Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E31766B78A11EF91344766762E951A.roa
File: 84E31766B78A11EF91344766762E951A.roa (raw, json)
Hash identifier: GJpqt287115xNmLifqHwIb8H3nX8+2R0BzuAumPciEU=
Subject key identifier: 1C:E8:2F:ED:C0:CA:3F:C5:D1:82:59:DD:65:AC:C5:59:5D:7E:F1:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E31766B78A11EF91344766762E951A.roa
Signing time: Wed 11 Dec 2024 06:38:23 +0000
ROA not before: Wed 11 Dec 2024 06:38:20 +0000
ROA not after: Thu 16 Jan 2025 06:38:20 +0000
asID: 6079
IP address blocks: 45.205.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57985 (0xe281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 11 06:38:20 2024 GMT
Not After : Jan 16 06:38:20 2025 GMT
Subject: CN=6759335f-9650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:18:b6:42:fd:7e:ac:36:65:ba:a4:63:e0:
a8:99:8a:be:11:59:30:dd:29:53:d2:56:39:9d:f5:
99:5f:03:9b:26:8e:74:fc:bc:d5:1e:e8:36:60:00:
f6:f5:ae:ac:3d:7a:4d:65:d5:98:35:ee:2f:3f:c2:
64:92:4c:f5:4c:b8:d8:77:ad:7e:c7:b5:12:63:d5:
ae:f7:c8:6a:77:34:3a:5a:55:cf:41:9e:e5:19:87:
f4:48:07:43:f2:e8:bf:69:4a:47:53:78:84:f5:a8:
c4:dc:2b:0e:d1:2d:c5:ec:fb:29:a4:5b:98:f0:50:
06:0f:62:d5:fb:e8:6e:c9:ab:7d:b7:1c:ce:98:6c:
aa:8c:b0:bc:3c:2c:89:3b:fd:27:d8:33:2e:e9:b8:
ca:ea:6d:0a:b2:87:1a:40:2a:e9:30:02:a6:15:b1:
23:ce:8d:37:b7:8a:43:7f:06:6a:25:d8:fa:7b:6a:
93:50:e4:5c:49:d2:7a:e2:ae:e6:5a:61:12:1d:fe:
28:a1:6c:f6:7d:a6:88:c1:3a:b3:37:f7:ed:78:de:
cf:9f:fa:0d:fc:4a:fb:b6:ec:7e:52:ae:e3:37:d3:
a9:2f:ea:1b:7a:11:c1:c4:08:71:a1:54:1a:24:de:
6f:a3:53:c5:d0:fa:8c:8b:9d:6e:87:53:19:bf:f4:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E8:2F:ED:C0:CA:3F:C5:D1:82:59:DD:65:AC:C5:59:5D:7E:F1:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E31766B78A11EF91344766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.156.0/22
Signature Algorithm: sha256WithRSAEncryption
21:40:6b:05:e4:e2:21:b8:b7:de:61:a9:1f:fb:61:e2:bc:9d:
3f:8d:81:05:fc:7b:bb:5e:c0:18:0c:59:fc:b3:c0:72:5b:4e:
36:65:01:13:64:b9:74:20:1e:89:af:8c:d8:73:00:5a:c0:85:
31:17:da:75:20:02:e7:bf:bc:3f:cb:86:04:e4:90:1d:4c:f9:
72:45:4f:46:65:c5:a2:37:23:6e:0b:d3:00:9e:ca:f5:d9:a5:
c0:54:9d:a0:ca:70:72:d5:ab:e6:fd:f3:54:53:17:d4:48:ae:
c9:b9:30:4d:53:c6:38:4b:1d:23:39:84:a4:a9:66:47:64:2e:
fb:c5:e3:90:41:22:b5:aa:d2:98:34:51:2a:cd:84:90:7e:f9:
c1:54:19:b7:cf:6a:2f:82:00:08:40:f4:b0:b2:4c:ee:21:7f:
5c:d6:e5:c4:c9:77:e9:37:57:3b:43:ba:e3:ba:b3:82:98:83:
88:00:83:dd:d2:df:71:27:6b:0f:05:57:44:a0:3b:ae:14:b4:
11:ed:62:c4:cb:cc:72:0d:2b:11:d8:67:aa:2c:d9:07:b1:39:
fa:e7:53:9d:7b:87:43:49:4d:78:ce:29:07:68:76:47:d8:41:
15:bd:20:9b:98:99:08:c2:e7:cb:7b:4a:50:39:a2:57:aa:d0:
59:9a:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:04 2025 by rpki-client