Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D5E880D00C11EF8D4C779C762E951A.roa
File: 75D5E880D00C11EF8D4C779C762E951A.roa (raw, json)
Hash identifier: kN/7u00QlJlSw7ZekrMvo1oH7Q4C8IXbns48fk3Eb98=
Subject key identifier: F9:F5:BE:52:13:9A:DA:0D:AA:4E:A4:2A:D5:D9:98:EC:38:7C:9D:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D5E880D00C11EF8D4C779C762E951A.roa
Signing time: Sat 11 Jan 2025 11:09:01 +0000
ROA not before: Sat 11 Jan 2025 11:08:50 +0000
ROA not after: Sat 25 Jan 2025 11:08:50 +0000
asID: 54801
IP address blocks: 45.201.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67018 (0x105ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 11:08:50 2025 GMT
Not After : Jan 25 11:08:50 2025 GMT
Subject: CN=6782514d-61f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:43:32:73:03:91:97:fd:4e:09:02:36:30:
8c:e1:8e:01:c7:af:98:ae:13:2a:a4:88:a7:cf:a4:
9d:91:c4:ab:6b:89:bf:0d:65:1e:76:bc:1c:2d:76:
d1:c1:4d:ab:fc:73:c3:56:be:44:41:1d:4b:90:10:
fe:cd:a3:1c:08:b1:90:7f:43:f5:44:a1:4d:a4:14:
b7:9f:5c:ea:01:09:70:2a:a7:fa:73:85:d0:e5:4b:
1f:56:23:68:95:29:63:8a:1e:ed:db:a2:88:74:95:
6d:b7:cb:69:11:5b:87:d2:e6:fa:fe:e1:ea:c5:04:
da:a4:98:f8:98:f1:7a:b2:3f:21:ef:a7:0a:41:c4:
20:bd:92:72:6a:11:1c:94:b6:02:71:2a:26:8e:76:
4f:b3:ea:c9:b7:ab:54:b2:d5:01:1d:cc:12:18:84:
78:3d:88:0b:e3:e2:9f:f9:ec:f1:f8:9c:2a:b8:54:
b6:4c:7a:4a:b9:0f:52:b7:4d:2a:30:8c:b8:64:30:
db:ce:a2:f8:a4:18:2a:d9:e0:85:a9:15:63:25:e9:
55:71:31:79:28:2c:27:ee:8e:59:7b:0d:33:d4:df:
9f:20:bd:11:6f:b8:34:98:41:42:a0:06:94:c8:c7:
bb:ef:e3:9b:15:66:2d:21:46:0f:40:b4:42:6d:6c:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:BE:52:13:9A:DA:0D:AA:4E:A4:2A:D5:D9:98:EC:38:7C:9D:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D5E880D00C11EF8D4C779C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ca:ff:7c:03:d9:1c:a4:02:63:3e:cd:06:d0:34:da:fd:73:
cc:d8:99:39:a9:e6:f0:ef:d4:90:23:26:4a:e1:20:e6:b3:92:
b1:74:ff:4c:8c:07:5b:a9:74:ea:eb:53:bb:62:2b:60:6d:5a:
1e:94:21:97:d0:9b:65:47:51:98:e6:be:e0:06:e8:38:9e:97:
db:70:28:5d:55:7b:00:6b:54:1a:8c:6a:08:37:fe:d2:9b:ee:
e2:a3:f9:96:8f:0a:c2:bb:77:49:91:92:ff:88:90:55:90:fa:
f2:55:e0:be:c2:2c:c5:5a:c2:e8:33:d9:13:33:06:fe:fe:c3:
0f:c0:3d:00:d7:96:25:e9:8e:11:00:81:47:22:9c:29:ce:61:
73:c3:d0:2a:3f:90:36:e7:be:24:38:4f:6c:f5:5a:d5:87:8a:
01:a0:93:ab:92:1f:10:27:07:17:be:1f:0e:3a:79:17:81:75:
ff:bc:df:73:35:60:75:da:fb:51:17:94:f3:f3:8d:40:3c:3f:
f0:20:4b:2d:0a:26:8c:98:71:1e:19:88:58:dd:a3:49:ba:c4:
ed:68:3f:71:13:49:fb:0b:37:85:38:43:de:ec:29:1c:d4:4c:
b2:c5:70:02:29:63:a9:25:d3:15:32:2b:27:f1:0c:04:5c:72:
0c:f8:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:39 2025 by rpki-client