Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8343F3DABFA011EF826CB8B4762E951A.roa
File: 8343F3DABFA011EF826CB8B4762E951A.roa (raw, json)
Hash identifier: 2AL2vaGRjC7wKh6l04dV1SHI1mo97oLQrkwT4N+hAWc=
Subject key identifier: 1C:54:9F:2F:3D:5D:93:2A:68:E3:55:DD:FC:C7:2B:31:1D:44:A1:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E7D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8343F3DABFA011EF826CB8B4762E951A.roa
Signing time: Sat 21 Dec 2024 13:35:59 +0000
ROA not before: Sat 21 Dec 2024 13:35:55 +0000
ROA not after: Mon 27 Jan 2025 13:35:55 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59350 (0xe7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 21 13:35:55 2024 GMT
Not After : Jan 27 13:35:55 2025 GMT
Subject: CN=6766c43f-e317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:9c:3d:4f:ef:99:07:4a:f2:f0:4c:94:fc:
ed:cc:a0:1f:bc:8d:92:bd:c8:bc:4e:18:42:c7:dc:
ba:87:08:91:cd:02:0e:a0:e0:78:41:70:f9:47:cb:
1c:91:b7:72:3c:b7:7d:17:64:91:b6:aa:14:be:0f:
ba:e6:d8:e3:e6:22:2b:0f:cd:1c:78:02:98:c9:cf:
ad:53:86:72:39:4c:e4:ac:b1:fe:4f:fc:21:aa:66:
f3:c4:9a:68:d7:42:ed:4f:9a:ef:89:5c:6d:ae:b9:
24:21:6a:dc:d4:54:76:21:40:f2:9e:a2:98:98:ac:
72:46:20:6d:a3:73:46:84:12:e3:b2:fd:72:a3:4c:
37:aa:65:b9:d4:3b:bd:73:72:da:c2:4b:ed:02:b3:
9a:a5:f9:a4:62:03:04:ea:f5:24:2b:7c:3a:fc:1d:
d7:48:56:19:4d:c5:90:6d:a6:69:db:96:85:2d:93:
97:cc:ed:00:64:ae:aa:7f:32:f2:c9:b2:1a:19:f5:
e2:eb:93:ea:d2:8d:bd:6b:bb:41:05:5b:c5:d8:f8:
d4:b7:93:3b:60:24:0f:58:92:eb:af:03:56:6d:b9:
26:49:da:f2:27:82:b2:61:ee:9e:18:65:ea:94:bc:
12:03:77:fb:ee:3d:2f:66:e0:b2:3f:bc:cf:5a:c5:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:9F:2F:3D:5D:93:2A:68:E3:55:DD:FC:C7:2B:31:1D:44:A1:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8343F3DABFA011EF826CB8B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c1:38:68:6f:56:9b:ab:84:51:61:8e:43:e6:4f:6f:1c:0d:
37:b8:74:36:6f:68:27:42:af:ed:b7:f0:aa:f4:c1:c3:b5:70:
b9:19:cb:62:b6:28:06:cd:df:84:5e:dd:c1:66:b2:13:1f:34:
27:a2:05:75:14:fd:55:02:45:bb:09:ad:39:44:52:8d:74:0f:
8a:89:dd:06:c8:cf:15:bc:03:2f:89:1d:ee:8a:e4:4e:d5:fd:
ba:5a:b3:81:52:63:45:23:08:b0:b5:71:52:9d:a9:62:f8:31:
d2:e0:56:e0:2e:de:54:13:4c:f0:57:9d:64:a8:04:d0:d9:19:
cc:3f:1b:77:36:85:fc:ac:bd:3a:f1:04:18:17:46:3c:ff:1d:
b3:8b:e0:cf:97:3c:a6:1d:46:4d:c1:ce:26:44:6e:1b:83:56:
4a:5c:e0:56:6a:03:b1:ee:5c:e6:59:35:fb:a1:95:f4:21:00:
bb:29:83:ca:13:36:cf:b7:72:b2:41:45:74:36:19:2a:4e:25:
00:27:96:1a:e7:75:c4:68:f5:07:0d:eb:c6:de:85:b2:f1:ba:
24:a2:d6:a2:88:c5:bc:87:20:9a:f1:a9:8e:9d:7f:a6:53:59:
57:cd:cb:06:56:5a:6c:7d:ff:34:94:35:3a:74:b6:1b:22:82:
f4:aa:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:08 2025 by rpki-client