Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82452300C9A511EF86DBCF66762E951A.roa
File: 82452300C9A511EF86DBCF66762E951A.roa (raw, json)
Hash identifier: EfDoJxjNOFyt7tmEgPI2TSNToHY/23PyNGcfQgVRfI0=
Subject key identifier: 01:DC:E9:37:FF:AF:45:C4:C4:78:70:1E:E1:72:0D:BE:01:64:A2:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F685
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82452300C9A511EF86DBCF66762E951A.roa
Signing time: Fri 03 Jan 2025 07:36:56 +0000
ROA not before: Fri 03 Jan 2025 07:36:53 +0000
ROA not after: Sat 18 Jan 2025 07:36:53 +0000
asID: 54801
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63109 (0xf685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:36:53 2025 GMT
Not After : Jan 18 07:36:53 2025 GMT
Subject: CN=67779398-9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:95:aa:22:7d:76:77:a0:e0:72:67:4a:88:
c1:5a:57:2a:e8:da:37:ef:d4:ee:f5:03:a6:de:b5:
d6:ae:50:0f:06:20:a6:e1:9e:c9:4f:93:39:3a:3f:
cf:a0:c7:96:32:d4:30:17:b7:66:0b:6f:11:2b:c8:
1e:66:6f:57:4a:30:f4:aa:48:71:67:9d:2e:10:f6:
a1:17:f3:8f:a6:1a:3c:2d:13:17:27:5c:6f:18:8f:
7b:8c:28:72:fe:9c:f9:10:9d:7e:39:b9:00:a4:34:
c3:0f:85:3b:9f:ea:5c:58:da:71:9e:71:8c:51:20:
25:56:74:95:c7:80:a0:b8:70:b8:64:4d:5d:7a:9c:
55:7a:34:fa:b8:5d:5d:08:e1:22:7e:11:55:b9:a6:
38:28:2d:c7:6c:4b:55:e3:4d:8c:f5:48:27:16:a3:
4c:d2:de:fd:4b:bd:55:57:d8:a4:ef:6b:35:4a:5d:
6e:34:4d:64:0a:9b:50:4d:d8:7d:de:1d:e2:1b:bb:
c2:ab:0d:fc:ad:19:ea:e4:98:45:0d:cb:d7:cd:1c:
c5:5d:31:b4:67:7b:8a:1c:b1:4a:dc:f8:a6:42:e3:
4b:4f:25:13:ad:d4:1f:89:d2:81:be:6f:f4:d4:07:
27:44:b2:de:9b:22:26:d4:61:ae:ca:2a:60:6d:94:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:E9:37:FF:AF:45:C4:C4:78:70:1E:E1:72:0D:BE:01:64:A2:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82452300C9A511EF86DBCF66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
47:22:5a:0a:13:e8:70:5a:cd:ef:94:7e:a2:57:77:44:a2:4b:
6e:2a:be:cb:27:84:a8:7a:04:29:55:35:b1:c5:dc:c0:0b:95:
ff:7f:c4:c2:d1:76:3d:38:0a:8a:75:53:12:ec:65:3b:9f:6d:
1f:d1:05:ae:57:02:6c:57:ba:e0:c3:1d:86:a9:75:c4:3d:9f:
12:9e:66:4d:92:ed:ae:5c:a2:fa:a2:14:ce:e7:c4:62:db:41:
3d:1d:09:98:fb:f4:19:c0:c7:9b:d0:9f:c1:29:3e:b4:90:5b:
00:4b:f9:c0:93:2a:ad:6a:8b:03:4a:4c:4e:a1:39:b5:8f:98:
e6:cc:7a:ec:89:fb:a9:df:80:6c:7c:98:35:3a:1b:89:5a:7a:
e2:cd:8f:c1:74:b8:1d:68:36:ed:f6:10:bc:ec:1e:8c:d1:13:
20:db:6e:46:84:06:e4:e4:4f:95:c2:ff:c5:ad:05:14:8d:36:
ac:b7:8f:37:7c:23:d5:68:d0:df:43:d3:48:45:c7:dc:50:be:
68:63:61:16:c5:e1:a6:3c:60:4f:6b:10:57:cc:96:20:25:33:
b3:0c:a7:fa:1e:f6:d3:37:09:31:1e:9d:01:1f:85:c9:ef:51:
6c:98:62:80:63:b1:51:25:48:ea:0d:9e:bc:1f:83:d4:cd:38:
eb:b5:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:56 2025 by rpki-client