Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9656CBCED02511EFA90E00B9762E951A.roa
File: 9656CBCED02511EFA90E00B9762E951A.roa (raw, json)
Hash identifier: ednwNnI9jT8BZNoTvrMkfExyib/6fbFOzZzA/lmhAq8=
Subject key identifier: 80:27:A8:B2:1C:49:27:73:B4:3F:88:06:F2:29:90:1B:44:BE:98:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9656CBCED02511EFA90E00B9762E951A.roa
Signing time: Sat 11 Jan 2025 14:08:53 +0000
ROA not before: Sat 11 Jan 2025 14:08:49 +0000
ROA not after: Sat 25 Jan 2025 14:08:49 +0000
asID: 139646
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67092 (0x10614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 14:08:49 2025 GMT
Not After : Jan 25 14:08:49 2025 GMT
Subject: CN=67827b75-d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:55:d7:8d:95:9f:e5:fa:e4:91:4d:7e:b3:
9f:7f:54:95:1b:dd:2d:0d:17:d3:49:47:e5:fe:a2:
e3:e7:e9:6f:e6:d7:00:07:b5:38:30:d1:2a:39:7c:
98:aa:85:fd:c8:4a:13:26:4b:fa:65:27:fd:b4:7b:
7a:4c:ee:4d:fe:88:f9:73:1a:be:b0:79:29:40:a2:
06:56:77:7f:0f:95:58:ab:6c:c7:9c:68:d3:bf:5c:
53:b8:52:e6:1d:e6:7f:a2:f2:f4:16:ac:b3:30:01:
23:87:87:dd:57:59:23:cd:9e:76:36:91:25:52:99:
73:93:5f:16:01:47:39:e5:5d:15:0a:87:e9:2c:59:
7b:e8:cc:6f:e1:e3:92:03:b7:51:43:40:b4:db:6c:
e5:54:2a:ed:4c:8a:91:a0:e9:ec:2d:4a:a8:87:d0:
5a:6e:b0:33:6c:cd:dd:a5:f8:f1:45:b1:7f:c1:0f:
2c:7a:2c:ad:26:e0:9e:3d:22:5d:65:82:c2:c1:bf:
94:c1:56:fd:54:e0:9a:94:9b:c4:99:cc:ef:1f:72:
e2:0a:a1:10:0d:80:85:ef:bd:ca:c7:a5:2f:c6:f2:
f1:11:75:de:e3:5d:6c:eb:04:59:8f:52:af:dc:46:
9e:30:e2:da:bd:3e:a8:f1:47:ea:25:1a:ee:ee:ce:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:A8:B2:1C:49:27:73:B4:3F:88:06:F2:29:90:1B:44:BE:98:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9656CBCED02511EFA90E00B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:ee:78:9c:5f:a9:dc:70:57:5f:27:e8:83:33:88:ff:a3:ce:
d3:31:08:c3:2b:dd:2e:1d:01:27:82:31:35:1d:19:27:d8:f7:
fc:4d:be:7e:68:4a:04:29:e1:70:b2:66:0f:91:f9:c4:59:dd:
a1:7c:c5:6c:e1:e4:e6:81:4a:fa:1b:ae:70:43:90:a8:c0:06:
37:3e:95:14:db:b7:74:cd:f7:73:03:27:d7:9d:b2:75:cb:d3:
14:12:65:a4:21:b0:d4:56:16:ce:bd:5d:10:33:0d:70:8a:e2:
9e:f8:75:d4:cc:63:fc:fe:04:c7:3c:ee:be:0f:fe:77:86:1e:
e9:d5:56:8a:5b:35:65:e1:03:95:b4:33:d7:c6:f8:06:10:52:
60:70:fd:85:00:5f:01:b1:0f:96:cd:c3:d1:c7:92:7a:cc:97:
17:af:48:fe:43:af:45:88:96:78:a5:9d:f6:1b:3b:25:e9:5c:
3b:a2:89:c8:87:ec:1e:17:cd:3c:d3:ef:94:e6:25:31:dc:c5:
8c:2a:ae:84:2a:8c:a1:d8:18:43:b2:b7:b9:c6:f8:91:fd:1d:
7b:00:53:bf:2a:2a:3e:f9:b1:1d:3c:60:0a:47:ba:7a:01:b5:
5c:5b:ee:26:91:59:d6:77:0b:c6:ed:63:df:86:e2:5e:76:a3:
ff:e5:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:05 2025 by rpki-client