Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7954EBA8C05511EFA57A39A7762E951A.roa
File: 7954EBA8C05511EFA57A39A7762E951A.roa (raw, json)
Hash identifier: CXhICkQvgCh5qGCQUJFwJIyeIsKtJlIwluWUmNUo8Sw=
Subject key identifier: A7:DF:32:E7:06:B5:46:AC:6F:C0:31:31:29:6A:69:36:E6:21:FC:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7954EBA8C05511EFA57A39A7762E951A.roa
Signing time: Sun 22 Dec 2024 11:11:21 +0000
ROA not before: Sun 22 Dec 2024 11:11:09 +0000
ROA not after: Sat 25 Jan 2025 11:11:09 +0000
asID: 203020
IP address blocks: 45.198.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59357 (0xe7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 22 11:11:09 2024 GMT
Not After : Jan 25 11:11:09 2025 GMT
Subject: CN=6767f3d9-f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:1f:8c:6c:67:a7:35:b5:0e:5c:a6:2c:03:
78:5c:a4:40:5c:cb:32:c6:8f:f2:33:ea:89:86:f5:
44:1c:e2:2f:0c:14:ad:e0:b5:bf:d4:bf:64:e2:57:
9b:1e:b2:76:ac:69:16:e1:a9:47:0c:db:35:8b:6c:
a7:7c:e1:d7:63:e0:78:0f:92:59:f1:9f:3f:2f:24:
a3:f0:cc:ec:f2:d6:bf:8f:3c:18:2d:25:63:7f:22:
66:a8:ed:c1:2f:5d:0d:a4:94:08:a1:30:cd:2f:74:
57:21:21:74:23:ee:b6:6f:5d:75:12:a7:d2:81:c7:
ce:c5:de:12:65:f6:98:26:55:ca:f2:91:51:a3:17:
8f:84:53:0a:d0:44:1e:69:be:93:30:25:af:e5:ff:
a9:66:c0:89:03:8a:98:ea:bd:b5:39:28:68:19:c4:
a0:fc:76:11:0e:f6:a6:ae:bb:e6:ea:64:ce:92:05:
59:6c:9a:cc:b8:c5:da:2b:27:bf:89:9c:27:56:8d:
68:fa:6f:d0:6c:f0:c0:ed:a1:39:50:1a:40:70:0d:
61:3e:94:fd:98:3e:44:40:4f:83:84:ef:70:93:14:
20:3e:26:f6:91:7d:36:99:e9:c1:a0:fb:ab:d0:82:
9a:90:10:b2:e2:f7:c9:15:81:9e:8c:3a:e0:03:e7:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:32:E7:06:B5:46:AC:6F:C0:31:31:29:6A:69:36:E6:21:FC:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7954EBA8C05511EFA57A39A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.208.0/20
Signature Algorithm: sha256WithRSAEncryption
79:59:04:33:6e:ac:13:8c:e2:3e:9a:18:30:99:ad:76:ae:0c:
f4:d2:01:4a:a5:0e:e7:64:a0:f6:3c:98:1d:81:1e:f1:70:c5:
b9:56:55:73:cb:70:19:0a:6e:c4:2d:d7:67:ed:de:b2:d4:f0:
5f:f5:3a:48:83:4f:da:ec:cb:96:ea:5b:04:4a:49:cc:d7:6d:
71:ac:84:7b:ac:57:c7:f4:b4:cc:26:aa:8a:15:01:94:30:5d:
9a:d3:04:3e:cd:fb:9e:ca:22:d6:62:2f:91:43:11:93:ba:7d:
cd:2a:b3:70:1a:79:3e:55:4d:0c:f9:da:90:6e:a9:07:f0:c7:
9e:43:c3:e7:be:1a:d4:5e:fa:69:44:6e:46:d1:e9:93:f6:9a:
63:8a:54:a2:7f:5a:bf:4a:b9:3c:00:7b:28:9b:49:d1:34:77:
e2:0d:3a:35:1f:1d:f1:f7:dd:bc:0e:f9:cb:d8:34:71:fe:e9:
60:3d:7a:66:27:ca:1f:ff:84:b9:71:ad:09:c2:2a:41:42:47:
a5:37:1a:c2:ed:1b:86:c8:39:c7:c2:e8:fd:5d:62:b1:26:02:
10:5e:42:db:16:b3:61:e6:a9:c5:ad:d1:f1:0b:6a:f0:47:4c:
cf:f7:8c:b1:8a:61:0c:33:f7:68:4c:dd:89:41:0c:28:4e:a8:
be:44:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:29 2025 by rpki-client