Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EAB326CB92911EFB7CD1895762E951A.roa
File: 6EAB326CB92911EFB7CD1895762E951A.roa (raw, json)
Hash identifier: lO/3bC6ODRJz6SZT3mr1/9SdPV8B9wrk+4Sc1Pd0WAY=
Subject key identifier: B4:EB:EB:80:86:57:9B:31:85:EC:E6:F9:C3:C4:E6:D3:C4:07:67:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E331
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EAB326CB92911EFB7CD1895762E951A.roa
Signing time: Fri 13 Dec 2024 08:08:27 +0000
ROA not before: Fri 13 Dec 2024 08:08:24 +0000
ROA not after: Sat 25 Jan 2025 08:08:24 +0000
asID: 202656
IP address blocks: 45.200.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58161 (0xe331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:08:24 2024 GMT
Not After : Jan 25 08:08:24 2025 GMT
Subject: CN=675beb7b-abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:0a:bc:d8:7b:ef:91:d6:f5:2c:18:19:2c:
1d:e6:40:be:40:18:99:2c:f6:93:0a:28:74:2d:5b:
b2:0d:24:12:6b:f0:34:59:95:64:19:b3:72:be:c2:
5c:8c:e4:1a:31:f7:6f:5c:5d:6b:bf:5e:85:c2:a7:
22:7b:33:2e:0c:8d:68:67:0d:e4:92:d0:f1:3d:38:
55:a4:29:8d:cf:e7:76:32:eb:7c:31:85:78:9e:7e:
06:7f:b2:01:26:11:95:56:a4:f7:74:6f:ab:1a:89:
3e:71:f3:ba:b9:db:3d:b8:4d:0e:a4:23:ab:04:6c:
6b:69:d1:57:59:82:33:e3:98:94:5b:19:ce:9e:d8:
8e:5b:12:d5:54:79:84:9d:d0:f6:05:55:0f:74:94:
63:89:37:88:cd:1c:15:97:c8:30:a0:77:e2:d7:d1:
ba:ce:62:26:c1:0c:90:fd:89:02:47:cd:fe:87:55:
d0:50:51:8f:69:82:28:7b:91:43:e7:c7:10:ee:a2:
82:76:55:ff:00:c8:29:9b:da:14:d5:1c:87:3d:1d:
82:b8:a3:ca:af:f8:c9:a5:f4:e9:8b:c6:a6:5a:bf:
eb:4b:26:d6:50:28:0d:a6:db:9a:76:c8:dc:ff:5e:
cd:dd:22:e4:fe:16:c1:46:eb:d5:6c:a6:24:de:46:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:EB:80:86:57:9B:31:85:EC:E6:F9:C3:C4:E6:D3:C4:07:67:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EAB326CB92911EFB7CD1895762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.160.0/20
Signature Algorithm: sha256WithRSAEncryption
31:56:57:41:22:7e:78:d1:93:8f:15:6a:77:10:9b:b5:1f:f2:
6b:3e:6a:d1:1e:de:1e:3b:8a:0e:bd:12:56:17:0f:44:6c:4c:
81:20:2a:f4:25:68:9a:5b:48:b3:52:7d:39:ab:c5:a4:ff:d0:
e5:50:ca:4d:36:69:64:60:10:4d:f9:4c:0f:0f:72:23:18:52:
86:0e:f5:e7:fe:72:8f:32:e6:7b:02:6a:c8:7d:06:c0:ca:1f:
b8:41:9c:26:90:21:77:88:c9:32:2b:12:05:e1:9e:0f:01:76:
6a:12:32:1b:ae:9d:3b:60:bc:cb:cc:ce:f0:33:15:6b:8a:4f:
92:dd:3c:ea:74:fd:0b:9d:fc:32:69:57:53:29:42:49:39:24:
7d:75:b0:f5:2f:2c:fa:e8:b8:39:43:7f:08:a5:fa:59:00:30:
2a:e0:3a:10:16:35:52:2f:39:ab:82:60:d2:3a:b0:d0:d7:81:
b8:1f:4c:52:f4:1b:8f:e9:2f:fd:1f:ad:b2:9c:fb:6e:1f:97:
94:0f:45:93:de:ef:fc:00:a3:96:ff:97:82:7c:ea:2a:66:73:
ca:6a:21:4c:87:e6:65:68:1f:bd:e0:82:a8:e4:de:9b:14:e4:
06:11:54:13:b2:63:cf:1b:5b:44:83:67:fb:80:04:99:35:ad:
31:56:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:39 2025 by rpki-client