Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C0982D02411EF9D5EA9B4762E951A.roa
File: B72C0982D02411EF9D5EA9B4762E951A.roa (raw, json)
Hash identifier: LFtZ7HKjzOHsBsgdlCDWWNZjed63yho9naGGx5F5bas=
Subject key identifier: 30:FC:DA:47:E2:C8:AE:21:CF:25:80:B1:D5:C2:8E:6C:B5:09:11:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010612
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C0982D02411EF9D5EA9B4762E951A.roa
Signing time: Sat 11 Jan 2025 14:02:38 +0000
ROA not before: Sat 11 Jan 2025 14:02:34 +0000
ROA not after: Sat 25 Jan 2025 14:02:34 +0000
asID: 139646
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67090 (0x10612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 14:02:34 2025 GMT
Not After : Jan 25 14:02:34 2025 GMT
Subject: CN=678279fe-219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:78:81:f4:2e:57:65:e1:1c:0a:5d:36:81:
6c:e5:7d:59:04:7b:9b:80:c5:bb:aa:04:3f:86:cf:
e6:60:1b:36:43:0f:b0:f9:9e:bf:41:b8:2e:84:22:
52:80:bc:13:d1:a0:c2:29:5e:c8:92:35:bf:ca:b8:
56:f0:f1:94:f7:17:bf:56:a7:27:4e:ed:20:74:1f:
57:05:53:65:7a:a3:46:3e:e3:ce:17:13:ca:0d:ce:
00:5c:10:f4:f0:ba:ec:3d:48:99:48:95:be:5f:7c:
bd:04:09:65:b2:97:e8:83:93:0e:aa:77:6c:53:a2:
cf:7c:a4:7e:18:d3:dd:07:87:ea:72:88:46:09:e3:
a1:46:85:38:a9:95:6c:a3:a1:f9:32:ab:0d:89:78:
6e:0d:63:90:73:17:64:fd:8f:11:85:22:c9:ca:ef:
e6:94:71:df:42:13:b4:58:b1:f3:68:c5:ce:25:aa:
b3:7e:d1:c4:8e:99:0f:44:68:db:41:72:76:c4:2f:
45:19:a1:28:82:55:c4:24:45:aa:77:b6:db:d3:19:
6f:18:f8:1a:70:62:8d:5b:72:63:38:0b:7b:5b:aa:
be:6d:ed:1c:be:83:56:58:a5:96:37:bc:4c:81:77:
b9:5d:b8:8e:b4:c9:17:d0:6c:93:a8:df:3a:0a:45:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:DA:47:E2:C8:AE:21:CF:25:80:B1:D5:C2:8E:6C:B5:09:11:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C0982D02411EF9D5EA9B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
90:15:26:97:8b:fd:4a:6c:41:e1:20:92:c5:88:9f:51:0c:2b:
98:de:ed:55:d7:0b:23:51:20:bb:ce:07:55:0e:b6:a6:3b:1d:
5d:91:c4:8b:de:12:e4:d1:7b:2f:d9:88:7c:be:87:15:0b:13:
d3:22:b3:e1:fb:08:21:82:5d:ea:e6:23:0e:06:de:20:1a:3e:
f4:ca:d9:a4:ab:0c:19:ab:2f:19:82:4c:79:90:27:ac:48:25:
e9:4d:4a:71:0a:4f:3b:62:b5:c0:cd:66:69:d7:56:60:65:49:
f8:50:dc:1b:60:2d:21:3f:f8:69:e5:f0:18:4b:ea:26:ac:e7:
e1:a8:d9:5e:49:bb:e7:de:fb:f7:ca:56:42:01:4b:12:83:db:
86:7c:5b:40:6d:77:76:a0:a0:ad:92:20:2b:c0:40:e3:b4:5c:
62:98:5c:74:15:44:dd:2a:e0:ba:9e:94:fa:4c:c0:9d:a9:1a:
36:ab:7d:51:57:e5:3b:8c:4f:93:58:14:9e:e2:07:5d:9e:68:
74:0b:99:cf:cd:20:41:67:68:af:51:93:12:5f:36:ed:39:43:
b8:81:99:e3:ae:60:ed:a0:d3:27:35:93:17:ea:ff:3b:03:91:
9e:32:15:11:1b:4d:f3:e5:e7:6d:8e:d7:f4:e9:41:07:c5:5b:
c0:68:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:40 2025 by rpki-client