Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CECF18CE7F11EFB17487BF762E951A.roa
File: 64CECF18CE7F11EFB17487BF762E951A.roa (raw, json)
Hash identifier: zFDRrlwCioPDIDneaKbLGDRc4Y1RJi/raq1MT5Dwri4=
Subject key identifier: 31:31:17:75:7E:90:CC:69:80:03:FF:B3:27:0B:CA:2D:0E:AE:11:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CECF18CE7F11EFB17487BF762E951A.roa
Signing time: Thu 09 Jan 2025 11:46:42 +0000
ROA not before: Thu 09 Jan 2025 11:46:32 +0000
ROA not after: Sat 01 Feb 2025 11:46:32 +0000
asID: 17561
IP address blocks: 45.203.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66440 (0x10388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:46:32 2025 GMT
Not After : Feb 1 11:46:32 2025 GMT
Subject: CN=677fb722-b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:86:4c:84:d8:54:8f:05:2a:b2:0f:14:a9:
cc:65:0f:4e:2e:31:23:94:d4:1f:1c:85:c5:37:dd:
03:78:2a:d8:d5:28:e7:72:ca:ee:b0:5b:7d:77:9b:
e3:95:71:5e:dc:4a:13:a5:24:c9:dc:4b:da:4b:79:
ce:1d:8f:43:08:fb:3f:0e:b0:4c:a2:68:db:33:e5:
17:f7:cb:63:a5:da:6a:c1:f1:81:0f:3f:96:3e:db:
f1:9f:b3:a6:e5:ae:39:f2:75:63:2d:bc:f4:90:54:
e1:aa:2c:72:4d:73:67:91:2d:9d:b2:82:83:92:da:
85:69:7f:87:75:ab:38:28:61:47:96:70:05:82:7e:
aa:2a:e5:97:69:e0:c2:73:06:20:bf:b8:7a:e0:58:
1c:71:47:75:4c:88:1a:e5:03:8e:1b:14:b8:c2:6e:
09:cc:38:c8:a8:9f:b5:77:54:66:e7:d0:61:2e:68:
f7:77:6e:22:1a:8d:74:e1:8a:e1:04:4f:6f:66:f5:
c9:ba:12:42:34:c8:4e:56:46:0d:1c:4a:2f:eb:da:
28:2a:3b:8e:e2:e5:75:ca:0d:78:76:ec:75:63:35:
e1:c2:33:4f:ca:1d:17:8e:7e:9e:f3:53:00:f6:50:
a2:42:9e:fd:2f:7c:91:63:2f:72:f0:9c:b6:1c:6e:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:17:75:7E:90:CC:69:80:03:FF:B3:27:0B:CA:2D:0E:AE:11:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CECF18CE7F11EFB17487BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b9:94:d1:24:d1:8b:9c:3a:5c:ce:7d:14:56:16:04:cc:87:
c6:9e:0e:f9:77:6a:a9:1e:f1:df:7f:be:ef:cf:73:09:2d:a0:
59:a8:87:8f:cd:59:20:3e:89:a3:96:b9:f6:63:3b:d1:87:55:
8d:6e:cb:d2:9c:f5:b0:d0:a2:2a:ab:77:7f:c7:86:68:18:2f:
b5:eb:9e:74:2f:a6:3b:0f:8d:7c:2f:36:b4:76:46:04:75:6e:
9d:27:e7:62:26:29:0c:e1:bd:4a:9c:09:f6:12:19:91:42:33:
8d:4e:cc:ad:e7:c5:9b:42:07:29:03:26:f0:40:9d:6f:88:99:
58:89:38:1b:b9:dd:d4:cc:3a:af:e2:54:41:13:7d:20:c2:5d:
1e:35:47:a8:0f:6e:83:68:ff:55:72:fd:df:c4:4f:8c:89:30:
d9:f0:1d:2f:1d:98:e9:3c:ad:65:ca:73:dd:cd:1d:21:11:9f:
6f:ee:46:26:8d:52:62:90:27:f2:d9:52:03:87:00:fc:c4:96:
de:bb:4f:0e:f5:1d:f1:de:8d:e4:65:63:3c:49:bd:02:e4:ac:
a7:26:27:a1:df:20:c3:b7:06:ed:82:f1:d2:49:59:f2:b7:fe:
69:05:ac:66:5e:d8:47:61:7c:c8:16:e0:ef:c5:75:70:9f:98:
b4:e1:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:42 2025 by rpki-client