Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07AC5BAD30E11EFB57D3DA5762E951A.roa
File: A07AC5BAD30E11EFB57D3DA5762E951A.roa (raw, json)
Hash identifier: Zf7J7fVrzCZtT8jjV/UouO8xNc/yfR38DEm+N8nr/+k=
Subject key identifier: D7:31:06:59:A6:3A:88:57:6B:C0:0C:32:C5:55:9B:66:69:19:C4:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01083D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07AC5BAD30E11EFB57D3DA5762E951A.roa
Signing time: Wed 15 Jan 2025 07:02:05 +0000
ROA not before: Wed 15 Jan 2025 07:02:01 +0000
ROA not after: Mon 27 Jan 2025 07:02:01 +0000
asID: 142032
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67645 (0x1083d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:02:01 2025 GMT
Not After : Jan 27 07:02:01 2025 GMT
Subject: CN=67875d6d-3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:97:e4:35:2a:b2:1f:6b:47:af:16:08:41:
b2:c7:d0:c8:8f:ee:53:3e:1b:b8:5e:46:fa:13:8b:
10:d1:2d:f0:ea:52:4f:2d:2e:40:13:b4:52:97:4e:
ef:8b:6f:9e:cd:f1:c1:94:53:40:2a:9c:0d:ca:6a:
28:1b:5d:22:d0:1f:5e:94:48:71:7f:05:14:05:52:
f6:a8:b3:87:9d:50:af:42:32:fc:c9:6f:36:06:67:
bd:c8:e9:ff:61:82:21:5d:06:3b:a7:ec:22:b1:5e:
ff:af:02:3a:48:bf:63:2d:11:4b:b4:cd:6a:1f:21:
0f:e3:c4:18:58:51:c8:b6:82:a7:ee:ad:b3:76:79:
28:db:78:c1:68:3f:29:3d:a9:2a:8f:c0:96:bb:88:
54:a8:7d:d1:76:c0:d4:cc:34:3c:c6:e8:65:0f:96:
25:7a:9c:23:15:59:86:bb:81:80:ea:90:77:e6:ab:
d3:5b:48:b7:25:73:18:b2:06:81:dc:00:92:88:2e:
58:72:12:72:2a:72:99:d3:ee:1b:5b:20:b0:00:0f:
e5:be:08:b5:ee:46:a7:d0:d4:03:af:68:7a:9a:dd:
36:d1:73:e1:a2:12:67:f6:aa:d0:1b:36:26:14:6b:
52:d6:8d:59:ad:8d:9e:4d:d9:7a:7d:7c:92:b8:e4:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:06:59:A6:3A:88:57:6B:C0:0C:32:C5:55:9B:66:69:19:C4:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07AC5BAD30E11EFB57D3DA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
99:46:c4:03:ce:31:de:51:15:4b:c9:5b:d8:1e:57:d5:68:14:
15:a2:7c:cb:04:df:cb:9e:bc:e4:c1:aa:21:f9:d3:c1:53:48:
33:3f:26:f2:43:ce:ac:40:eb:a1:45:45:2d:df:89:15:10:56:
aa:b5:f4:dd:cb:bf:71:1d:a6:78:0a:20:6d:66:94:3a:2f:f1:
5b:62:17:6a:9e:09:41:e3:40:4a:ce:26:7c:b1:22:b0:45:64:
c2:ec:08:ec:fd:fe:ef:70:4c:fb:af:77:14:3e:48:67:00:b7:
cd:ec:46:52:ec:54:a3:c9:a5:9e:53:cb:45:6a:ce:4e:4f:4e:
12:e6:05:85:44:89:23:7b:e9:82:e8:65:da:03:03:3f:2c:97:
f6:37:e2:ee:dd:d8:8a:aa:88:80:9c:44:8b:70:22:8c:82:87:
e7:92:36:57:e2:58:3b:4b:2f:f9:2b:60:1f:29:76:21:d6:d9:
4d:51:88:8b:fe:67:82:2c:91:3c:7e:24:23:c6:a8:c9:23:56:
bf:df:0d:ae:94:d9:68:35:8f:d0:a3:7c:b2:83:9c:9b:d2:d0:
c6:e5:6e:46:5c:7c:60:36:f4:db:08:0a:a0:a4:fa:78:10:ce:
60:d9:bf:ab:c6:94:9b:54:ae:6b:92:bd:9b:f3:a2:ac:0f:58:
f4:09:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:33 2025 by rpki-client