:60:68:bd:
c1:04:61:6e:6f:7b:8e:d8:4f:19:37:07:37:12:87:
0c:6b:8e:c0:f5:c1:95:c7:bf:a1:88:df:a0:46:74:
9e:b9:b7:14:b4:ff:19:4c:72:e7:15:44:9c:ab:d1:
c4:fd:0c:04:f7:28:6e:3b:88:a7:c2:cb:7f:13:b6:
0f:73:d8:7d:92:f5:e0:70:a2:87:62:90:0d:96:d6:
cb:00:f7:b1:d6:7e:75:53:4e:5d:83:65:37:cf:19:
33:85:29:f3:27:ac:ab:56:2c:45:f2:21:22:d9:81:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:2F:19:A0:29:B0:75:68:A4:0B:16:39:0E:9F:50:18:EE:45:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ED323CECBEC11EF95C09F55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.152.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:d9:e2:d0:01:0c:d2:ba:3e:d9:42:6f:82:1d:d4:8f:55:9d:
29:7a:b2:b0:a5:fb:45:a2:34:a4:14:d1:06:70:2b:12:de:3b:
35:22:d0:85:a7:de:ca:e7:ea:3a:07:ba:48:8b:39:63:34:29:
16:04:0f:f4:c7:0a:38:9e:96:e4:ba:46:86:70:1a:1c:49:53:
65:ab:4a:18:4f:d8:80:1a:ad:40:e5:e7:c0:74:ad:a8:47:d9:
28:5e:a4:0a:08:10:6d:83:5e:99:d1:b6:59:15:bc:c4:a0:1f:
fa:51:60:2f:31:c6:a0:c2:ca:b1:7b:34:ea:50:dc:2a:5e:29:
e0:36:07:31:aa:86:a1:9d:44:0a:e2:c0:94:a4:f3:9f:8d:9f:
e7:bf:8e:09:03:bc:a5:73:d4:fc:86:f0:3f:86:50:0f:44:6f:
38:d2:02:0b:60:b8:03:0f:20:cc:05:b1:44:ce:e9:31:5d:75:
8b:1f:ca:c6:38:cd:62:36:7e:37:7c:7c:64:3b:39:88:4d:99:
5d:76:23:91:11:5d:d6:d5:81:e6:48:a2:4e:b7:2a:1c:82:15:
ab:81:f8:b1:97:62:88:d5:56:6f:2e:10:b5:28:67:f4:78:ee:
7f:55:15:24:19:00:13:be:a6:58:3b:be:1e:07:44:7c:59:c9:
75:c4:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:36 2025 by rpki-client