Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6BFF7EC9B711EFBF08FC58762E951A.roa
File: 6C6BFF7EC9B711EFBF08FC58762E951A.roa (raw, json)
Hash identifier: FShzh8kEFL4vKQ4jMat4vrqDCkmRCav171yaL72ZL1M=
Subject key identifier: 7C:C9:F3:33:BD:46:45:01:C9:50:D4:BB:1B:BF:6F:C3:C6:C4:D3:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6BFF7EC9B711EFBF08FC58762E951A.roa
Signing time: Fri 03 Jan 2025 09:45:11 +0000
ROA not before: Fri 03 Jan 2025 09:45:07 +0000
ROA not after: Sat 18 Jan 2025 09:45:07 +0000
asID: 139646
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63195 (0xf6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 09:45:07 2025 GMT
Not After : Jan 18 09:45:07 2025 GMT
Subject: CN=6777b1a7-6e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:71:c8:50:ba:0d:32:85:c0:d7:e0:5a:b9:
82:6e:9f:13:c2:30:5f:fc:0c:72:5a:e1:07:8a:43:
e1:b7:fe:02:9f:11:78:f1:66:9e:c6:72:f8:a2:e6:
9c:73:7c:14:ed:0d:34:cb:02:7f:e9:41:91:df:da:
3a:f2:e8:6b:05:20:e1:43:06:f3:d5:d5:e3:54:56:
11:2c:3e:b2:dd:9f:f8:86:00:8c:e6:b9:53:09:58:
9a:cf:0a:00:b8:f0:25:cf:03:02:7d:22:ba:37:22:
f6:2a:c5:45:8e:60:00:4e:21:7b:6b:b6:bd:56:83:
28:aa:8a:09:c8:c3:68:08:2b:34:d0:c0:5a:eb:b6:
5f:3e:b3:67:c7:8e:39:b8:ea:e0:da:6f:64:b7:05:
e5:86:6f:13:4b:1e:b2:f4:2e:a3:6c:02:cb:2a:03:
b6:3c:4c:2b:07:14:19:c8:62:34:0d:19:96:55:0d:
81:1a:24:41:95:cd:0a:c8:60:20:8e:52:ba:3f:e1:
fe:31:ca:b1:16:c4:72:de:32:74:5c:79:f1:35:3e:
d1:bb:e2:33:c3:46:7b:9c:14:dc:b9:8f:10:b0:4a:
03:00:37:fa:17:9b:97:18:6b:cb:ba:e5:f3:ea:95:
42:da:91:c0:f4:1e:5a:1b:5b:fb:48:c6:0c:e5:10:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:F3:33:BD:46:45:01:C9:50:D4:BB:1B:BF:6F:C3:C6:C4:D3:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6BFF7EC9B711EFBF08FC58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:5b:57:91:5e:bb:be:0a:9c:34:4c:9c:74:8c:3b:48:ad:9b:
0e:fc:5f:30:18:ad:02:ba:32:e6:57:1b:06:04:ca:62:30:30:
b5:82:57:d9:ef:10:44:7f:fd:dc:21:d7:c4:25:87:8c:7c:41:
68:fb:fb:f0:cd:c2:c9:b7:02:91:93:63:1b:ad:7e:71:e8:4c:
9b:5f:ba:0a:5b:63:ed:f1:b1:31:ca:7e:06:e5:ae:65:f2:7f:
c9:90:94:40:e1:cd:f4:53:10:8b:3b:25:94:77:81:33:6e:38:
cf:bf:26:a0:ac:1d:6f:2f:47:30:c0:18:a4:4f:e4:b9:5f:5c:
2d:2f:14:13:07:cd:1d:66:65:96:f9:c5:46:ed:59:74:d6:63:
8a:98:18:45:3a:bb:c2:c8:a6:22:80:76:68:dc:4a:a4:fc:43:
12:25:92:ac:64:a9:c2:1a:32:79:a3:90:ca:a5:43:1b:93:17:
33:be:d7:2e:52:2d:e3:50:fd:07:91:cf:cf:94:9e:29:37:4a:
0b:2d:be:73:62:ef:9d:cc:08:ef:39:8d:92:cd:fd:64:30:1c:
d6:14:c4:04:02:53:2d:18:33:45:7e:d2:c3:39:2a:ba:8f:37:
83:03:a7:48:90:17:29:51:58:2d:f2:1d:f2:3b:f8:5f:44:0e:
de:b8:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:05 2025 by rpki-client