Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6FD9C8BEA111EFA63A7377762E951A.roa
File: 7E6FD9C8BEA111EFA63A7377762E951A.roa (raw, json)
Hash identifier: uWtI4UkaFfH5XYy1S84mJKrHj03TzrIk17uEAiYR2Z0=
Subject key identifier: C1:E9:94:2C:02:9C:11:26:56:FA:51:47:3B:CB:84:E0:63:BF:3C:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E706
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6FD9C8BEA111EFA63A7377762E951A.roa
Signing time: Fri 20 Dec 2024 07:10:29 +0000
ROA not before: Fri 20 Dec 2024 07:10:26 +0000
ROA not after: Thu 23 Jan 2025 07:10:26 +0000
asID: 202656
IP address blocks: 45.199.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59142 (0xe706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:10:26 2024 GMT
Not After : Jan 23 07:10:26 2025 GMT
Subject: CN=67651865-3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:8b:44:d8:e8:6d:88:15:bc:26:21:62:3e:
44:98:f4:47:11:9c:29:1d:e1:d0:35:b4:da:6a:c4:
12:83:d2:4c:90:a8:5b:14:27:50:14:1c:6c:fe:9c:
9c:28:43:61:35:8b:e2:6e:72:bf:7f:0b:9a:e4:5b:
ae:49:c2:3d:6c:47:52:7f:91:83:f3:41:ff:71:67:
76:75:56:ff:0d:c9:e2:62:3f:91:8d:df:e7:97:81:
9e:ec:0e:ed:e0:10:af:13:4a:2d:55:0f:53:5e:a1:
1d:64:39:2b:c0:81:27:2a:07:2c:85:36:95:c2:15:
5f:27:ad:3f:cd:ac:b2:26:c5:e6:14:9d:5f:e5:e6:
52:0b:bc:2b:6d:d0:d3:41:16:a5:71:a0:99:e0:e2:
b4:58:0e:40:64:0d:5b:f0:01:17:a5:3c:23:7e:a2:
53:94:8b:51:21:47:fd:0e:a0:28:6c:4d:c0:0b:8a:
58:7e:aa:3d:08:6e:0c:08:b4:6b:74:66:73:fb:4f:
46:86:18:b3:ca:a8:fa:62:2c:13:e9:e9:fa:f2:11:
02:b3:e6:93:e3:db:e5:2a:e0:48:a6:82:1b:df:2d:
d3:8f:2f:31:c9:7f:d0:e0:9e:8b:84:99:c3:65:2a:
09:42:9e:9b:ae:b4:1f:49:9f:60:8b:f4:23:6b:cc:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:94:2C:02:9C:11:26:56:FA:51:47:3B:CB:84:E0:63:BF:3C:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6FD9C8BEA111EFA63A7377762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:50:84:62:03:0e:6e:b1:52:55:48:a1:3f:33:5b:19:1f:38:
be:78:af:ca:9d:c8:9c:67:c5:06:f1:4d:bf:eb:e4:d0:85:88:
5d:b4:9a:8f:e6:c7:32:c8:d6:62:91:bf:21:91:c4:5f:11:75:
f6:6d:44:0d:12:17:02:e9:00:23:9e:74:1e:a1:c5:58:92:fc:
fa:f5:73:e7:cb:e0:bb:05:23:b2:c0:ea:a1:5c:be:1f:6e:0d:
62:c8:0b:77:b3:2d:6c:29:e6:03:b4:bf:7b:3f:a1:0a:57:34:
7c:3e:1d:76:3d:b3:de:4a:9b:2d:72:ce:5a:6c:8a:f6:3d:52:
c5:63:e9:d7:10:3f:1c:a4:e8:4f:a2:90:5d:10:c0:7c:4a:1f:
74:30:38:ab:cc:15:f6:56:d2:8e:c1:fc:47:1c:a5:80:c4:e3:
fb:69:7a:ef:11:e1:5d:75:00:cf:71:41:93:af:90:a9:67:cc:
42:f5:c9:26:cb:06:3b:c0:a8:94:65:56:0b:13:56:35:22:bf:
90:a7:02:ca:8c:23:33:4b:45:41:7e:6b:c2:85:85:98:07:74:
4e:73:a3:a6:17:aa:4a:21:28:4d:ab:84:a6:f3:99:3c:3d:a9:
74:7a:7e:ab:47:7a:74:b5:73:8c:36:93:11:4e:66:d5:44:79:
91:5b:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:32 2025 by rpki-client