Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0F6120ACE5511EFB3F796B9762E951A.roa
File: A0F6120ACE5511EFB3F796B9762E951A.roa (raw, json)
Hash identifier: dNmAUPuJKNBMYsK12dv1HP+CFcnwmt+Nc5bIHXkfFYQ=
Subject key identifier: 11:E4:95:96:02:3B:05:8E:9B:90:E8:B3:0B:36:71:8D:25:A5:48:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0F6120ACE5511EFB3F796B9762E951A.roa
Signing time: Thu 09 Jan 2025 06:47:44 +0000
ROA not before: Thu 09 Jan 2025 06:47:40 +0000
ROA not after: Tue 21 Jan 2025 06:47:40 +0000
asID: 135377
IP address blocks: 45.203.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66269 (0x102dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 06:47:40 2025 GMT
Not After : Jan 21 06:47:40 2025 GMT
Subject: CN=677f7110-c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:bf:d5:43:20:d5:0a:3b:16:41:87:da:55:
7d:74:92:9b:c5:46:d0:60:bb:94:6e:43:09:da:01:
b3:5e:5c:72:22:ea:c4:69:03:2d:56:2f:ff:40:ff:
87:f3:9a:2a:8a:d3:04:3f:03:65:10:5b:80:43:c7:
ae:36:72:17:1e:45:7c:cc:6e:44:57:45:9c:8c:e5:
42:43:9b:a8:aa:4c:21:1d:57:61:3f:eb:0d:a5:10:
2b:b3:37:94:9a:14:c9:01:36:44:d1:b7:14:c4:e7:
cf:15:a6:4b:bc:8b:b8:e0:19:25:6d:bc:5c:30:54:
23:cc:86:a3:a9:a2:07:6a:6d:67:62:2c:c0:ed:4b:
a3:a7:fa:68:08:62:52:fa:81:d2:b5:84:09:a1:f1:
8e:2b:ec:29:fd:bb:cb:82:18:e6:2f:97:82:c3:fb:
2d:d1:ca:b2:c9:4a:64:b6:8f:c1:5b:90:7d:d4:28:
b3:52:7b:64:28:7f:98:55:d2:c4:b3:39:f7:90:60:
a3:64:ba:78:6b:ba:09:c1:de:32:c1:5a:ce:48:e5:
90:6d:6a:cd:01:c5:b0:1e:13:34:d7:c9:30:9e:33:
09:87:78:74:0b:ee:8a:59:90:2e:38:7a:1d:21:a5:
6a:18:8a:c4:cc:7e:41:60:ab:47:45:17:06:8b:6a:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:95:96:02:3B:05:8E:9B:90:E8:B3:0B:36:71:8D:25:A5:48:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0F6120ACE5511EFB3F796B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.159.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f5:42:d0:f0:ab:44:a0:d1:9b:82:24:ec:ae:db:ce:13:1e:
a7:b1:f6:d8:77:e7:2d:06:0f:3e:4f:c3:32:6e:b2:bc:eb:d7:
83:5a:f2:f9:0e:a9:f7:42:58:10:be:ca:fc:02:fa:2b:e8:e8:
c2:94:4b:00:a7:68:1f:f6:b6:ff:9f:bb:f4:1a:8a:a6:cb:c8:
14:bc:4a:40:8f:b9:fb:89:c7:99:2b:a3:01:7e:b2:8e:02:99:
a1:9c:33:5b:57:2d:5a:89:b9:2f:0a:a7:59:ed:ab:96:3a:6c:
00:ff:ab:22:e2:77:1d:7f:b6:9c:69:c3:36:b1:ef:0a:13:88:
d1:80:45:81:ea:7e:c8:36:61:1b:81:ab:94:35:0f:a2:5e:ee:
28:5f:82:16:ef:83:c6:a8:e6:e1:a1:79:94:0f:6e:1c:8e:df:
cb:62:cc:32:2c:a4:33:e0:a9:9a:92:37:d7:be:4c:0f:1e:98:
de:ef:4c:67:6e:d4:a2:56:fe:09:27:ee:a4:2a:5d:1c:4d:d9:
fa:26:8e:53:21:3e:c1:bd:89:0f:60:a9:b9:e3:75:62:35:b9:
a9:09:61:c0:4e:d9:36:ba:e8:eb:e2:44:86:f4:4e:0f:a9:8b:
90:0d:2b:a5:72:48:b8:47:95:66:36:ca:d2:05:30:1c:cb:0e:
9f:0f:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:16 2025 by rpki-client