Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C3E9A2D01011EF90B514B6762E951A.roa
File: A1C3E9A2D01011EF90B514B6762E951A.roa (raw, json)
Hash identifier: GGS/RzPR8B3KR6frcsADsnsTTm89Hj3SmGY3yr4XcqM=
Subject key identifier: F9:88:B3:44:B5:D8:B4:DC:3C:10:85:2D:A4:51:D7:5F:30:B7:EF:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C3E9A2D01011EF90B514B6762E951A.roa
Signing time: Sat 11 Jan 2025 11:38:53 +0000
ROA not before: Sat 11 Jan 2025 11:38:41 +0000
ROA not after: Sat 25 Jan 2025 11:38:41 +0000
asID: 139646
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67040 (0x105e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 11:38:41 2025 GMT
Not After : Jan 25 11:38:41 2025 GMT
Subject: CN=6782584d-9462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:de:12:ae:c2:86:86:2d:17:ff:96:e2:1f:
56:c4:a3:50:76:08:d9:d4:bd:4b:00:c7:94:e8:da:
49:90:ac:61:4c:48:9e:04:db:ee:ee:0a:b0:a4:41:
af:2e:b7:1f:9e:9f:59:35:19:4c:20:bf:ee:47:8c:
d9:3e:78:97:e7:dd:87:cb:97:ee:70:a8:39:5e:f0:
5a:03:58:f7:d6:54:ab:8a:bd:bd:fd:38:ce:aa:67:
da:46:70:cb:5d:62:e9:ec:78:75:91:88:a8:0f:19:
bd:f1:16:6d:87:72:d4:5e:08:ad:a5:07:eb:d1:cd:
a3:f1:9a:b7:e9:63:63:6b:36:ec:07:29:0c:82:4a:
47:59:50:33:b1:7c:35:c1:5a:2e:9a:e3:fe:5f:10:
07:f7:6f:36:50:d0:a9:d2:e1:4c:d3:6d:3e:d9:01:
09:c7:9b:26:65:5c:97:ea:03:37:3e:94:d3:c9:c7:
27:0d:27:11:48:20:8b:bd:7c:80:a4:67:52:1c:b0:
ce:7c:43:25:0b:90:49:06:9b:e1:e7:65:d2:c8:5d:
7b:83:6f:2e:cf:5e:a9:94:3c:2e:75:a3:5f:31:ed:
23:13:bf:1c:ec:b3:35:fe:31:f4:8c:64:57:01:f8:
6e:cd:08:a3:f8:00:7e:c0:31:3e:93:d7:21:4b:9d:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:B3:44:B5:D8:B4:DC:3C:10:85:2D:A4:51:D7:5F:30:B7:EF:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C3E9A2D01011EF90B514B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
97:81:1a:3b:2f:3c:12:59:02:cb:50:e3:d3:c4:54:58:8d:85:
6b:4b:7f:cc:ae:e5:d2:14:85:8e:f8:2c:ba:d1:0e:84:a9:82:
ef:22:6a:c2:5b:c4:e2:8b:fe:aa:28:d2:fd:58:21:6b:73:2b:
29:eb:67:90:25:59:d1:9e:af:be:e4:84:bf:51:77:a4:75:30:
08:3e:1f:69:ac:88:4a:3f:bc:9f:fe:c6:2f:17:26:d9:4d:8d:
d6:50:fc:8d:d9:dc:da:2b:0a:9d:5a:aa:59:61:38:5a:39:87:
c4:d0:f0:8a:eb:7e:73:58:02:57:b0:4f:31:f4:ef:96:25:33:
3a:1a:78:f0:ff:25:9b:dd:ee:17:37:13:1b:4c:29:80:cc:62:
c9:65:cc:a0:a6:3a:eb:81:42:b5:b9:fc:9a:bc:d9:45:73:d5:
f2:ea:c8:91:80:bf:2e:8d:4c:14:17:61:76:0e:a1:25:4f:45:
a8:f4:1c:f9:dd:d3:06:76:fe:50:bf:a8:41:22:66:d5:94:e8:
54:97:ef:b0:b8:bd:3d:be:01:87:9b:43:74:4f:96:12:ac:eb:
48:9d:9b:fc:23:39:e1:5d:22:77:ce:6b:4d:f3:56:3a:75:63:
3a:da:9e:18:b7:76:e9:86:86:ab:83:f6:ec:ec:48:02:e2:44:
47:5c:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:28 2025 by rpki-client