Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CAD0FE0C9B011EFB68D49AC762E951A.roa
File: 9CAD0FE0C9B011EFB68D49AC762E951A.roa (raw, json)
Hash identifier: Ms9WmxZeAU7uy5PK+0iVwVZBmw67jU2hlo5B62wGPUU=
Subject key identifier: C6:36:83:89:CD:FF:ED:C3:76:31:FA:14:74:98:E8:7C:3A:BE:6B:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F6B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CAD0FE0C9B011EFB68D49AC762E951A.roa
Signing time: Fri 03 Jan 2025 08:56:25 +0000
ROA not before: Fri 03 Jan 2025 08:56:21 +0000
ROA not after: Sat 18 Jan 2025 08:56:21 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63153 (0xf6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 08:56:21 2025 GMT
Not After : Jan 18 08:56:21 2025 GMT
Subject: CN=6777a639-186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:ab:b3:61:2c:da:0e:5d:74:b8:f7:98:c7:
10:d8:dc:9a:d8:10:25:b3:18:cd:1b:1d:d9:a6:9a:
a4:08:a9:a6:78:67:e8:a9:b0:99:63:97:dd:17:37:
6a:d1:03:e5:38:9b:d0:c3:b0:a6:f6:cb:53:e9:aa:
9e:e2:6d:e6:6c:29:2a:20:ed:d3:25:16:74:3e:02:
34:12:e9:46:c0:b9:52:f1:d0:74:ad:bc:49:42:6a:
a1:6a:1d:f9:47:40:35:22:49:2a:71:c5:67:27:36:
05:98:c7:70:8b:c8:01:2c:a4:81:b2:2b:38:62:6d:
45:a2:8b:89:23:35:bd:0f:3c:34:71:7d:e2:c1:bd:
92:a4:dd:cb:a5:71:53:49:e3:8b:ec:1e:ae:b7:5b:
b6:29:a5:bd:14:88:28:cb:d9:d3:db:32:6f:e1:a5:
66:35:a2:3c:fd:77:ae:25:e6:1f:30:28:67:8f:51:
9d:05:25:8d:0f:81:f6:9c:62:06:e0:26:8f:5d:9a:
f9:02:4d:40:7c:8f:48:c9:d5:29:11:93:da:25:fd:
6e:c6:4a:6f:ae:76:c5:4c:6f:11:31:08:3f:9c:0e:
46:99:a1:dd:0c:b5:90:5d:d8:1e:bc:73:67:7e:06:
42:8d:5b:9f:21:28:f5:45:a4:55:4a:3c:9e:74:be:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:83:89:CD:FF:ED:C3:76:31:FA:14:74:98:E8:7C:3A:BE:6B:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CAD0FE0C9B011EFB68D49AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
29:46:05:07:bf:a1:d9:3d:92:e0:a6:5a:42:1e:9b:2a:a6:ee:
e6:e1:4b:d4:26:94:37:21:8e:61:5a:06:6b:b2:90:d9:75:69:
08:02:a0:ca:5c:20:0c:e6:97:36:bb:1e:27:d5:5f:25:c9:31:
81:77:0d:ba:ab:c8:40:2a:a4:23:4c:e9:0d:70:de:04:51:c6:
eb:a9:6b:15:63:77:ab:a9:69:03:9e:85:3f:92:06:a1:77:a5:
3a:32:0f:56:8e:8c:e0:13:49:0c:37:2e:1e:48:24:fc:df:f5:
47:6d:94:ca:cf:58:12:1a:03:14:e9:a0:3c:c4:f2:42:09:3d:
25:1c:e4:3f:2c:da:52:be:15:b8:28:71:e1:f1:81:4a:54:16:
9f:65:46:49:43:ee:7e:14:44:ee:17:96:2e:bd:96:1f:fb:c2:
95:e8:de:eb:0a:a3:97:87:bd:f3:bd:f3:a3:e7:d9:24:ae:dd:
f1:b7:69:54:cc:0b:f8:f8:4f:13:6c:a9:31:ad:b4:8c:8f:ca:
44:7f:6a:fe:58:bf:b7:c6:ee:04:e1:b9:da:9f:d0:8b:33:9a:
73:32:34:29:05:6e:fb:37:75:9d:c5:3b:86:d4:85:f6:86:72:
ae:c4:2d:d2:50:e4:e8:60:af:4b:89:f5:c0:e3:75:8a:31:75:
10:87:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:18 2025 by rpki-client