Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755FCA86C0FA11EF982BC1BD762E951A.roa
File: 755FCA86C0FA11EF982BC1BD762E951A.roa (raw, json)
Hash identifier: BziVWFNoGMylRI4CZC52gUbCa42a5KMTLMuFsNHU2m0=
Subject key identifier: 83:28:15:06:D8:4B:7F:9B:DC:97:F7:D8:AA:0A:A4:1E:F3:D3:16:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755FCA86C0FA11EF982BC1BD762E951A.roa
Signing time: Mon 23 Dec 2024 06:52:22 +0000
ROA not before: Mon 23 Dec 2024 06:52:18 +0000
ROA not after: Fri 17 Jan 2025 06:52:18 +0000
asID: 215208
IP address blocks: 45.202.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59376 (0xe7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 23 06:52:18 2024 GMT
Not After : Jan 17 06:52:18 2025 GMT
Subject: CN=676908a5-e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:3f:6b:10:f2:55:c2:44:d2:fd:ad:d6:78:
b6:01:00:8f:2a:aa:40:9a:a4:d8:c8:b4:68:a0:80:
be:77:f7:61:a0:d5:db:aa:42:d5:a2:76:7d:76:cb:
89:10:f8:fa:85:6b:71:ad:c0:9e:5f:ed:4c:5c:41:
52:a6:33:4e:c8:02:f0:38:b6:7f:6f:b8:2f:6d:db:
59:fd:28:aa:11:58:87:65:d1:97:20:2c:7d:5a:f8:
5a:94:46:b9:38:c0:c4:50:fb:b5:51:c5:75:f4:76:
e9:99:54:8c:ac:0d:c8:fc:98:3b:74:f1:3c:64:83:
36:68:1d:fc:98:02:ad:09:64:a5:c6:d7:7c:d1:57:
cf:da:10:af:43:e8:b4:0d:b1:cc:cf:a0:12:d3:b3:
f7:fc:d9:56:03:48:d6:f0:3e:44:a2:66:48:66:88:
8e:b3:ca:0d:fe:aa:89:ef:01:5e:25:4e:50:6c:9f:
7c:66:5d:fa:cc:a1:dc:77:de:49:7b:7c:4a:9b:e8:
68:39:46:90:96:c6:ce:36:a3:b2:25:8f:f7:69:81:
c6:c1:3d:c0:b8:60:d4:15:ce:18:06:99:3f:30:3a:
6e:e1:e5:d1:11:4e:a3:2b:83:3c:29:ba:e8:c7:26:
27:f5:49:e3:27:74:34:ff:fa:e4:7f:80:14:f3:73:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:15:06:D8:4B:7F:9B:DC:97:F7:D8:AA:0A:A4:1E:F3:D3:16:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755FCA86C0FA11EF982BC1BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:98:ce:d2:30:4c:66:a5:d8:39:fb:37:70:6c:c1:b1:a6:f7:
60:50:03:33:c6:68:87:71:be:a3:df:8c:1b:73:fc:3e:ca:23:
4d:f0:06:cf:90:95:58:75:1f:d1:75:24:32:e5:f3:40:2d:19:
2a:92:ba:ba:89:04:32:47:99:6f:ee:7c:d2:4e:c7:11:0b:61:
76:8d:a1:32:c7:f9:01:5c:5b:4d:8a:b2:82:ed:b7:fb:05:82:
30:b8:c6:de:21:a1:c8:94:85:e8:e9:43:6e:02:a5:90:e7:69:
fc:bc:f5:8c:60:4f:35:51:b1:34:1c:2d:c5:38:2d:a2:f5:cf:
7b:09:7e:38:6d:69:c8:32:dd:5a:54:d5:2e:94:29:77:67:3e:
2a:ad:f2:11:c3:f8:91:a3:e6:dd:ff:0d:9c:9d:73:fc:a9:83:
b9:48:2e:7d:0f:6a:e6:7d:f0:c2:84:e3:1d:8d:58:c5:be:74:
6d:3c:62:ed:f3:b0:4f:f8:56:00:72:4e:c5:44:c3:76:ca:af:
8a:e7:2c:e6:4d:2c:17:ed:47:cf:6a:16:6e:ab:f0:49:00:5d:
8f:81:f5:7a:60:74:8e:a2:a8:53:69:94:eb:5a:da:f2:43:1e:
da:ba:ff:5f:b4:df:df:35:fc:9d:ba:9d:02:8a:1c:4c:39:f6:
e8:cc:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:13 2025 by rpki-client