Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7887AB20BEB111EF9812435C762E951A.roa
File: 7887AB20BEB111EF9812435C762E951A.roa (raw, json)
Hash identifier: ptHfyldVwjUoDC8J9RVxT/Uc3zhWcAhlYHu958Z5D6E=
Subject key identifier: 08:C1:CE:CC:12:F6:B8:0B:D0:93:1F:F8:FA:C4:66:EA:A1:EC:63:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E751
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7887AB20BEB111EF9812435C762E951A.roa
Signing time: Fri 20 Dec 2024 09:04:51 +0000
ROA not before: Fri 20 Dec 2024 09:04:48 +0000
ROA not after: Sat 25 Jan 2025 09:04:48 +0000
asID: 6079
IP address blocks: 45.205.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59217 (0xe751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:04:48 2024 GMT
Not After : Jan 25 09:04:48 2025 GMT
Subject: CN=67653333-d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:2e:b3:95:8b:c1:fc:9c:4a:fa:5c:39:9c:
ec:11:fe:d1:94:10:f5:36:32:1d:37:24:ca:d5:f2:
3c:c6:93:93:d7:8d:bc:19:55:af:74:b0:01:64:42:
ed:bf:d5:88:db:76:c0:51:97:65:c5:44:ff:b0:2e:
84:73:2d:46:db:26:9c:e7:d7:e1:67:ce:28:d9:af:
23:dd:23:c5:24:c9:73:33:2b:b6:ff:e6:7b:de:ef:
86:07:0e:3d:36:bf:41:51:0d:cd:26:68:d8:1c:9c:
60:e2:0f:e1:c4:90:9d:43:06:be:71:df:5a:45:3f:
12:b4:07:32:f0:dc:0d:bb:ee:7a:71:f8:fa:97:9f:
bc:c8:22:44:4a:fc:65:31:ef:1b:6c:03:db:9e:19:
de:26:64:be:66:97:bd:09:f0:df:d0:60:87:f7:6a:
e3:57:44:67:ac:da:8a:cc:a5:83:5d:5d:c8:18:ad:
a9:c2:91:8d:80:25:50:23:f5:b5:66:1b:2d:a5:7b:
9c:6b:41:a9:c9:27:16:68:af:31:00:53:f1:84:8a:
60:a5:da:25:3a:1c:c0:6e:91:ae:1f:9d:27:d8:6b:
87:e6:48:1a:05:27:e2:f8:c0:27:1d:f1:27:e9:66:
76:5f:cc:c9:f5:21:2c:0d:6f:9e:7d:80:f5:a3:c5:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:CE:CC:12:F6:B8:0B:D0:93:1F:F8:FA:C4:66:EA:A1:EC:63:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7887AB20BEB111EF9812435C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:20:64:60:95:c7:e3:e0:07:82:9b:f2:a2:4d:29:0e:55:e0:
e3:6a:ed:76:78:72:0a:8b:d6:8d:94:fb:8b:7a:69:43:44:5c:
47:27:2f:7f:28:a6:86:b7:a9:55:45:7f:2f:c1:fd:0a:27:1f:
a4:0a:ab:1b:63:39:40:73:07:49:39:ad:eb:bc:29:bd:08:40:
2f:0e:ca:e2:11:b3:b6:7f:cf:40:08:a7:fb:eb:65:cf:48:51:
bb:74:fb:d8:1d:20:27:3a:82:d7:0c:1d:ca:1a:be:5c:e8:2d:
2f:5d:df:4b:d2:2a:1e:e3:f2:2f:46:77:f7:39:7e:f3:87:ae:
d0:d3:5d:bf:3c:ee:05:ab:22:c8:c6:4d:1d:47:a0:58:cd:4b:
be:6c:88:36:19:e2:c2:74:ff:08:34:a9:79:2f:cd:df:4f:f9:
5f:bf:65:80:c9:67:bd:fd:01:cf:ad:c7:34:5c:82:1d:a5:3c:
a5:98:48:d2:52:e6:fb:49:b6:eb:6b:4a:79:de:50:d1:7e:73:
f1:96:c0:e0:e6:c4:8f:0b:00:51:5c:1e:48:93:06:59:b7:4e:
53:95:d5:ca:85:0c:7e:6a:c2:a1:75:63:d4:ae:88:5e:9b:e7:
87:22:f0:4a:08:25:88:a7:53:8b:1d:f9:55:48:91:70:71:97:
0d:bf:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:02 2025 by rpki-client