Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F10530CF8C511EFB63BCFB6762E951A.roa
File: 9F10530CF8C511EFB63BCFB6762E951A.roa (raw, json)
Hash identifier: RE7SoN009HwnVlFJkApJGP0U+ijMeWpwKDxFsMCRlQY=
Subject key identifier: 10:EE:3E:34:41:2B:53:52:73:14:79:77:31:55:D7:05:02:F6:EF:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F10530CF8C511EFB63BCFB6762E951A.roa
Signing time: Tue 04 Mar 2025 06:55:13 +0000
ROA not before: Tue 04 Mar 2025 06:55:09 +0000
ROA not after: Fri 04 Apr 2025 06:55:09 +0000
asID: 200373
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.202.76.0/24 maxlen: 24
45.202.77.0/24 maxlen: 24
45.202.78.0/24 maxlen: 24
45.202.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82603 (0x142ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 06:55:09 2025 GMT
Not After : Apr 4 06:55:09 2025 GMT
Subject: CN=67c6a3d1-ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:8c:59:d0:c7:29:44:99:60:6b:03:2d:2e:
31:b5:a5:16:d8:e6:77:7c:c4:a3:8d:f1:5a:f6:7f:
0f:d1:5e:b5:7f:6c:e8:fe:61:bf:37:39:52:d7:18:
09:b3:47:4f:26:ff:65:6a:5b:60:5a:53:45:a8:09:
fb:5c:f5:cb:dc:44:27:6e:1b:0d:bd:f4:af:45:3a:
5c:c0:43:57:78:aa:94:ef:ff:e5:ca:5d:f0:32:cf:
dc:38:e6:94:d4:cd:39:74:3b:08:ab:00:f2:62:c7:
71:dc:85:70:27:f9:4a:e8:5b:f3:6c:c8:68:a1:8c:
30:fe:90:69:81:94:06:6a:ba:dd:ff:90:c1:66:c9:
e9:e6:9a:b6:a8:80:33:61:a7:81:e0:74:00:ca:07:
c0:c5:d1:6a:cf:2e:be:71:07:f3:2e:f1:96:9c:cb:
93:52:9e:c6:b9:b0:5a:aa:f5:dc:f3:ab:56:ea:04:
7c:52:23:0b:41:dd:4b:8a:78:7f:8f:0c:f5:34:40:
c1:70:95:a2:19:7f:ed:76:64:73:46:7a:b7:5f:97:
3b:cd:0a:e5:71:1b:9a:e0:d7:01:e2:75:9e:68:ee:
9b:65:d7:0b:fc:70:c8:b5:8b:5c:83:c8:88:89:78:
53:79:a7:b4:49:9d:2e:82:06:6a:0b:3e:92:75:6d:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:3E:34:41:2B:53:52:73:14:79:77:31:55:D7:05:02:F6:EF:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F10530CF8C511EFB63BCFB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.202.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f5:36:d6:93:34:75:fe:de:ef:5c:3d:7c:c1:eb:50:32:90:
91:c5:1f:04:c4:44:06:25:90:67:c6:fc:06:7c:a6:6d:15:69:
c3:c9:0c:f0:f8:dd:f9:df:38:cf:e1:be:ca:ea:67:72:6c:6d:
a2:27:83:a5:f1:4b:7b:b2:67:e4:ef:6a:dc:43:0c:26:90:19:
ad:de:cf:1f:6e:b0:ba:6f:8e:18:b5:2c:f6:84:81:6f:13:a8:
c1:80:0d:2f:45:bd:7c:28:4e:de:30:8b:43:5a:b5:4f:a6:e1:
52:bf:39:39:8e:00:05:f6:f6:71:29:d4:6f:d7:62:27:c9:89:
79:e8:88:ed:4b:59:79:75:f9:f1:4f:92:b7:7a:c2:2f:36:33:
19:60:db:a6:4e:53:a0:2a:e4:db:f4:06:83:c3:0e:c4:c0:50:
cb:7b:1a:40:77:64:2f:07:ff:61:01:95:0a:3f:db:49:bb:59:
71:92:8e:18:99:da:b7:3b:5b:6e:d3:e4:b5:3b:77:bd:ab:1c:
d6:22:4f:bd:f7:58:8a:18:12:d2:1b:35:55:92:aa:c2:54:fe:
82:2a:fd:40:ff:90:a1:9d:6b:f6:69:65:ff:f0:85:54:96:3c:
1b:1a:46:fc:bf:cd:06:6d:73:a3:28:9d:94:31:78:57:90:2b:
08:d2:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:58 2025 by rpki-client