Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3814308B78B11EF9217106E762E951A.roa
File: B3814308B78B11EF9217106E762E951A.roa (raw, json)
Hash identifier: DLiOtIclJ3Z3LaOdATKirt/LvmKi9W/r0DRhJSpSE3s=
Subject key identifier: DD:57:B1:DA:19:D4:9E:C4:1A:C3:3E:E4:21:E3:90:E3:B8:3A:C5:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E28F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3814308B78B11EF9217106E762E951A.roa
Signing time: Wed 11 Dec 2024 06:46:51 +0000
ROA not before: Wed 11 Dec 2024 06:46:47 +0000
ROA not after: Thu 16 Jan 2025 06:46:47 +0000
asID: 6079
IP address blocks: 45.203.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57999 (0xe28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 11 06:46:47 2024 GMT
Not After : Jan 16 06:46:47 2025 GMT
Subject: CN=6759355b-35aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:9d:bb:b9:07:64:12:fa:da:42:23:5d:f0:
6a:bc:6c:5e:d1:33:c9:44:59:93:a8:ac:d1:cf:77:
9f:cb:b4:20:44:ad:40:df:3f:61:21:ce:23:1b:49:
50:38:00:91:78:cb:97:6c:8a:69:02:c1:77:68:08:
fd:cc:96:f5:d3:8e:be:a2:9e:db:d2:35:b9:6d:f7:
bb:b7:a1:14:8f:39:43:e2:af:0a:a3:4f:16:37:86:
47:37:74:08:d0:29:78:56:ef:c1:b0:4e:ba:20:f6:
62:d9:12:81:47:19:60:35:74:70:75:1f:d7:74:42:
9d:de:b8:3a:c2:e4:ce:71:0f:5f:f7:ef:e9:29:9c:
f2:2b:a0:ad:5c:e9:f8:2a:43:b2:7f:02:c7:17:d9:
e4:0f:7c:24:54:4e:ad:e2:a8:c1:5e:9e:68:99:b3:
ce:a4:cb:b3:60:c7:fb:30:20:d1:ec:25:b5:c1:85:
5c:59:25:11:00:10:4b:6a:bf:e2:f0:a4:c2:59:74:
db:15:21:00:b4:ed:d5:2f:28:40:e4:82:51:4e:52:
8b:ce:ac:cb:09:a8:4b:e9:22:f8:6f:ef:e2:4f:aa:
72:92:d4:c3:2a:9c:cd:e5:36:0c:d1:c3:3c:3d:22:
ee:78:f1:1a:df:75:06:8c:4f:39:0b:51:01:c8:0d:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:B1:DA:19:D4:9E:C4:1A:C3:3E:E4:21:E3:90:E3:B8:3A:C5:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3814308B78B11EF9217106E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:67:95:01:c6:62:6b:63:71:3c:a5:48:88:9b:d1:4c:23:28:
da:0f:8f:b4:4e:e8:93:e2:7d:7d:26:0b:d2:e3:ea:dc:d9:fc:
26:c4:06:65:26:08:90:50:4f:5f:f5:c5:c2:fb:7b:74:c6:53:
15:a0:c3:86:a8:61:bd:3f:7d:0f:f6:1d:80:23:5d:69:99:e1:
85:7c:07:30:c3:2f:cb:0a:28:58:1f:be:cc:a2:53:81:e7:05:
bb:c5:b6:3f:af:11:63:08:d0:40:ac:93:2f:c4:7b:37:f9:63:
da:ff:f0:0b:22:9a:b1:84:22:ec:7c:72:0b:90:b5:b1:08:5b:
e3:b3:04:90:07:20:84:d7:2b:7c:73:1e:f6:45:a0:75:60:ed:
ed:ac:5f:7e:0d:2e:15:22:50:9b:9d:52:af:5f:35:f0:a0:ea:
2b:44:72:19:5e:32:68:4f:65:bc:f7:9f:3b:f5:5c:1f:8e:d5:
0d:62:1d:6d:36:ae:6d:0f:12:21:d7:9f:fe:35:30:bf:74:3b:
57:2b:a5:56:76:59:6a:32:08:95:54:f0:a3:ca:e6:e3:aa:73:
3e:21:6a:4d:9a:d2:6c:87:ea:a8:7a:c7:1a:52:81:7b:22:90:
2a:95:c6:3b:a6:7e:08:67:a8:e1:01:eb:e0:db:83:47:00:6e:
fd:70:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:24 2025 by rpki-client