Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3531BAABEB111EF9606AF5C762E951A.roa
File: A3531BAABEB111EF9606AF5C762E951A.roa (raw, json)
Hash identifier: iOQ7c/rEiuZF3iQwfKdLeOS/Zxfjxryb/+laBxyBwlA=
Subject key identifier: CA:91:FF:F6:2D:E1:52:BA:64:E1:C8:A4:12:4A:2A:76:9C:63:83:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E753
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3531BAABEB111EF9606AF5C762E951A.roa
Signing time: Fri 20 Dec 2024 09:06:03 +0000
ROA not before: Fri 20 Dec 2024 09:05:59 +0000
ROA not after: Sat 25 Jan 2025 09:05:59 +0000
asID: 6079
IP address blocks: 45.205.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59219 (0xe753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:05:59 2024 GMT
Not After : Jan 25 09:05:59 2025 GMT
Subject: CN=6765337b-d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:b1:66:69:c9:ff:01:19:02:e5:06:3d:24:
3f:db:0a:70:95:1a:7d:e3:67:6d:dd:bc:ea:3c:4a:
2d:16:38:df:3c:c9:2c:c6:24:87:16:0e:16:36:0d:
9e:02:98:fe:f5:37:16:61:97:fa:69:4e:6c:ac:e0:
dc:7f:6b:44:3b:97:d5:6e:e8:f9:2f:a7:79:85:0b:
01:81:ad:24:28:66:6d:83:f8:7d:1e:df:d7:fb:fd:
2e:65:af:81:49:8d:6f:91:46:92:ee:06:d2:da:7e:
1b:af:e4:85:53:18:bc:15:dd:86:ab:37:c5:b2:96:
e2:bb:67:a0:27:93:e5:f5:3b:fa:f4:72:e0:f8:5b:
e9:35:7a:ab:04:ce:cd:e7:00:d3:42:71:d3:78:89:
81:b2:1c:96:dc:99:94:59:f5:9b:ee:c2:58:19:ff:
53:c4:46:22:71:0b:05:a9:c7:4b:03:7d:06:33:11:
b0:1a:07:7e:e7:20:2f:49:7b:33:9e:ca:12:05:0b:
cf:9b:c5:d6:bd:03:68:f3:ce:c1:5c:d8:31:42:f1:
22:19:02:db:17:a1:51:a8:2f:94:9c:d4:fc:5b:49:
c9:9f:aa:c7:92:3a:0c:bd:a1:bc:a3:a0:ad:e5:6e:
15:59:f8:66:03:d7:99:1e:16:3d:1f:f1:30:ef:2d:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:FF:F6:2D:E1:52:BA:64:E1:C8:A4:12:4A:2A:76:9C:63:83:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3531BAABEB111EF9606AF5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.151.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ae:6d:4a:12:79:10:7b:7b:96:ff:ad:4c:65:e6:43:16:33:
48:46:be:2a:be:29:45:f0:0b:9f:4e:72:21:9d:a6:2f:24:81:
33:47:23:24:a6:18:24:3c:9f:ed:33:48:85:f7:b7:e1:8c:c7:
ba:1b:4c:a5:3f:6e:f4:9e:44:68:28:87:1d:54:d7:42:52:6c:
ab:68:e0:a0:49:4b:c3:1b:c3:07:9c:06:e5:54:9c:df:d0:ea:
e6:7e:85:66:3a:1a:b2:62:10:f1:3f:99:23:30:e4:1d:91:ea:
ed:72:19:ac:7a:f9:52:f6:e4:cc:72:68:95:7f:60:d7:0c:7d:
cb:81:39:a7:64:c2:4f:ed:b0:f5:ad:db:c1:a2:22:f3:42:cb:
4c:cf:e3:44:c9:9a:24:ac:23:70:97:e7:bd:5f:60:c8:8b:26:
46:be:cd:08:6c:33:07:c1:7c:31:8e:d7:f0:a2:c5:02:c8:54:
55:c9:e7:e0:25:3d:08:db:21:1c:2a:31:80:be:11:12:5b:19:
cd:1d:83:97:36:4e:c2:d3:7b:b2:1d:f5:89:d4:46:b8:a0:18:
99:06:19:bb:0d:97:c5:27:14:08:ac:ad:33:69:c6:79:34:3e:
ec:af:fa:6f:f0:fa:5b:84:33:a9:d0:a9:e3:32:b4:0a:80:20:
fb:f9:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:18 2025 by rpki-client