Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78388C10C9A711EF92045073762E951A.roa
File: 78388C10C9A711EF92045073762E951A.roa (raw, json)
Hash identifier: FL3JaIbYh1M/HsLkJZXBSM/OkuuGOYMh5GQ0qAdXujc=
Subject key identifier: 7C:7E:11:18:A9:C5:53:42:45:56:5D:FD:66:B1:15:12:2B:5F:95:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F687
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78388C10C9A711EF92045073762E951A.roa
Signing time: Fri 03 Jan 2025 07:50:58 +0000
ROA not before: Fri 03 Jan 2025 07:50:55 +0000
ROA not after: Sat 18 Jan 2025 07:50:55 +0000
asID: 54801
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63111 (0xf687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:50:55 2025 GMT
Not After : Jan 18 07:50:55 2025 GMT
Subject: CN=677796e2-4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:18:b0:65:46:09:5a:e8:d4:8f:cc:cb:2b:
0a:f3:3a:4c:a4:8b:0a:dc:b0:52:d9:0e:8c:16:ff:
d8:3b:2e:cf:77:fb:90:98:e3:7f:c7:aa:9a:33:f2:
66:10:73:45:ab:b2:1e:82:f5:dc:41:b6:02:83:de:
c3:4b:be:66:da:52:99:e4:e8:2e:24:f1:e1:d2:fe:
23:d3:88:09:56:25:8b:ef:be:fb:e3:f2:0e:46:38:
53:a6:b6:89:44:40:05:92:de:70:80:7b:d1:a5:80:
c9:6a:e3:20:ac:1c:48:64:38:3c:ab:56:56:34:eb:
41:75:81:86:78:3a:70:7c:81:2f:34:ab:e4:7c:59:
a6:6b:3c:68:0f:5c:d2:34:25:84:25:66:af:3b:b8:
5d:c9:22:51:91:3b:5b:d3:3b:2d:9e:61:5f:d0:51:
08:03:1d:11:1d:d7:b9:fb:5d:cf:d6:1a:11:d9:d9:
06:92:86:8b:0d:bd:96:81:8c:83:29:a1:9f:24:81:
e0:c2:d9:22:b6:41:6a:94:d2:cf:e4:f5:0a:ba:be:
5d:ae:f9:97:dc:36:7e:d6:a9:92:ef:44:8b:19:55:
04:34:65:5e:f0:8d:91:7e:f9:c5:2c:10:0b:12:3e:
54:3b:ea:64:25:c8:0a:08:f8:d8:18:f1:40:70:48:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:11:18:A9:C5:53:42:45:56:5D:FD:66:B1:15:12:2B:5F:95:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78388C10C9A711EF92045073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
12:db:0d:e0:61:0e:33:49:54:af:b3:a4:c8:ab:7a:69:c4:d9:
57:99:62:34:8d:83:10:05:b9:4b:5a:5d:d9:26:bd:3b:73:ad:
2b:76:7e:d9:cb:de:25:05:c4:9c:30:33:7b:93:f8:87:e7:b5:
3f:d1:12:90:d6:12:5d:18:f2:a8:5b:4d:dc:36:64:59:d4:1e:
87:45:87:7c:45:13:21:25:16:f8:36:07:2f:03:ca:2f:76:07:
12:22:ff:c8:2d:79:b9:03:c4:d3:67:a1:09:58:56:2a:1b:d6:
31:b5:da:b9:bf:62:be:27:3d:7f:8f:1e:99:a1:0c:fa:8a:cb:
e8:e8:96:90:6f:36:23:9b:06:54:80:75:72:51:16:4e:f8:63:
1b:72:80:ec:43:29:6f:91:a0:f3:c1:59:c9:62:e3:3e:45:b1:
bc:11:2a:0d:53:e7:9a:f9:5a:b9:7b:99:05:3b:45:27:fc:a1:
60:cf:8e:32:4f:28:5d:f0:20:40:95:c6:76:7d:01:27:a4:99:
69:dd:78:39:a8:85:18:c2:d5:7f:c2:c8:b1:c6:b2:ca:4e:e2:
04:4f:48:fe:3e:94:7d:2d:b9:6a:10:cd:64:de:21:8c:4d:5f:
67:aa:59:6b:bb:d6:a4:9a:1f:24:d9:e6:c2:5f:3b:18:f1:fa:
51:5d:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:48 2025 by rpki-client