Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7D91DCB78B11EF951BD76D762E951A.roa
File: 8A7D91DCB78B11EF951BD76D762E951A.roa (raw, json)
Hash identifier: /8xAugNTdc/dhnf1LPlzYI1OtODQHJjF2cB8Zsg+/XA=
Subject key identifier: 0A:16:64:B1:84:C0:E0:D1:71:B6:02:14:D9:38:19:13:88:62:EA:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E28D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7D91DCB78B11EF951BD76D762E951A.roa
Signing time: Wed 11 Dec 2024 06:45:42 +0000
ROA not before: Wed 11 Dec 2024 06:45:39 +0000
ROA not after: Thu 16 Jan 2025 06:45:39 +0000
asID: 6079
IP address blocks: 45.205.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57997 (0xe28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 11 06:45:39 2024 GMT
Not After : Jan 16 06:45:39 2025 GMT
Subject: CN=67593516-f22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:5e:4a:fc:1e:2f:75:45:14:6c:22:73:6a:
b0:f9:7b:55:ce:8c:c7:44:b8:22:03:5d:ba:2a:12:
af:fd:9d:9d:b6:db:57:36:50:3d:fd:75:8a:9f:c3:
6a:ef:8a:83:b1:4e:40:ef:98:f7:e6:03:89:bd:c5:
87:c0:a6:d3:2c:0e:35:5a:7b:a2:40:22:aa:a7:8a:
12:9e:a9:e5:a3:f6:74:6d:e7:bf:f2:cb:b4:81:a5:
e9:21:c6:cb:68:cf:80:8c:f4:81:6b:c2:09:e2:96:
18:b7:c7:e9:44:d2:9f:d0:64:b0:38:e2:c7:72:22:
c2:9b:71:71:e2:ff:d6:bb:c4:ca:05:69:5b:4e:99:
c9:27:53:07:1d:df:44:81:f5:d8:15:16:69:bc:99:
35:67:1a:cd:0c:fb:3a:6c:08:bc:05:ad:3c:4a:9a:
d5:41:a7:46:09:26:05:e0:39:b8:8a:9b:92:dc:37:
57:28:bd:f8:70:ac:ed:6a:c3:55:f2:42:32:3e:dd:
01:5d:46:65:d9:07:cc:34:00:97:17:b5:2f:02:38:
98:b9:9c:97:dd:48:cc:9e:88:6d:49:3f:11:bb:d8:
f9:2c:2a:5e:36:98:71:0a:b5:e7:47:5e:c7:8a:e6:
f3:52:db:b1:d7:2b:9d:b8:01:4a:48:00:38:6f:76:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:64:B1:84:C0:E0:D1:71:B6:02:14:D9:38:19:13:88:62:EA:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7D91DCB78B11EF951BD76D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.76.0/22
Signature Algorithm: sha256WithRSAEncryption
15:97:51:c5:ad:d1:a7:ef:4d:8f:b4:84:a9:8a:fd:9d:7d:3d:
60:dc:46:d4:fa:9a:7e:7e:af:46:5c:86:0a:73:bf:29:72:1f:
18:42:0d:06:7a:4b:a8:cc:3f:08:53:f6:eb:76:9e:62:ba:e2:
bb:19:25:71:dc:86:a2:36:f9:49:06:9e:0d:cc:c3:f7:3d:f2:
c4:70:44:23:ea:b5:79:45:ce:00:3c:f0:49:50:ac:53:8f:c9:
c7:36:6e:a7:54:06:9c:dd:00:e8:41:dd:8a:83:60:91:7b:76:
3b:2f:88:40:ff:6e:dd:72:22:6f:3d:bd:e6:7d:e2:a5:bf:c8:
18:5e:4f:34:a1:7b:4a:7c:9c:a0:f9:e5:56:39:6d:30:89:13:
e8:d6:64:8a:7e:d7:3d:1a:42:46:97:1c:e5:13:ea:ff:82:8c:
5c:e1:a6:dc:fd:6a:7b:b2:eb:8b:17:a5:55:c1:b2:40:b4:bc:
f6:b2:df:6a:5a:f2:b4:5a:51:cd:43:9d:e2:0f:69:5d:53:99:
1c:9b:e8:02:66:f3:8e:43:e6:63:e1:14:61:73:b9:da:c2:8e:
53:e0:75:09:74:27:83:46:13:91:ee:30:9b:8c:b0:8a:2c:cd:
d2:0e:de:b8:88:5d:bc:93:82:67:9f:b7:08:54:ac:b4:40:1f:
ea:11:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:57 2025 by rpki-client