Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99870370CE7E11EF82ACFDBA762E951A.roa
File: 99870370CE7E11EF82ACFDBA762E951A.roa (raw, json)
Hash identifier: 4DR2DPPT9oLGryWSo/zFG75Gz3MyctwbNtwrvEnLhdE=
Subject key identifier: 7C:AC:83:1F:BA:74:91:87:6F:A9:7E:53:CA:A0:AB:B5:65:DA:BD:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01037C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99870370CE7E11EF82ACFDBA762E951A.roa
Signing time: Thu 09 Jan 2025 11:41:01 +0000
ROA not before: Thu 09 Jan 2025 11:40:57 +0000
ROA not after: Sat 01 Feb 2025 11:40:57 +0000
asID: 17561
IP address blocks: 45.203.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66428 (0x1037c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:40:57 2025 GMT
Not After : Feb 1 11:40:57 2025 GMT
Subject: CN=677fb5cd-97b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:2c:89:a5:a9:10:c8:b1:1e:c6:81:75:18:
2a:10:31:a8:52:c9:b6:10:c5:1d:2a:d6:23:33:bd:
a4:fb:11:1a:a8:d8:2d:4f:68:fa:46:48:f0:bf:64:
0b:68:ba:2e:9b:3c:0e:d2:8c:c6:ac:e3:00:61:90:
bb:80:e7:90:c3:b6:53:65:86:ba:23:77:13:56:a3:
1b:1c:18:22:41:e8:b5:af:39:4f:30:6e:63:a7:97:
f9:81:71:02:09:c4:30:d6:5b:48:7d:12:b4:64:d0:
bf:9a:d6:c9:25:4e:95:13:48:c0:f7:c8:66:2d:3d:
8a:6c:75:6c:90:3f:45:f8:02:be:d1:e4:c0:88:b9:
e0:26:9f:62:c8:8e:ce:ca:9c:ef:68:fc:11:a8:65:
41:53:c8:72:61:2d:90:22:f2:d4:2e:22:78:f1:8c:
a6:c9:2d:c4:41:84:5b:d1:1e:e9:96:bf:ed:5d:4d:
3f:a7:df:0e:37:a1:b9:58:73:45:02:2c:87:a4:51:
45:61:dc:24:6e:cc:0e:3f:78:4a:1c:4f:20:34:ac:
4f:7e:93:e0:73:9d:59:cd:4f:e2:e0:40:72:ae:96:
37:4a:0d:f0:97:34:f3:bb:1e:70:e8:e6:15:31:c1:
18:c4:69:11:da:98:73:0c:f3:5d:41:48:e8:d3:ff:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:83:1F:BA:74:91:87:6F:A9:7E:53:CA:A0:AB:B5:65:DA:BD:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99870370CE7E11EF82ACFDBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e3:77:0d:74:04:74:17:01:7f:31:5b:0e:20:dc:8d:fb:91:
d5:55:7f:50:58:01:eb:a5:dd:2f:17:93:14:ef:43:f4:78:f9:
5e:ee:63:c1:fd:bc:73:15:6a:94:87:4e:5e:0f:76:6e:84:73:
0a:d4:b8:9b:41:f1:98:3b:05:ae:01:5e:4b:8a:4f:6a:54:bb:
8b:2b:50:ef:4d:6b:1d:e0:f6:ed:4d:26:0f:41:ca:d0:ec:ad:
31:07:03:1f:06:62:35:53:a3:9e:d2:3e:24:34:58:c5:83:90:
f9:f7:32:ae:d0:40:58:62:28:49:0e:8a:bf:7e:91:3c:f7:da:
fc:6b:90:a7:bf:26:9a:d0:48:20:8b:90:03:74:ee:f9:f6:1f:
32:9e:89:28:72:28:0f:40:da:72:50:44:f0:96:ee:c5:de:77:
df:47:f0:5c:a4:f5:e8:5a:5c:77:94:14:a7:bb:0f:87:57:a5:
c0:16:95:b0:46:9a:39:5b:4d:c7:d3:d5:cc:17:2c:cb:be:2f:
96:3e:9e:37:71:43:e0:61:cf:5f:82:b6:4c:a3:44:6d:b6:4f:
cd:69:a7:59:8c:9e:10:16:72:2f:f4:8d:01:82:a5:6e:fa:1f:
05:e7:68:c7:50:3b:4d:93:88:df:04:23:c0:30:67:fc:c6:21:
92:2f:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:53 2025 by rpki-client