Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2015B2CE8211EFB3A1E154762E951A.roa
File: 8F2015B2CE8211EFB3A1E154762E951A.roa (raw, json)
Hash identifier: DUNyBt01hV4fcD04cFrpN0JJkPGS0WD8Gu0kmBv9XKk=
Subject key identifier: 81:32:4C:69:F1:CC:22:4F:45:F9:9F:0E:80:3C:26:76:18:EE:B6:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2015B2CE8211EFB3A1E154762E951A.roa
Signing time: Thu 09 Jan 2025 12:09:21 +0000
ROA not before: Thu 09 Jan 2025 12:09:18 +0000
ROA not after: Sat 01 Feb 2025 12:09:18 +0000
asID: 17561
IP address blocks: 45.203.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66481 (0x103b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:09:18 2025 GMT
Not After : Feb 1 12:09:18 2025 GMT
Subject: CN=677fbc71-a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:4a:a9:e0:8a:e7:6d:f7:a5:3e:15:16:a8:
c1:60:f9:98:b5:19:b5:9f:f0:be:69:11:a5:0e:ed:
cb:76:a2:9d:ad:d0:2c:08:5b:f0:dd:1c:18:73:0b:
97:2f:01:d9:52:b5:11:13:83:02:38:f5:ff:75:2a:
79:8b:4a:5d:1c:50:8f:2d:a7:1a:b5:a7:6d:67:7e:
c8:04:f9:d0:fa:a7:be:1c:ea:2e:28:83:c9:63:af:
b4:6a:0b:3e:e0:fb:e5:64:e0:26:0e:30:91:b1:ae:
57:c1:71:87:4d:0d:2d:52:ba:1f:35:e7:69:47:d2:
7e:b3:09:d4:e5:fd:ad:c6:9c:69:d9:d8:7a:d9:60:
c7:a1:f3:95:6f:f6:82:e6:60:20:33:7b:ba:03:1c:
cb:64:ec:98:bb:47:f4:1d:4c:f5:b4:7a:ff:c0:94:
4f:21:1f:8b:de:cf:2e:03:0b:5a:84:5c:93:d5:6b:
9c:da:7a:25:53:b8:22:70:b9:fe:5d:63:fb:37:3b:
9e:d7:3a:83:b4:ec:30:b9:6d:03:b6:88:d6:71:7e:
47:91:24:20:5f:e5:ae:97:45:60:1f:8c:42:9b:70:
27:46:51:f7:52:ac:6e:be:bb:fa:26:c7:07:c5:96:
cd:e8:a5:bc:5a:82:f9:4b:c5:2a:90:50:5c:82:a3:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:4C:69:F1:CC:22:4F:45:F9:9F:0E:80:3C:26:76:18:EE:B6:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2015B2CE8211EFB3A1E154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.19.0/24
Signature Algorithm: sha256WithRSAEncryption
45:47:6b:69:90:7c:6e:eb:e2:48:41:b2:10:32:fd:8a:2c:e4:
8f:47:c9:84:27:47:f5:c7:fd:24:d7:8c:e5:95:0c:0a:0e:0b:
53:d5:73:0b:b7:2e:11:26:ee:69:02:14:c6:c4:99:7d:fc:48:
9b:88:63:27:83:93:fd:8b:64:c3:ef:b3:ef:77:b2:66:39:73:
71:e5:3a:d8:69:4c:a1:80:c7:25:9e:06:04:fa:28:1a:4e:7b:
e6:44:2d:64:b1:25:8f:09:d3:7e:4b:b1:f7:6e:7d:ac:77:84:
a2:13:cf:5a:96:01:8c:d2:99:ad:7b:6a:18:ef:41:16:9e:d7:
60:9a:b0:23:85:f9:f1:34:5e:8e:1b:28:73:ca:8f:e8:bf:b4:
56:c6:f9:81:a0:39:8c:a8:86:61:3a:0e:c1:6e:f8:33:0a:76:
78:54:95:b0:01:b1:0e:3a:09:4b:6d:d9:84:e5:d8:b9:e4:13:
b1:c0:e9:32:b4:83:33:3d:5e:39:aa:65:f0:72:e3:bc:b8:db:
5e:9d:6d:9f:f2:af:1d:dd:c8:e9:3a:17:fe:64:4a:58:fc:a8:
38:b0:e6:73:79:81:31:1d:98:ce:10:e9:23:82:a8:2f:d0:28:
59:ee:a8:94:2f:41:0c:fc:5d:2e:39:57:a4:6a:c7:fc:84:f7:
20:0e:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:49 2025 by rpki-client