Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF94EFCCAC611EFAE921483762E951A.roa
File: 8DF94EFCCAC611EFAE921483762E951A.roa (raw, json)
Hash identifier: ZdsikPDnZhvIkNuGkX9VQqswFopS6Ml+9YoNWXOsbiE=
Subject key identifier: 78:5A:94:C7:19:96:27:09:42:D4:1C:10:BE:B6:9B:4F:EC:45:DF:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F73A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF94EFCCAC611EFAE921483762E951A.roa
Signing time: Sat 04 Jan 2025 18:06:01 +0000
ROA not before: Sun 05 Jan 2025 18:05:57 +0000
ROA not after: Fri 17 Jan 2025 18:05:57 +0000
asID: 39600
IP address blocks: 45.203.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63290 (0xf73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:05:57 2025 GMT
Not After : Jan 17 18:05:57 2025 GMT
Subject: CN=67797889-9e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:5f:11:d1:7a:cc:fe:cb:d9:66:a3:62:37:
8a:f7:10:3e:17:96:d0:12:f2:16:f9:a1:88:f2:1a:
14:81:37:42:fa:4a:6e:16:aa:6f:22:e7:28:c3:e8:
fe:da:48:95:02:b1:de:7c:2d:fb:48:27:e2:c9:cc:
8c:98:59:11:0c:ad:a8:60:d3:d5:f2:b1:1b:55:fd:
ad:89:1f:29:87:5f:fa:4b:f3:33:74:df:25:41:b6:
df:17:94:a5:ea:78:04:43:d2:b3:1b:d5:61:d9:e8:
c2:d6:f6:83:4a:a4:5b:7c:24:4e:29:23:cc:2e:54:
94:e7:5d:eb:41:4b:97:79:29:73:59:ce:85:c5:7d:
00:d0:26:a3:f1:8f:d1:8c:76:f4:f4:47:2e:ae:e5:
c2:5e:74:1d:75:77:26:0b:dc:8b:24:b5:22:71:06:
d3:06:77:fc:7c:a4:95:f7:21:ac:36:73:b9:a5:e2:
f4:93:66:aa:f5:4a:83:c4:bc:90:7d:00:e2:0a:21:
90:ec:8a:00:db:c5:23:b8:73:0c:e7:d2:f6:09:68:
58:3e:43:9f:1f:9b:23:5b:1a:a0:52:a0:79:8a:31:
f0:0b:40:68:30:85:df:d6:f5:7b:5c:5e:3b:bf:be:
30:67:25:12:04:d6:3f:73:dc:35:4f:e6:7c:ed:72:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:94:C7:19:96:27:09:42:D4:1C:10:BE:B6:9B:4F:EC:45:DF:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF94EFCCAC611EFAE921483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.62.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c7:dd:6d:4e:c5:fc:53:b9:20:b5:83:b1:f3:70:6e:07:4a:
ae:be:0d:3c:a9:a9:80:30:e7:9c:0f:d4:c0:92:1e:f1:b1:26:
ab:d3:36:49:9c:a8:98:81:df:0e:96:98:d6:c6:6f:cd:5c:ff:
3a:6b:64:9a:a2:f0:87:96:16:d8:d9:8d:4e:23:9d:3f:5c:9f:
25:d7:40:29:0e:49:1c:55:a1:79:e8:0e:c9:c9:02:4c:58:32:
6e:b9:b2:79:bb:6e:46:8d:41:1b:65:5d:a5:65:cd:7a:39:4e:
05:b9:54:7b:d6:cd:b3:b7:9d:e3:44:4a:94:b9:61:d3:96:05:
13:16:5b:49:39:5f:ca:78:e7:c7:05:03:f3:af:ed:27:97:6a:
ea:0f:0a:01:89:4c:c0:e1:59:9c:f3:c5:47:77:9a:2d:ab:8a:
55:a0:b9:5b:8e:1f:05:e4:74:a7:44:79:62:f5:a9:81:ed:d4:
07:b6:b5:25:73:6a:68:70:57:cb:4e:25:dd:79:ee:dd:53:50:
32:45:b6:6b:bf:03:29:b4:a5:9c:01:f0:36:4a:77:95:a0:c0:
1c:20:b9:68:d1:08:68:ba:bb:64:e1:b4:4c:cb:fc:df:4c:8a:
5a:d7:33:66:49:ae:23:c1:66:1a:88:6d:6c:0e:3a:e9:10:c4:
2b:cf:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client