Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672B7692BB7611EFB904568B762E951A.roa
File: 672B7692BB7611EFB904568B762E951A.roa (raw, json)
Hash identifier: 3fhpY1Z/5ki/UXf7QQCprjUzm6xrR34f0813N4PpDlk=
Subject key identifier: 43:1C:B3:83:21:72:1F:B0:2F:15:20:8B:EC:31:D4:DA:26:36:34:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E408
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672B7692BB7611EFB904568B762E951A.roa
Signing time: Mon 16 Dec 2024 06:24:28 +0000
ROA not before: Mon 16 Dec 2024 06:24:25 +0000
ROA not after: Mon 20 Jan 2025 06:24:25 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58376 (0xe408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 16 06:24:25 2024 GMT
Not After : Jan 20 06:24:25 2025 GMT
Subject: CN=675fc79c-0b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:e9:b9:07:dd:e0:4d:1c:0c:18:e0:52:00:
e9:77:bb:60:a9:9d:de:42:99:d6:91:3f:d2:18:29:
88:81:76:8a:03:75:31:d2:34:1b:53:d4:ce:9a:28:
e9:cb:c0:2a:84:6c:d6:d5:25:7f:04:ef:20:ed:f1:
f9:c1:a5:b5:93:5d:ed:fb:47:e1:a0:7a:fa:7c:6d:
f9:d6:06:37:6c:dc:e6:25:14:25:87:b7:0d:fe:e0:
63:26:bd:96:3b:21:68:f9:cc:9a:3d:33:68:fe:f6:
f1:7f:b2:a8:ce:76:b4:33:5c:66:2b:4b:f8:ef:f9:
ec:e4:27:77:05:f7:cf:1a:31:04:71:14:14:c8:4c:
e6:74:c1:f3:d7:f6:59:1d:cd:d0:8e:b1:ef:37:05:
16:28:02:ec:68:86:a0:66:cb:ae:6a:e6:b6:c4:5c:
8f:93:7e:57:74:ef:cc:c4:9f:76:55:cd:0a:81:9e:
fb:30:7f:6d:b5:c9:99:7a:c2:03:93:07:2f:61:53:
91:b5:02:b5:27:3a:66:33:21:e6:33:42:74:b5:23:
58:6c:71:5f:7c:ca:e2:ff:f8:d4:79:f5:59:22:a9:
24:aa:5e:4a:57:95:12:3e:71:bd:0a:79:c3:d6:e9:
42:fd:5e:0a:43:d3:51:ed:f9:08:b2:8a:92:a2:eb:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:B3:83:21:72:1F:B0:2F:15:20:8B:EC:31:D4:DA:26:36:34:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672B7692BB7611EFB904568B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:f0:03:3b:67:d5:ec:95:80:da:54:bc:04:10:81:38:b8:2b:
20:a9:ec:87:48:fb:3f:9a:12:cb:be:0c:93:6a:9d:22:ce:f8:
8f:30:3b:7d:51:b6:f9:2c:9d:1c:67:bc:0d:40:72:4a:29:a9:
95:2a:f9:71:07:56:dc:19:47:16:fb:44:b3:7c:3b:87:8c:52:
9b:d4:ff:d3:d3:ac:9b:0b:96:ba:14:60:a9:61:58:98:93:46:
61:fb:5d:f5:e0:1c:f0:56:6f:53:54:d1:05:7d:8b:ef:28:0f:
bf:29:0f:4c:3b:46:5a:41:1c:bc:5a:ca:f9:17:55:38:47:43:
87:6c:ad:45:b9:6e:42:7e:a7:a8:67:b0:88:81:d1:b2:e8:f9:
6c:5a:f2:bd:d1:81:1a:95:03:e0:73:f3:13:1b:22:98:dd:40:
1c:f5:9e:19:f6:82:1e:77:d8:7e:82:47:2b:a8:b3:8f:1e:54:
7f:fa:5e:92:8d:28:9a:18:8a:97:61:ec:a4:2d:9c:9f:83:fd:
29:aa:93:20:30:70:21:62:82:73:9b:c1:92:d4:57:36:f5:08:
76:9e:f8:97:54:dd:7b:e1:b9:b8:1e:7f:11:15:20:65:35:ac:
be:1a:0c:4d:1a:b1:d6:62:46:4b:f3:49:57:9f:4e:33:78:e5:
ea:ba:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:09 2025 by rpki-client