Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6196BAACC47711EFAED5586D762E951A.roa
File: 6196BAACC47711EFAED5586D762E951A.roa (raw, json)
Hash identifier: +uApuMUB5GUsMrG1KDOXQYZDMYVE9yWkFvkJXg2mG/o=
Subject key identifier: EE:6E:43:8B:8F:F2:65:2F:2C:B6:C7:C3:C6:3D:84:4C:73:E9:03:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6196BAACC47711EFAED5586D762E951A.roa
Signing time: Fri 27 Dec 2024 17:24:09 +0000
ROA not before: Fri 27 Dec 2024 17:24:05 +0000
ROA not after: Mon 03 Feb 2025 17:24:05 +0000
asID: 7018
IP address blocks: 45.202.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61672 (0xf0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 17:24:05 2024 GMT
Not After : Feb 3 17:24:05 2025 GMT
Subject: CN=676ee2b9-04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:c0:85:0a:c9:71:b8:04:d8:fc:0f:c8:06:
4d:b3:10:bb:44:17:e3:e5:32:54:34:9b:47:b5:7c:
c7:f6:47:0c:14:9c:0c:17:c9:d1:98:63:4d:35:cc:
32:95:f0:b4:d6:c4:5f:9b:8e:9b:45:48:9e:5c:69:
9e:5d:3a:5c:c1:d9:39:87:8c:c0:27:f6:12:32:d1:
17:54:21:d8:54:49:e4:b1:12:76:fa:fb:04:e6:e8:
a7:af:54:3a:df:a2:b4:c1:e7:79:f3:ac:d0:e2:f7:
99:64:c1:5e:e4:8f:bb:a7:fe:46:10:21:86:b9:91:
8a:c4:70:17:30:f6:16:13:cf:0d:87:33:fe:19:cd:
43:f9:19:fd:fb:0d:5a:79:27:5c:38:cd:1e:ff:a9:
ef:6e:70:8e:a8:5f:66:2e:b4:cd:3c:4c:6e:9d:18:
da:05:5b:0f:d3:d4:f7:c4:04:7a:ad:3b:f9:92:ac:
de:50:8f:7e:82:f1:1f:e8:e9:2e:f8:43:c2:e6:bf:
26:2a:2c:6f:f1:db:94:f7:cd:73:df:89:0b:62:76:
09:97:38:5b:63:f4:9f:cc:2a:c6:d1:9e:3d:05:8d:
9d:33:cf:7c:3c:b3:d9:5f:0f:46:f2:39:6b:e9:16:
57:46:be:6c:93:8e:1b:1a:c7:21:f7:f4:76:cf:f5:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6E:43:8B:8F:F2:65:2F:2C:B6:C7:C3:C6:3D:84:4C:73:E9:03:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6196BAACC47711EFAED5586D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:f1:01:91:82:6c:e8:38:a9:0a:be:8a:a2:86:0e:9d:39:66:
3c:21:d4:52:70:8b:9e:66:a5:38:76:1c:8f:c2:ae:2c:41:5e:
c6:3c:ed:fe:e6:49:de:cc:c8:64:64:ae:6a:a6:e7:97:dc:6a:
27:d1:c8:2c:86:97:d9:f9:2d:a9:38:b4:3e:71:61:f9:62:ab:
46:86:5b:e5:66:c4:1c:f5:fd:d2:48:69:e9:08:96:1f:e9:11:
01:86:00:de:62:62:c0:f7:e2:2e:b7:66:d7:8b:86:6c:92:47:
5d:85:e7:74:29:61:f4:fb:48:1f:fc:dd:91:e7:86:48:88:2d:
4e:27:a6:08:ec:58:85:3b:db:cb:2d:d7:61:52:80:05:e8:23:
be:32:e4:32:77:a9:bd:8b:11:a1:fd:72:82:2c:5c:84:69:d4:
c0:85:d7:0a:12:ab:24:c4:66:00:7d:e0:15:ff:45:aa:ab:4d:
c7:fe:d1:34:9c:e9:1c:a4:ec:15:f8:88:ad:6f:14:28:eb:35:
be:f5:03:7b:66:f3:66:1f:f0:88:66:3e:2d:47:ec:9e:7a:48:
d0:90:35:4f:c6:20:7f:e7:5a:be:15:28:8f:c5:5e:93:72:19:
68:e3:c4:72:71:41:c3:37:6e:80:10:bc:ab:d5:7e:c7:c3:1d:
96:4b:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:11 2025 by rpki-client