Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69A3376ED31011EF9B7AA0B1762E951A.roa
File: 69A3376ED31011EF9B7AA0B1762E951A.roa (raw, json)
Hash identifier: x6p7a3XAAMzWsofPxql2dmlB7fDtN7EwUkOc8wF1ftE=
Subject key identifier: 97:77:7A:75:3E:A1:B7:A1:0C:7F:5B:71:32:29:89:68:67:E1:6A:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010849
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69A3376ED31011EF9B7AA0B1762E951A.roa
Signing time: Wed 15 Jan 2025 07:14:52 +0000
ROA not before: Wed 15 Jan 2025 07:14:48 +0000
ROA not after: Mon 27 Jan 2025 07:14:48 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67657 (0x10849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:14:48 2025 GMT
Not After : Jan 27 07:14:48 2025 GMT
Subject: CN=6787606c-2e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:27:f2:03:98:04:54:98:e3:38:99:6e:68:
f6:e0:f6:db:94:50:36:05:57:05:cc:15:05:be:64:
ad:52:4f:9e:1d:d9:51:08:90:c0:a9:11:47:08:47:
a9:cf:39:58:ee:f3:e1:80:53:bb:71:50:75:df:ac:
3d:a5:89:09:e0:96:c4:93:c4:03:02:38:1b:53:c0:
3f:7b:4b:56:17:03:da:5b:de:b5:8c:25:b5:dd:c3:
62:ba:45:96:3e:19:a2:5f:bf:99:fd:3c:a4:1f:4f:
99:12:42:9d:90:97:b0:ea:64:8d:57:48:29:21:36:
1a:f1:bc:2e:fc:3e:dc:32:11:21:5e:68:d7:14:7e:
09:11:ea:13:93:b6:cb:a7:0f:ea:a4:cc:ce:16:a4:
48:40:d9:5b:5b:2b:40:f3:f4:a8:8a:8d:44:ec:3c:
03:83:36:aa:6c:e8:9f:5e:fc:ef:96:a8:9e:22:d9:
96:14:d6:38:06:81:13:a7:92:61:15:30:6f:27:82:
18:fc:74:82:b5:5b:9a:42:65:fe:f9:50:3e:79:44:
53:2f:ae:0f:a6:aa:d4:0a:89:64:68:f2:22:02:e4:
81:7c:bd:1d:88:31:b1:c0:67:a7:da:81:4d:06:a7:
30:76:b6:9f:d2:74:39:90:53:0b:4f:f7:9d:e0:30:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:7A:75:3E:A1:B7:A1:0C:7F:5B:71:32:29:89:68:67:E1:6A:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69A3376ED31011EF9B7AA0B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
53:95:34:d5:77:dc:4e:84:03:c5:46:81:f9:d3:4f:8b:68:0a:
ac:80:30:b4:77:40:7d:01:60:0c:b0:f7:66:d1:bc:b0:d4:48:
5f:e8:cd:41:a3:d7:1e:b9:af:f0:9c:95:28:e5:3f:c6:dc:8f:
12:02:7c:e9:59:f2:77:a2:8b:97:e3:4c:87:fa:7b:7c:84:b4:
f9:f7:0d:6b:78:9d:18:ba:d4:c2:63:97:9d:8b:5f:d0:55:f7:
2a:b1:fb:62:e1:2f:b3:6a:c0:c1:b3:2e:d5:d2:e3:82:05:d2:
47:de:d4:14:b1:51:da:09:4c:8b:c0:08:e9:d7:be:4b:af:4b:
0b:f1:e0:ff:e9:52:43:bd:99:33:72:ec:cd:57:d4:5a:fe:47:
02:dc:c8:3c:35:33:f8:be:d7:ac:1a:de:b8:66:0e:cd:86:87:
70:71:c7:38:f1:62:18:1d:35:4b:f4:48:2e:e7:a7:e0:6c:93:
6b:77:62:d8:8c:42:51:c7:1f:77:7b:0c:4b:3f:97:0a:23:04:
0b:bb:06:51:3a:ab:75:4a:12:93:f6:1a:e4:b1:9a:88:41:26:
68:ca:dd:d0:84:35:85:d4:01:23:5b:12:5f:ce:07:39:37:12:
43:2b:ad:f3:d9:f1:77:c1:61:4f:b6:69:b5:23:7e:bb:02:a2:
be:5e:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:28 2025 by rpki-client