Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDB3A60B78B11EFBF6DA56A762E951A.roa
File: 5FDB3A60B78B11EFBF6DA56A762E951A.roa (raw, json)
Hash identifier: AWYc71Yb+UWPJlS3z2k7EakV39Lz79jPWDEiQDUjJlI=
Subject key identifier: BE:26:15:68:11:EF:02:AC:BE:79:8E:5E:C6:FD:DC:54:44:0C:71:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E28B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDB3A60B78B11EFBF6DA56A762E951A.roa
Signing time: Wed 11 Dec 2024 06:44:31 +0000
ROA not before: Wed 11 Dec 2024 06:44:27 +0000
ROA not after: Thu 16 Jan 2025 06:44:27 +0000
asID: 6079
IP address blocks: 45.205.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57995 (0xe28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 11 06:44:27 2024 GMT
Not After : Jan 16 06:44:27 2025 GMT
Subject: CN=675934cf-69c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:3b:f4:bd:84:98:22:cb:53:aa:82:31:43:
93:2a:4c:ca:ba:d1:9d:f2:f5:fe:c1:ea:f5:95:80:
94:e6:35:79:52:db:ea:e3:40:66:cc:1e:b7:bb:7d:
df:18:f6:54:a6:5c:84:4f:de:c9:d1:b9:f4:54:66:
3f:3e:85:62:e6:66:c4:cc:c4:1c:4b:d3:fb:74:c3:
6c:44:7d:32:ce:36:3b:e5:e7:71:ed:be:1e:69:0c:
cd:8c:2b:3f:0b:4e:eb:5a:a9:f7:bf:30:39:0f:2d:
83:4a:e0:9d:0e:a1:d8:40:e9:3f:98:27:73:5b:d8:
12:b8:46:9f:1d:a8:70:4f:a7:99:f1:36:d7:36:73:
39:2f:cc:a6:ed:cb:c7:92:9c:06:38:4f:56:31:83:
93:5e:38:fe:93:0b:6d:72:81:a2:b5:c2:29:21:35:
d7:ce:ca:90:22:0a:cd:fa:5a:90:78:82:65:8a:74:
9c:b1:ed:80:d7:df:b6:f6:f8:d4:8e:6a:12:2e:2a:
d3:08:f6:9b:2f:0c:3a:9d:36:67:70:59:c2:3c:c5:
79:78:6b:bb:74:18:09:fb:96:94:f6:06:f8:c3:91:
5d:14:5f:46:86:76:11:88:9d:3a:2e:b5:23:3a:af:
f8:fe:d3:ca:d4:5e:ae:54:8f:33:b6:19:7f:1f:b6:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:15:68:11:EF:02:AC:BE:79:8E:5E:C6:FD:DC:54:44:0C:71:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDB3A60B78B11EFBF6DA56A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:20:fc:f9:64:b5:bf:89:0c:bf:d1:b3:31:bc:f3:73:35:03:
a2:09:9f:99:83:e7:bb:25:1e:20:56:63:68:93:39:a2:5a:3f:
82:92:81:12:92:33:22:9b:59:c1:f6:66:56:50:be:e2:3e:ed:
72:ce:9d:e8:f3:11:b0:b4:32:ae:a2:59:f1:9f:e9:dd:98:ea:
3e:e6:70:43:31:fc:7b:02:cd:47:98:5a:41:2a:03:5f:9a:fc:
fa:ec:48:9a:e0:b6:6b:dc:8b:a9:05:27:35:26:32:65:6b:1f:
aa:74:29:6e:bc:6e:d0:b1:55:f9:a6:c6:f4:71:23:df:e1:bb:
90:e5:aa:bc:86:8e:f7:05:13:a3:0d:1e:55:f8:9d:dc:2d:02:
4e:ea:f5:90:76:7e:41:4c:d1:62:ca:8d:78:08:f2:6d:aa:10:
d7:b8:83:4a:94:66:c5:4a:33:f7:40:61:19:ab:3e:5b:fb:48:
4f:fc:58:97:f9:77:a6:cb:9a:86:cc:d8:36:11:13:6e:66:22:
e0:e4:c1:d7:f0:94:9e:e0:94:1d:07:b5:1f:1d:0e:2b:34:48:
a5:c0:7d:35:9c:7e:cf:57:71:f8:8d:3a:63:26:f2:89:e1:cc:
eb:49:f5:11:55:35:1a:f8:61:91:af:e6:5f:1e:f0:c2:fc:f1:
e3:ac:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:16 2025 by rpki-client