Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC7A1B44B78A11EFBC815D66762E951A.roa
File: AC7A1B44B78A11EFBC815D66762E951A.roa (raw, json)
Hash identifier: Ca9RwXs2E0ihHffo9R7pm45FULCpwBZ9Ww3G7/IIrwg=
Subject key identifier: E3:8C:90:6A:4F:66:82:8F:61:70:43:FC:01:51:25:92:EE:2B:2E:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC7A1B44B78A11EFBC815D66762E951A.roa
Signing time: Wed 11 Dec 2024 06:39:30 +0000
ROA not before: Wed 11 Dec 2024 06:39:26 +0000
ROA not after: Thu 16 Jan 2025 06:39:26 +0000
asID: 6079
IP address blocks: 45.205.152.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57987 (0xe283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 11 06:39:26 2024 GMT
Not After : Jan 16 06:39:26 2025 GMT
Subject: CN=675933a2-d235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:ae:5f:dd:93:d2:8f:21:ec:de:74:4e:11:
40:ce:b1:a8:8e:5f:56:e1:d3:57:f9:55:ae:39:97:
9a:b3:bb:cd:fb:81:5c:8e:bb:0a:b2:9b:13:b3:df:
4a:ed:24:d6:f5:dd:a9:85:76:5f:c7:c4:97:90:14:
af:dc:94:ac:fb:5d:1f:6f:b2:cb:59:85:6f:70:42:
e0:32:f9:0e:63:98:28:71:2c:61:c0:0c:84:33:95:
28:f5:d2:0a:cb:1b:51:26:b9:12:3c:63:3d:fb:f7:
92:a3:27:29:76:91:e2:0f:62:8f:f5:c7:4a:12:e4:
bc:fe:0a:9a:5b:ab:82:2b:0a:c6:3c:c9:f0:04:05:
15:47:1d:a2:52:fc:78:64:8f:b1:59:12:55:b3:47:
dc:02:45:3e:b1:e2:90:57:e6:af:b8:8f:08:f3:fd:
0c:86:3f:52:d3:23:5d:b3:e1:1e:d4:3b:76:0f:6f:
4e:5f:ed:81:8d:f7:ca:76:6f:42:18:6c:b8:32:38:
eb:6b:07:d2:14:7b:33:58:e1:ea:1e:0a:74:c6:d2:
66:fa:19:4b:32:4b:3a:28:54:ba:0e:b7:6a:21:18:
ee:eb:13:1c:d0:22:e7:60:a6:42:63:b9:9e:7e:56:
3e:1d:9f:15:ef:24:93:69:27:83:35:06:bb:2b:4e:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:90:6A:4F:66:82:8F:61:70:43:FC:01:51:25:92:EE:2B:2E:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC7A1B44B78A11EFBC815D66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.152.0/23
Signature Algorithm: sha256WithRSAEncryption
54:0e:ca:51:8d:ae:65:67:d0:e6:68:7f:ce:8e:6a:46:e7:4a:
a3:ed:38:f1:70:5c:95:41:04:8d:28:6c:5c:c9:c6:58:58:cb:
ed:ca:ab:44:8c:f5:09:c0:cc:43:97:dc:34:31:33:3e:2b:97:
b0:e6:da:be:e3:14:38:33:73:d4:2a:b3:95:db:5f:3c:ee:e2:
43:0d:a7:2b:ce:f4:ef:01:35:80:05:8c:f2:7f:f7:ce:4e:f7:
f2:98:c5:51:79:01:4f:53:9b:d1:78:c5:7c:8d:75:76:13:27:
44:3f:68:b7:4a:90:3f:f7:67:76:ca:1f:61:d8:ce:2c:d9:a2:
cb:28:84:93:05:a9:46:63:df:ba:93:e7:6e:35:38:82:a7:10:
e8:22:ad:03:39:e4:97:69:e2:63:2b:91:78:c0:42:4e:b4:c4:
a4:90:9f:15:29:19:f7:ae:34:57:9d:f3:14:0f:57:2b:a5:c2:
04:d4:3b:bc:43:07:a7:55:32:2a:01:f2:50:b6:58:9e:23:19:
79:5f:bb:52:32:82:21:ad:e6:da:65:98:1d:d5:2c:13:08:d0:
7b:95:5d:30:a2:47:78:d5:96:97:84:51:11:19:17:63:1d:c5:
1e:9d:1d:e6:f2:85:5b:7e:04:a8:79:ff:d3:eb:cf:b3:78:f5:
6f:4e:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:29 2025 by rpki-client