Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEC0C94C46E11EFB94613B6762E951A.roa
File: ADEC0C94C46E11EFB94613B6762E951A.roa (raw, json)
Hash identifier: UsprG/l9O3PZzTZiiZIDdgakKClasbAb+w0PXKztR4s=
Subject key identifier: FF:B6:6A:95:1D:CD:E6:E7:98:89:AE:0C:B7:15:A3:EC:09:58:CF:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F0AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEC0C94C46E11EFB94613B6762E951A.roa
Signing time: Fri 27 Dec 2024 16:21:52 +0000
ROA not before: Fri 27 Dec 2024 16:21:48 +0000
ROA not after: Tue 21 Jan 2025 16:21:48 +0000
asID: 46573
IP address blocks: 45.203.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61612 (0xf0ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 16:21:48 2024 GMT
Not After : Jan 21 16:21:48 2025 GMT
Subject: CN=676ed41f-bfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:b3:62:30:37:96:b7:75:25:d3:a0:2d:0f:
ef:40:e3:6b:99:7d:cf:cf:12:48:b8:2d:51:1f:db:
cf:01:88:03:05:91:15:7f:4b:4d:fb:9e:12:27:ca:
8c:7f:e7:07:f6:bb:4d:65:d2:76:0c:36:f4:6d:88:
18:b9:6f:32:cf:5f:ec:93:68:cc:13:90:58:59:30:
c8:a3:35:fe:75:a2:99:be:9e:f9:71:d7:5a:b9:12:
73:7d:bc:25:d1:1f:7a:52:d4:01:46:ab:84:fb:93:
13:64:c4:f3:14:2b:62:39:08:c4:9a:b3:23:03:93:
df:4d:7b:60:59:c2:a9:55:c6:48:9d:11:8f:37:47:
60:d7:9f:ad:99:3a:36:8a:a9:d3:c2:4f:8b:36:ff:
d2:1a:69:3c:14:f6:fc:18:78:a9:f2:40:68:cf:39:
f2:08:e6:66:20:9f:3d:d2:3f:75:23:59:0e:b6:1b:
8f:8b:a0:fa:98:ba:dc:a2:89:06:41:8f:b1:94:1f:
ef:e8:58:5f:af:ac:5d:3b:e7:80:35:12:f8:56:1d:
df:b3:32:28:f0:c6:f1:b9:c4:c4:d1:44:09:57:fe:
a3:4b:e9:8d:f0:e9:e9:c3:ba:e5:62:c2:a9:92:d4:
22:f3:ea:da:a7:ec:0a:4d:5d:e1:3c:b2:dc:83:be:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B6:6A:95:1D:CD:E6:E7:98:89:AE:0C:B7:15:A3:EC:09:58:CF:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEC0C94C46E11EFB94613B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:05:21:0c:58:6d:87:5a:6a:bd:24:f3:b5:90:69:94:63:36:
57:0e:79:8f:a2:d7:8b:37:02:ee:d9:8d:9f:7b:c8:f8:7d:c6:
6f:0b:e2:eb:1e:74:35:8b:5e:2a:94:e6:d8:83:5f:16:f9:74:
50:a7:64:b4:57:e7:8d:c6:eb:ac:e7:0b:4b:2d:0a:f2:f0:45:
b9:11:0a:22:9e:2c:53:72:d1:36:25:80:f3:2c:09:80:1e:47:
92:ab:e3:f6:0d:5a:2e:24:66:c6:8e:96:56:a8:52:d5:b8:ae:
5e:fc:b0:6a:97:6a:b8:3a:e9:f0:ea:67:df:68:68:8c:2f:3f:
4e:51:0c:9f:91:58:55:96:b6:91:eb:e7:49:93:29:5e:37:2e:
d7:0b:4a:42:de:62:c6:e9:3d:5c:b6:6b:60:30:76:cc:15:62:
94:95:93:fa:cf:14:17:dd:e7:29:e6:34:98:bd:44:b7:a7:43:
87:8e:1e:5f:fc:34:01:a0:ed:a6:4f:97:cf:ad:f7:55:d7:99:
4c:a2:e9:d5:8a:66:1f:16:a2:20:19:7d:8f:68:1c:01:d2:b4:
1a:cf:d3:56:45:57:1f:ba:da:94:94:66:c8:5c:28:c6:af:91:
3d:f0:25:85:dd:05:f4:fb:fb:19:99:49:c9:2d:e9:f1:bd:dd:
1d:2d:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:15 2025 by rpki-client