Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C99F66C1C811EF9590CB53762E951A.roa
File: 64C99F66C1C811EF9590CB53762E951A.roa (raw, json)
Hash identifier: JX0kg5WjgKDkNC6cqZ0VUZtkiDKpyhNTcsGpHt9WGnc=
Subject key identifier: AD:E3:0B:DD:88:43:F1:7E:5A:6B:EF:38:1E:D7:9A:33:05:B0:0C:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E875
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C99F66C1C811EF9590CB53762E951A.roa
Signing time: Tue 24 Dec 2024 07:26:30 +0000
ROA not before: Tue 24 Dec 2024 07:26:26 +0000
ROA not after: Sat 01 Feb 2025 07:26:26 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59509 (0xe875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 24 07:26:26 2024 GMT
Not After : Feb 1 07:26:26 2025 GMT
Subject: CN=676a6226-de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:d2:4d:04:45:60:5d:60:53:1b:bd:eb:b5:
a9:7d:ff:97:ff:a3:97:28:7f:0d:b7:6f:e3:6e:98:
6d:15:3a:b5:84:c4:0c:aa:8f:1f:8a:d6:a9:fd:3f:
ce:d5:9f:26:4a:f6:ca:ed:2d:ee:c3:9a:ab:eb:3d:
1a:89:82:bf:ad:dc:96:0f:d2:04:33:54:a1:12:49:
bf:13:67:22:42:94:03:a4:26:e1:79:e4:62:c4:83:
40:d3:a7:ef:7a:42:f1:9f:fe:99:dc:cc:95:c8:2f:
05:18:f6:08:69:db:99:73:9d:04:f3:5c:fd:56:ff:
25:41:c7:d4:93:ad:6d:9f:34:c6:f1:25:f2:d2:36:
c8:b1:b7:bb:d7:88:d7:3d:ee:c1:15:d6:43:19:b7:
50:f5:62:36:34:fa:f5:19:0b:6d:85:c1:d6:09:67:
ea:2d:bb:73:09:ff:17:48:61:64:ca:ae:81:c6:4a:
c6:39:8e:58:99:75:07:56:4b:3c:cc:a9:24:00:25:
b8:f9:28:7d:d0:45:5f:82:46:5c:2d:af:58:c7:84:
22:26:b4:28:04:e9:0c:85:d6:93:a1:09:27:99:69:
48:ca:24:32:a3:f3:8c:e3:e3:1d:3a:e2:00:2f:b4:
b4:c8:fb:64:5e:f2:ad:00:09:dc:3f:b2:20:06:9f:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:0B:DD:88:43:F1:7E:5A:6B:EF:38:1E:D7:9A:33:05:B0:0C:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C99F66C1C811EF9590CB53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:ce:55:40:59:45:b1:5b:92:51:bc:0e:5b:cc:f3:66:99:
81:d9:6d:df:cb:29:e3:da:5c:ab:1b:6e:d3:40:56:48:16:29:
c1:bf:56:c2:91:46:ef:f2:c1:e1:ed:34:91:7f:f2:53:45:14:
25:18:0d:62:17:2e:93:b9:76:22:4c:30:a5:07:2f:56:fc:8d:
38:57:3d:14:66:cd:87:4b:11:de:00:ac:86:7b:e8:94:bb:79:
10:ec:fd:8e:89:da:97:11:82:48:ec:3c:e3:8b:40:2e:5c:63:
df:1c:0f:a8:0f:33:12:3f:11:31:78:c9:cc:c8:a2:6d:4f:ba:
2a:78:95:56:4d:a6:17:4a:7c:2d:67:56:6f:04:ce:58:ca:bc:
a3:b2:e4:e6:1d:b0:4b:6e:8d:c5:d7:fc:8a:6e:ff:be:2d:44:
f7:6f:13:a6:4d:0e:0d:37:eb:e0:48:b7:12:b0:c5:ba:48:47:
8f:05:ec:1f:12:cf:5d:23:e2:31:73:e3:6b:62:0e:5a:e7:87:
7d:1f:1e:6f:9e:63:cf:6e:2a:14:ad:3d:0a:d3:2c:0e:31:fb:
a0:2e:45:47:e2:b0:1d:2e:aa:90:4c:06:15:40:a3:bb:8e:13:
fe:fe:6e:88:63:f8:2b:ff:c2:62:d3:ec:7b:ff:31:90:ce:c6:
62:2e:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:03 2025 by rpki-client