Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F708D4CE9E11EFBF3F8D83762E951A.roa
File: 77F708D4CE9E11EFBF3F8D83762E951A.roa (raw, json)
Hash identifier: z1cSGn22QPuwpA6kWQhdXTzkNX2twObJghmXJkValHM=
Subject key identifier: 2A:20:BC:44:FC:FA:E6:9B:05:5F:23:B2:30:E9:2C:22:EF:19:FD:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010432
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F708D4CE9E11EFBF3F8D83762E951A.roa
Signing time: Thu 09 Jan 2025 15:29:09 +0000
ROA not before: Thu 09 Jan 2025 15:29:05 +0000
ROA not after: Fri 24 Jan 2025 15:29:05 +0000
asID: 39600
IP address blocks: 45.204.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66610 (0x10432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:29:05 2025 GMT
Not After : Jan 24 15:29:05 2025 GMT
Subject: CN=677feb44-9dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:11:0c:f2:c9:0e:d3:af:17:e0:bf:e8:c7:
6f:0b:88:09:d5:82:40:00:f2:c7:fb:59:ed:7c:29:
5a:bf:22:35:b6:92:26:5a:ee:73:aa:6e:7e:13:f6:
29:a2:35:e5:e8:7f:82:1a:be:b9:e1:22:6e:ac:9d:
1e:cc:50:9e:e4:0f:e4:3d:d1:de:04:03:25:3e:78:
b0:3d:02:a4:58:32:de:e7:ab:9e:08:ae:f6:cd:58:
48:ef:53:a5:40:a3:e5:17:73:c9:2f:0c:40:4b:b4:
77:a8:b4:69:64:68:28:45:88:dc:04:f0:06:d7:e8:
bd:b4:61:bb:44:92:45:a8:dd:c8:4d:93:bd:70:ec:
24:e9:9e:f6:6b:35:ba:ca:d1:69:cf:35:29:5b:f6:
51:aa:58:9d:c8:f2:5d:09:0e:a1:86:66:e3:3e:7c:
cf:a1:c4:f0:b7:b6:87:4a:95:14:3b:cb:1a:4e:ba:
21:bb:9e:e4:51:b3:bc:e9:ba:84:43:f0:06:e2:e2:
d8:86:99:61:48:9a:52:82:ea:5a:36:f5:1e:a4:43:
56:f7:1b:95:48:ae:8c:9b:37:69:59:47:7c:57:50:
09:c4:e6:45:df:0c:b1:90:bf:04:09:17:a3:38:e0:
22:42:6d:b9:57:06:df:d6:92:1e:a1:25:e9:08:a9:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:BC:44:FC:FA:E6:9B:05:5F:23:B2:30:E9:2C:22:EF:19:FD:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F708D4CE9E11EFBF3F8D83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
31:26:4c:c6:a3:c5:2c:1e:fd:14:4b:5b:ce:86:6a:c2:5c:e9:
1d:2c:3c:c1:62:a3:34:91:5f:b4:86:d1:e0:83:ac:e0:0a:65:
7a:bf:70:6b:6b:33:b1:d3:63:a2:a7:07:e5:31:60:98:26:b3:
0f:27:ee:b3:d0:5f:a7:31:fc:9a:50:25:01:52:d7:3a:5b:f5:
94:6b:78:9b:a9:bf:a4:2b:cf:35:a4:fe:b1:9c:5c:93:46:a5:
2d:e0:7b:06:79:f2:de:5a:dc:b3:ab:4a:be:08:fd:15:e7:db:
77:16:0c:e4:4b:b8:3f:55:f2:31:f9:54:49:31:f1:51:23:d5:
f9:0e:8d:bd:6a:68:30:3b:eb:e6:15:df:97:aa:ad:0d:22:78:
52:be:61:b9:52:ed:c8:8d:a6:79:f6:37:68:38:a9:7d:d8:58:
d4:a5:c2:c7:01:f3:d7:da:8e:09:6f:1c:4d:bb:97:71:e1:5b:
84:32:8a:7d:ff:16:30:ba:f9:0f:4a:5e:79:34:93:e2:1e:27:
26:1a:d9:4e:a5:24:b9:35:68:9e:5d:73:a6:69:6d:bd:13:56:
0e:9b:e0:2e:dd:60:b5:13:65:b2:05:8c:4b:b2:da:78:12:54:
3b:41:d6:7e:3b:c4:c5:d3:f1:a9:68:52:d5:df:73:e5:25:0e:
dc:10:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:00 2025 by rpki-client