Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55166D4B92811EFA55F008F762E951A.roa
File: A55166D4B92811EFA55F008F762E951A.roa (raw, json)
Hash identifier: C6ewraOQoWyQfkQQlxNvApPGNdG34aEd6P4HSysRWVk=
Subject key identifier: 43:14:68:30:20:43:8B:9A:AB:20:4B:CC:41:A2:30:A6:8B:C5:5E:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E327
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55166D4B92811EFA55F008F762E951A.roa
Signing time: Fri 13 Dec 2024 08:02:50 +0000
ROA not before: Fri 13 Dec 2024 08:02:46 +0000
ROA not after: Sat 25 Jan 2025 08:02:46 +0000
asID: 44559
IP address blocks: 45.199.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58151 (0xe327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:02:46 2024 GMT
Not After : Jan 25 08:02:46 2025 GMT
Subject: CN=675bea29-04ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:47:56:25:c2:36:5b:bb:af:f4:79:41:4b:
3d:2a:ab:da:4a:59:91:f3:45:6d:0e:4c:26:07:a2:
1f:e2:7a:80:d8:76:16:e6:ed:18:50:09:c7:53:90:
88:4c:f2:a5:f3:fc:1e:f3:47:af:f4:93:70:8f:1d:
44:da:35:1c:60:2c:d8:aa:7f:0d:40:e6:c2:26:7b:
cd:95:dc:42:22:e0:e3:6d:58:7f:e0:87:ae:f8:f1:
ba:3a:6d:97:28:09:4e:b5:70:58:24:29:fa:e3:e7:
6f:b8:cb:fd:06:9a:46:46:21:fa:89:1c:21:35:e6:
d0:b2:6f:0c:f8:cf:83:79:6d:ab:71:ee:fc:1f:87:
88:f9:53:9f:17:1a:db:46:45:5d:60:69:4c:79:93:
85:aa:94:ac:0c:6f:90:10:72:36:0c:3c:cb:a9:91:
12:40:6c:21:b6:a4:4e:ac:d4:78:33:32:6e:e1:ac:
9d:f7:b7:0b:22:b3:e5:3f:0a:b4:2c:40:83:76:7d:
43:13:8d:e5:44:10:08:82:21:bd:92:cf:9e:30:cd:
58:46:0b:cf:57:16:d8:77:5c:f6:2a:85:45:e3:49:
da:ad:21:69:a0:82:34:2d:b0:49:b1:54:91:c8:8f:
5e:17:8b:fb:39:41:b8:c0:c8:d5:a4:4c:cb:1c:8c:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:68:30:20:43:8B:9A:AB:20:4B:CC:41:A2:30:A6:8B:C5:5E:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55166D4B92811EFA55F008F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:4a:50:82:70:db:ec:ff:b6:5c:ce:55:fa:03:fa:a0:21:f7:
03:04:e5:13:22:67:a5:6c:d7:94:e6:49:37:0b:6f:5f:d7:6a:
07:4f:72:c8:fe:ab:71:5e:9a:49:e1:6d:b1:f5:e9:11:30:23:
8e:ca:a7:f1:8e:e3:ce:98:af:b2:69:e6:ea:23:a7:a5:4c:b7:
b3:55:54:a6:26:d9:ea:93:6f:cd:1b:4c:70:2b:e6:4a:56:96:
ee:0b:24:44:fd:22:0e:e3:fc:b9:53:9e:ea:45:9b:dc:0f:80:
d4:50:74:a5:2c:86:fe:e8:e9:31:20:b2:47:ad:df:2a:9c:16:
51:27:2a:df:06:ea:2d:5b:eb:19:1b:c0:3a:60:b2:6f:67:06:
00:52:da:9e:e8:1b:92:cf:ef:7b:d1:ba:8e:3d:a2:3e:b6:73:
8b:3a:e2:b7:d1:29:a7:8b:85:7d:d8:8c:2f:e4:5a:68:a3:20:
95:a6:24:06:dd:8c:1e:45:fb:fb:d9:a0:b8:b2:be:40:ed:8e:
b0:1e:60:50:cf:28:dc:82:d5:1b:f1:7f:18:5f:4e:8a:65:03:
11:a7:aa:3d:ee:72:34:37:3e:57:d0:24:cd:a9:9c:8a:3b:bf:
1c:3a:31:0d:0c:b7:3e:60:72:a5:5c:16:33:d9:9c:7c:b3:c7:
42:f1:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:44 2025 by rpki-client