Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2ADAA2CCE5F11EF8847C777762E951A.roa
File: A2ADAA2CCE5F11EF8847C777762E951A.roa (raw, json)
Hash identifier: BM0Lf71dssJo4UUk+zArOuJ4YS3p2ogX8RXkyM4eQMs=
Subject key identifier: 35:64:FE:32:CA:57:3C:8A:7D:26:2E:BF:E3:39:38:7D:77:32:74:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010312
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2ADAA2CCE5F11EF8847C777762E951A.roa
Signing time: Thu 09 Jan 2025 07:59:22 +0000
ROA not before: Thu 09 Jan 2025 07:59:18 +0000
ROA not after: Wed 22 Jan 2025 07:59:18 +0000
asID: 7018
IP address blocks: 45.202.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66322 (0x10312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:59:18 2025 GMT
Not After : Jan 22 07:59:18 2025 GMT
Subject: CN=677f81da-e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:86:ce:aa:5f:da:29:c6:39:7b:d0:b3:cd:
17:f0:5f:a6:f8:57:ac:fc:63:d0:84:bb:47:1a:02:
19:90:c4:96:01:94:97:83:4e:0b:57:5f:cb:d1:7e:
73:b0:a9:6b:e4:57:72:fc:e3:35:10:2d:98:78:8c:
78:4d:7a:eb:74:07:01:89:e4:ee:2a:f8:f1:8f:c7:
84:11:bb:8a:a6:3c:24:92:12:8c:46:06:a3:df:c2:
e1:fd:f6:34:dc:88:15:99:11:05:3f:ab:5a:a1:4b:
54:2c:37:5f:37:4c:95:86:c8:f7:a4:16:b5:7a:c5:
06:a9:ec:33:a5:5d:ce:8d:d6:9c:75:a4:57:71:0d:
1f:3e:0a:99:c3:02:47:42:d8:8f:f8:95:ba:5c:bf:
8b:2d:c9:50:ec:55:2c:0f:7d:c2:18:69:2a:96:c3:
d6:f7:33:76:38:2c:31:47:9d:96:cf:40:86:73:4d:
fb:3d:c7:49:c4:79:49:bc:93:b7:ab:14:02:9b:0b:
79:0a:52:39:dd:65:6d:06:ca:8e:0a:59:94:62:39:
7e:d9:37:7e:1b:60:bd:9e:02:a5:9a:5e:bd:46:43:
a9:9b:84:86:31:c7:e9:79:89:e4:47:6a:13:78:26:
c0:29:9f:d7:a9:e7:40:c4:a4:40:a8:19:4a:3f:5f:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:FE:32:CA:57:3C:8A:7D:26:2E:BF:E3:39:38:7D:77:32:74:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2ADAA2CCE5F11EF8847C777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7c:d2:86:02:51:4f:4e:5d:cc:bb:dc:b7:17:12:aa:ec:a3:
73:f2:f8:c0:92:62:14:63:ad:f5:0a:2b:d9:30:0a:5e:4c:c9:
de:8b:b8:9f:6a:6a:56:2c:f5:52:32:5b:73:c4:16:8e:ca:ec:
89:8c:c1:61:12:b7:5b:30:b0:13:94:29:fa:11:ff:60:06:10:
dd:a8:25:b9:f7:ed:6f:0a:79:1d:48:81:9d:66:3a:b1:98:4c:
f6:17:f5:2b:5e:d2:28:33:ce:0c:69:4e:37:a0:b0:4e:f7:77:
9b:3f:cf:ac:98:e4:9f:e2:1f:8d:6e:5b:d8:dd:d8:29:fe:d0:
e3:0d:1e:7f:6c:02:31:95:e4:53:50:9c:84:de:2e:2d:d9:b8:
da:76:f9:65:6a:e1:74:c3:b7:5c:9f:16:2a:4a:ba:09:e4:b3:
2c:5c:60:8e:4b:69:e5:de:7f:92:c7:bb:55:7e:6e:c1:57:87:
2a:ae:4e:6d:ae:bf:b2:80:4e:ba:a8:47:61:a0:8d:9f:55:58:
58:33:0e:2b:08:a7:8c:00:e3:09:a5:77:ef:7c:4d:49:e8:80:
cf:fb:f6:c1:3f:74:e0:78:cf:27:d1:3e:ef:77:15:7c:46:0d:
0e:3c:be:cf:bf:b3:a1:0f:c8:7b:97:03:ee:f5:62:22:c3:94:
49:25:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:36 2025 by rpki-client