Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/718B78C8C99D11EFA86561B3762E951A.roa
File: 718B78C8C99D11EFA86561B3762E951A.roa (raw, json)
Hash identifier: rErY05FaPtArRWdEvsqkrYYrBUe5RM3ACnOobVIyRrw=
Subject key identifier: F8:33:94:95:38:A6:60:03:31:87:17:6A:2A:75:DB:0C:98:BB:31:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F64F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/718B78C8C99D11EFA86561B3762E951A.roa
Signing time: Fri 03 Jan 2025 06:39:12 +0000
ROA not before: Fri 03 Jan 2025 06:39:09 +0000
ROA not after: Fri 17 Jan 2025 06:39:09 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63055 (0xf64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:39:09 2025 GMT
Not After : Jan 17 06:39:09 2025 GMT
Subject: CN=67778610-6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:1f:04:74:f2:d6:d9:dd:8a:c1:cb:3f:1c:
68:f7:00:b3:14:9a:1b:cb:5e:3c:42:fe:97:93:8e:
4d:ad:95:b7:08:2f:6f:48:34:a6:b8:6d:77:85:65:
0a:b2:9a:ed:bb:f2:1d:99:37:06:2f:b8:2e:e6:04:
55:29:e7:27:3f:c1:58:f4:0c:df:b7:41:33:6d:8d:
d6:6d:97:e4:72:29:ec:bf:88:52:66:b9:f0:37:78:
67:fc:0b:9e:fb:62:15:87:24:71:bb:af:f1:1b:d3:
38:b5:5a:0b:8c:ac:18:ff:d9:eb:16:0a:60:db:59:
24:96:34:8e:4e:76:06:d5:b3:34:00:9c:ec:87:b3:
22:1e:ca:58:93:75:c8:6c:ef:3e:71:61:af:72:00:
c0:5f:44:57:f0:8e:6e:79:a0:a1:53:31:3d:79:ca:
44:3a:72:c5:87:6c:5b:a1:4e:e6:dc:3c:9d:69:fe:
75:8d:98:64:cc:a2:a5:a1:cf:fa:2d:d2:38:88:58:
33:c7:cc:4c:59:2b:0d:fb:aa:61:f5:bf:7d:05:af:
fd:86:39:42:4f:d2:f6:7e:4b:17:ae:8c:07:97:c2:
a6:f4:49:94:ef:d0:2d:4d:4a:12:ad:b3:43:33:93:
3f:9c:d4:b5:c9:19:f6:8c:c2:ac:f5:59:87:3d:67:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:94:95:38:A6:60:03:31:87:17:6A:2A:75:DB:0C:98:BB:31:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/718B78C8C99D11EFA86561B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
24:a6:c1:b9:99:5f:d2:3f:5a:5b:c2:49:dd:de:7a:a1:3d:f5:
73:7f:b1:7b:21:41:4b:62:7c:fb:ff:00:0d:f9:cf:69:03:65:
32:33:d3:0f:ec:c7:96:00:f6:7a:25:67:0c:f1:1d:bc:54:79:
e4:d9:3f:a6:80:bc:d1:ca:ab:32:07:1f:5c:8c:0e:e5:34:47:
3f:a7:82:8c:30:e3:a2:75:e4:c7:38:61:ca:f5:55:7b:87:41:
b5:a2:88:5d:e7:81:a4:2f:e5:2a:75:79:ad:e8:38:ec:d2:d1:
62:7c:8a:41:07:f7:17:79:58:65:13:e5:dd:84:aa:fe:5c:fe:
ca:7d:2b:df:9d:bd:b0:46:af:63:5e:78:ab:81:f7:16:b6:00:
21:99:c0:0c:bf:88:5d:64:5d:e0:d2:e0:2a:2d:01:eb:03:b1:
a7:5c:a3:2d:1b:f9:c2:71:ea:03:b9:27:dd:d9:72:88:1f:e9:
04:65:c1:ef:5c:e3:a2:b3:ec:14:65:c0:e4:aa:1c:f8:67:ca:
a6:83:4b:d6:0c:94:5e:bc:91:8d:1a:31:fa:1a:77:11:ef:9b:
25:1a:77:84:90:81:8a:9c:14:f9:47:f0:a0:c9:e6:8e:b9:44:
32:06:1c:9c:70:c8:a5:75:84:de:a4:39:5d:47:0e:25:d8:0f:
68:35:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:38 2025 by rpki-client