Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDA3F0AD25511EF9327268B762E951A.roa
File: AEDA3F0AD25511EF9327268B762E951A.roa (raw, json)
Hash identifier: w4XaSxcasJpWNcHAcZF9QMIZ3oDTAxJdysRPBMTCNVE=
Subject key identifier: DF:41:FD:0C:BC:93:7D:92:77:FD:50:53:C3:F2:A8:EB:CB:8B:61:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010718
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDA3F0AD25511EF9327268B762E951A.roa
Signing time: Tue 14 Jan 2025 08:58:12 +0000
ROA not before: Tue 14 Jan 2025 08:58:08 +0000
ROA not after: Wed 22 Jan 2025 08:58:08 +0000
asID: 40065
IP address blocks: 45.205.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67352 (0x10718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 08:58:08 2025 GMT
Not After : Jan 22 08:58:08 2025 GMT
Subject: CN=67862724-2654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:4e:68:17:2b:4e:a8:93:e5:b6:19:e0:f8:
d7:4f:cf:c1:48:65:af:c7:21:6e:38:20:f3:26:60:
8c:a2:e9:28:4a:f9:58:57:65:19:91:0e:df:e8:a6:
26:24:9e:80:81:e6:1f:df:61:f0:82:20:4a:97:67:
fb:c5:fc:15:aa:7e:7c:16:64:d5:15:17:d5:13:c9:
1a:37:20:d3:d5:78:92:42:d0:17:45:a1:75:c8:cb:
b6:e9:d8:ae:fd:f7:c7:b6:4d:68:2d:c6:b8:4c:07:
b4:5f:70:3f:6e:68:40:23:a3:84:4b:67:cf:13:75:
1f:67:ce:a1:2e:8e:db:42:bf:31:76:be:4b:be:83:
b6:a7:06:4d:76:34:2f:b2:6d:d0:bc:e4:d6:57:50:
3a:e5:e0:92:77:34:c7:20:2e:7b:3f:d8:ec:65:a2:
55:73:58:ff:6b:e9:fe:79:07:e9:71:a4:5b:d5:07:
55:6e:b4:d9:8f:24:33:57:c0:0b:5a:70:f2:2e:b1:
f0:ff:7c:8b:e7:b9:72:7a:47:01:b0:ef:9a:61:b0:
18:68:b4:61:11:d8:52:24:57:3e:23:d9:3a:8c:14:
de:a3:f8:ee:20:ae:ed:b6:ee:af:86:8d:9b:35:b1:
26:ef:cd:8d:29:77:74:11:b3:a8:3b:c4:76:08:58:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:FD:0C:BC:93:7D:92:77:FD:50:53:C3:F2:A8:EB:CB:8B:61:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDA3F0AD25511EF9327268B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.8.0/21
Signature Algorithm: sha256WithRSAEncryption
22:80:b7:a3:17:9d:7e:c1:59:b9:1c:bc:99:ea:0f:12:39:72:
93:e6:91:78:03:3e:34:c3:1c:c6:10:4f:f4:c0:68:76:ac:ce:
e0:fb:ed:50:7e:8e:35:e8:4c:05:ba:0f:6e:e0:04:c2:07:a4:
b3:a2:39:41:fb:4f:ac:a7:1d:a5:a3:46:48:7d:b2:68:95:52:
f9:3d:3d:bc:1d:62:5a:11:8d:f7:23:c6:81:2f:cf:e1:59:af:
3c:bc:ad:ad:08:cd:95:ed:32:53:df:03:66:a9:e8:88:8e:a8:
39:65:30:3d:1c:ed:be:59:13:9b:43:39:95:a1:63:85:c3:89:
c3:83:6b:59:bb:e6:2c:79:f1:53:04:a1:77:dc:bd:51:81:c9:
d0:96:0a:df:65:ab:40:17:18:5c:e0:1a:d9:41:95:cd:f1:0c:
d9:14:94:9d:bd:0e:1a:80:8c:85:81:e2:12:a0:07:f6:fd:99:
6d:10:89:5f:77:f5:8a:50:e8:42:a8:f3:2b:09:19:06:9a:4d:
9c:11:10:40:ef:45:06:e0:05:fc:68:cd:53:92:98:18:54:a4:
2c:c4:20:78:35:54:ff:c5:bf:c6:9e:b2:16:45:8c:bb:54:1b:
37:f3:64:21:77:f2:9b:b2:88:62:9e:14:40:c2:53:bd:1d:5d:
d1:10:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:53 2025 by rpki-client