Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE4575ABEB511EFBEC50474762E951A.roa
File: 6DE4575ABEB511EFBEC50474762E951A.roa (raw, json)
Hash identifier: UGWBv8OumsVOD3N3zzVGS3uUkkptzZsExlryQgwj2UA=
Subject key identifier: BD:F2:00:94:DB:44:7B:C1:BC:1D:1F:5F:BB:ED:BD:FC:75:7F:B9:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E767
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE4575ABEB511EFBEC50474762E951A.roa
Signing time: Fri 20 Dec 2024 09:33:11 +0000
ROA not before: Fri 20 Dec 2024 09:33:08 +0000
ROA not after: Thu 23 Jan 2025 09:33:08 +0000
asID: 140869
IP address blocks: 45.203.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59239 (0xe767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:33:08 2024 GMT
Not After : Jan 23 09:33:08 2025 GMT
Subject: CN=676539d7-b38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:ad:55:ee:f4:49:2a:71:be:75:7c:2f:7a:
03:73:e3:8c:0c:5d:b6:cf:98:f5:04:bb:04:68:0c:
f2:d9:bc:2a:4b:0c:ab:e2:a8:47:ee:34:df:8b:6a:
ed:48:43:5d:30:8f:f5:e0:b1:f6:e8:29:28:f6:c2:
0b:e6:95:be:09:91:79:d4:33:31:05:b8:ac:74:08:
3f:0d:ce:12:d9:90:45:bb:14:68:09:54:ef:27:ef:
71:a2:99:29:d6:8c:0f:c0:3c:70:c4:59:18:97:a2:
20:78:69:ad:7f:ab:50:d3:55:57:91:55:7a:81:cf:
a6:a1:12:61:5f:63:09:35:a2:80:b4:44:eb:0e:0f:
4f:15:ca:53:6c:95:91:03:f5:97:cf:2e:76:81:bf:
58:af:b4:24:0c:20:20:fb:f0:30:29:b5:ab:c9:a1:
36:d5:ff:7f:32:33:02:e8:0d:0d:7b:4c:92:7f:63:
d6:73:a1:da:85:13:5c:ff:23:98:14:bd:98:38:27:
e5:2d:88:d0:9c:a3:df:91:dd:34:db:1c:84:0c:55:
d9:30:36:cf:d6:15:5a:39:40:17:28:6c:8b:53:9e:
c8:1b:b0:76:08:59:69:43:62:91:6a:d3:60:b5:f1:
e7:3a:4f:d0:dc:a5:7c:55:7e:7f:a1:f5:c4:e3:2d:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F2:00:94:DB:44:7B:C1:BC:1D:1F:5F:BB:ED:BD:FC:75:7F:B9:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE4575ABEB511EFBEC50474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:15:44:87:7f:4e:e5:23:db:5f:2c:02:06:63:8f:76:90:8b:
cc:54:ea:49:ce:02:d5:02:46:41:4d:75:40:da:08:82:5e:7b:
e4:02:2c:bc:f7:39:b3:a4:f1:84:79:8c:e9:0d:0b:da:2e:ce:
2d:ec:be:3c:64:e7:48:94:ef:19:46:cb:8c:60:82:ca:a2:a0:
99:92:16:e6:4f:de:f9:8f:48:3a:3a:c3:af:1e:4c:fd:c9:8a:
c8:20:68:42:88:91:df:58:46:d2:04:ff:0c:82:91:11:85:12:
11:69:98:40:b3:eb:ab:f8:49:65:58:7d:60:e0:5a:d1:fb:32:
fb:41:db:df:a0:cb:ca:3f:06:f5:a5:dc:a4:81:7d:fc:e1:8c:
eb:98:a7:e0:b7:32:46:2e:41:2b:2c:e3:af:a9:b7:6c:3a:eb:
79:79:37:e0:13:6b:96:6f:da:05:04:de:bf:9e:84:1b:51:ef:
d1:08:03:97:05:e6:ba:d2:c4:07:60:bc:83:04:c2:9f:80:70:
29:84:0d:b2:2c:56:a7:5f:a6:8c:02:b3:95:4b:8a:8b:48:6f:
9f:b8:9d:85:16:1b:22:1b:eb:3c:6f:a4:53:a6:c1:fd:6f:8d:
ff:0b:5e:fb:02:26:49:d5:9e:bb:6f:b2:2b:a2:a9:7d:14:e5:
97:4b:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:07 2025 by rpki-client