Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6588A074BF9C11EFBF33299B762E951A.roa
File: 6588A074BF9C11EFBF33299B762E951A.roa (raw, json)
Hash identifier: 0MMZfHu96yGI0ec6bt2KaEQY14/Cw6hHq79q+sJ9q7g=
Subject key identifier: C6:57:D5:2E:F1:14:37:B7:77:1C:B1:0A:8A:8C:15:18:16:C8:A8:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6588A074BF9C11EFBF33299B762E951A.roa
Signing time: Sat 21 Dec 2024 13:06:31 +0000
ROA not before: Sat 21 Dec 2024 13:06:27 +0000
ROA not after: Fri 31 Jan 2025 13:06:27 +0000
asID: 984
IP address blocks: 45.198.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59312 (0xe7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:06:27 2024 GMT
Not After : Jan 31 13:06:27 2025 GMT
Subject: CN=6766bd57-b007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:74:41:9e:17:20:3e:fb:1b:fe:9d:02:af:
4b:23:85:83:8a:5c:82:3f:06:d2:96:a1:90:b2:17:
5a:51:bc:3d:1e:e4:17:ce:5c:42:46:4e:5c:8b:9e:
eb:51:72:e3:be:8b:ad:ac:fe:31:0b:9e:10:71:f9:
3e:a1:b6:6a:01:39:1c:de:6c:d9:f2:9a:06:06:90:
6c:a0:23:45:5e:21:2c:9d:1b:83:7f:bb:c9:91:c2:
c5:43:9d:06:63:17:bc:bf:c8:bc:ff:50:1b:98:01:
bc:bb:af:8b:cf:9f:9b:0b:85:81:50:31:25:41:e9:
70:c3:86:0d:4e:86:31:d7:9d:42:62:4f:c5:68:71:
98:a3:9b:08:7a:d2:d4:19:24:0a:e5:ee:13:8a:54:
7c:e1:70:d9:4b:54:be:57:33:8b:d8:f3:97:e6:de:
4c:1d:59:de:ee:03:c9:5a:65:e0:18:87:6c:59:ba:
30:37:a7:af:3e:d2:34:f4:01:00:a3:6d:00:a7:ac:
b5:18:e1:e8:13:5d:f6:d0:c2:20:48:97:15:01:0c:
f3:98:68:b0:60:44:5e:b8:97:66:69:f2:12:19:72:
7f:08:72:dd:59:b6:7b:58:20:61:da:f7:57:77:4b:
98:30:93:ab:71:7a:71:66:94:eb:f8:9b:c6:bb:1d:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:D5:2E:F1:14:37:B7:77:1C:B1:0A:8A:8C:15:18:16:C8:A8:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6588A074BF9C11EFBF33299B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:8c:c1:f1:f4:7c:77:50:ab:09:b6:aa:6b:5a:06:42:49:21:
75:ad:51:c4:d7:e4:f1:af:44:1a:9f:28:a5:1d:e0:9c:fb:b0:
9f:80:39:6b:e4:12:3e:00:82:cd:12:1b:7f:ed:3f:e2:42:8b:
c8:c1:2b:90:c0:72:d3:e5:54:8a:69:6f:11:c2:5d:39:7b:d1:
92:a3:db:a4:f8:81:db:8c:87:6d:61:29:2f:4f:ae:ea:1d:03:
a9:fa:46:bd:be:8b:54:3e:33:be:ed:af:86:08:98:55:94:9b:
91:06:4d:d4:05:7b:a8:3d:e5:bc:7c:c1:54:7b:73:27:08:a5:
f3:db:82:ad:24:38:d4:e3:1f:fe:32:f1:1c:13:d7:a4:fc:d7:
54:f1:8c:cc:8e:b7:89:ff:7d:41:2f:b5:06:38:a0:9c:d8:7e:
ad:68:75:b6:38:69:e1:6b:b2:0c:e8:68:db:3a:73:a0:5d:c2:
f8:e5:b4:d7:7e:ef:a9:e8:58:48:8b:fb:b7:3a:f4:43:36:45:
f4:5c:9b:3a:3d:77:0b:3c:6a:ce:23:f2:b4:73:77:c2:ce:0e:
f5:5c:ee:3d:9c:25:f9:fe:a6:1b:7a:f7:b2:5e:ca:80:6a:ea:
82:db:f7:0e:80:98:63:86:38:01:65:32:bf:72:cd:27:c5:f6:
22:0e:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:12 2025 by rpki-client