Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC178FACC2511EF9B9229BA762E951A.roa
File: 6AC178FACC2511EF9B9229BA762E951A.roa (raw, json)
Hash identifier: twogRG9Nd6q3ZJ/DQa54RobB0D1XA9YB7vcabW0P7AM=
Subject key identifier: AB:52:11:F9:A7:58:F4:A8:AA:EC:11:CE:D9:60:A7:05:E2:98:D7:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC178FACC2511EF9B9229BA762E951A.roa
Signing time: Mon 06 Jan 2025 11:57:35 +0000
ROA not before: Mon 06 Jan 2025 11:57:31 +0000
ROA not after: Fri 17 Jan 2025 11:57:31 +0000
asID: 39600
IP address blocks: 45.197.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63693 (0xf8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:57:31 2025 GMT
Not After : Jan 17 11:57:31 2025 GMT
Subject: CN=677bc52f-5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:19:b0:14:b2:6e:18:a8:55:a4:2a:71:36:
3e:af:6e:f2:56:03:60:2c:e8:df:59:17:0a:bc:33:
95:57:48:d6:24:60:aa:f7:ce:dd:fd:48:1b:3e:48:
41:8d:77:4a:6a:56:35:cc:c6:38:4e:b9:87:ba:77:
f3:f3:db:fa:6f:9c:12:b9:3d:70:d0:21:d1:65:5e:
45:e9:45:d5:18:d6:b6:2e:f8:7b:20:0d:37:24:07:
d6:03:cf:96:e6:15:56:43:d9:e1:ec:85:46:55:74:
04:88:d7:44:4f:57:e1:75:5c:cf:64:63:39:cd:1e:
48:b4:1b:fb:65:29:6f:8d:e1:46:17:bc:f1:32:cf:
33:da:0d:13:4f:4b:0e:88:e5:4e:b3:a0:aa:75:aa:
53:a5:0c:9a:74:a3:18:5f:58:ab:19:a5:da:59:7b:
2a:7c:1c:c0:43:31:c2:e6:09:06:62:03:62:f7:b2:
38:b4:6f:6d:ab:51:cc:ee:11:36:9f:4f:ff:60:41:
e6:aa:37:e8:d2:99:97:0e:b9:31:b6:a6:7d:13:95:
e8:d7:4f:c8:a3:ab:18:d9:bf:a2:a3:c6:4a:7e:04:
11:87:49:ae:61:dc:5e:bd:b6:d2:99:a0:b1:32:57:
1f:e1:b1:93:30:72:dd:68:7c:79:22:3d:89:48:88:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:11:F9:A7:58:F4:A8:AA:EC:11:CE:D9:60:A7:05:E2:98:D7:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC178FACC2511EF9B9229BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.30.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d3:ff:b1:b5:3f:e5:36:b3:99:7a:2e:3f:16:31:cd:24:91:
4f:ba:90:8e:72:ea:4f:83:39:be:6b:9c:aa:ce:3a:f6:b2:a7:
72:2d:35:5b:fb:6b:16:da:23:21:77:64:51:84:13:06:a4:1f:
17:fa:31:b9:13:93:e1:6a:94:fa:ee:5e:34:56:1c:0d:e6:d5:
00:31:b6:6f:d7:78:c2:3b:ad:69:08:7b:1a:99:44:e4:48:4c:
f4:9e:5f:2a:64:b6:f4:82:a1:48:88:b6:86:3b:0e:3c:b0:73:
d5:f4:17:3a:3e:0d:6c:fa:f8:b4:47:51:a5:2b:af:87:34:6a:
e7:93:2a:c0:0f:d4:f5:d9:60:82:87:39:ce:24:27:68:72:14:
fb:72:0c:a6:52:78:49:15:f2:da:c5:e5:e2:f6:05:79:0c:b8:
34:3b:fa:ee:64:b2:d9:69:b0:af:7e:19:8d:8b:52:43:8f:ba:
91:99:e8:b3:2c:3c:f4:64:bc:18:3e:ea:2b:49:fa:cf:cf:49:
4a:ff:73:6b:0b:b9:66:8d:2a:0a:43:0c:02:9e:ac:84:1c:b0:
40:9a:6c:ca:da:2c:1c:ae:8b:d7:43:ca:07:0f:8c:7d:8a:eb:
27:b3:4c:88:57:f7:43:5b:94:9d:02:fb:61:9d:d9:e3:d6:2b:
ef:86:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:25 2025 by rpki-client