Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70EE67AEB92611EFBCF00982762E951A.roa
File: 70EE67AEB92611EFBCF00982762E951A.roa (raw, json)
Hash identifier: Vv8kxQVzkJLXFw1EBXokGNS7tTFBwyPWGktqf3YogPk=
Subject key identifier: D9:3B:1B:A6:09:11:C1:25:E2:AE:2E:FE:49:8E:A4:C8:26:03:6F:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E30D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70EE67AEB92611EFBCF00982762E951A.roa
Signing time: Fri 13 Dec 2024 07:47:03 +0000
ROA not before: Fri 13 Dec 2024 07:46:59 +0000
ROA not after: Sat 25 Jan 2025 07:46:59 +0000
asID: 202656
IP address blocks: 45.192.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58125 (0xe30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:46:59 2024 GMT
Not After : Jan 25 07:46:59 2025 GMT
Subject: CN=675be676-3417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:42:f3:3c:ba:8c:02:fa:e4:d9:03:e3:66:
82:68:5b:5b:af:40:66:6a:29:a3:d4:57:14:61:bf:
78:03:37:e5:41:dc:fe:8d:64:2e:a0:87:ac:bf:2f:
9c:49:da:e5:cc:9a:91:47:6d:8f:96:a1:48:6d:1b:
b9:d8:2a:74:77:4f:4f:c5:8b:92:c4:d8:32:c1:b4:
85:ed:51:ad:23:9f:33:c2:22:4a:b6:ea:14:e6:3f:
ee:12:6c:d4:d3:6b:64:99:93:e6:ae:84:f1:3c:ea:
cc:d6:ee:4e:60:40:cf:61:27:e1:58:5e:20:4e:44:
10:33:37:51:0a:79:c4:7c:68:96:fa:34:33:cb:ef:
cf:6d:79:70:c4:b3:c5:3a:bc:ca:b8:2b:79:60:5d:
9c:61:f7:1f:99:54:b1:ae:f9:dd:4f:47:cd:af:d1:
29:16:d6:d5:d3:5d:b7:12:37:48:5e:a2:85:99:a5:
35:3f:24:f0:88:85:3c:6b:16:d4:77:54:cf:22:9a:
74:79:b7:45:92:ca:f4:0e:2a:4b:f3:05:ce:ee:a1:
fb:0e:7b:8d:71:80:f9:66:04:58:4b:01:f6:1d:29:
0e:d1:a3:36:6c:82:64:15:ac:98:9c:ce:fe:a4:29:
5b:a8:8b:f5:69:c0:54:5d:60:20:96:3d:15:03:87:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:1B:A6:09:11:C1:25:E2:AE:2E:FE:49:8E:A4:C8:26:03:6F:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70EE67AEB92611EFBCF00982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:45:56:df:a4:06:b3:d2:c2:a4:e9:1e:e8:75:b6:f4:d3:9e:
be:79:51:0b:83:14:14:78:24:eb:47:3e:81:45:1e:4b:e5:78:
3b:35:97:0a:06:16:65:1b:a0:74:b5:b6:a3:d7:0d:0d:d0:fd:
a5:aa:21:28:13:f2:4a:aa:4a:6c:0b:7c:68:b3:22:64:63:2c:
f5:3f:59:76:b7:8f:85:d8:cc:1f:62:72:ca:4d:63:3b:f8:3a:
61:84:4d:da:b3:c3:80:46:ac:b8:21:7e:2f:38:52:9b:91:91:
1c:5e:2f:f9:9d:50:0e:ff:d4:cb:3f:92:6f:44:6e:d5:00:1d:
40:5f:a1:88:4a:30:7d:a1:86:63:ad:e5:85:1a:f3:37:93:20:
09:cf:ff:af:92:07:5d:fa:ee:0b:d1:f8:f6:9f:14:c1:14:3e:
87:39:4b:65:f5:d9:2b:94:99:10:68:c6:07:bf:46:82:d1:75:
dc:16:7f:f9:e3:aa:2a:c4:a1:02:90:4c:5a:23:cf:ce:1d:33:
50:fb:8f:64:84:07:e2:9f:5d:0b:49:d8:f4:d1:63:48:53:c0:
48:b9:9b:5c:0f:ee:f6:84:bc:63:22:46:49:f4:fe:43:0f:bf:
65:19:aa:93:de:0e:aa:25:f7:b4:13:c1:a2:54:00:4f:8b:12:
14:a4:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:52 2025 by rpki-client