Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79D5544CE5611EFAF997741762E951A.roa
File: B79D5544CE5611EFAF997741762E951A.roa (raw, json)
Hash identifier: jafXD1Dw5ve8tuVv4Mzq0gCi/ZS0I1SH7Nj+SAWirfM=
Subject key identifier: FF:BF:21:45:8F:EE:A1:1E:2D:80:06:7B:B5:72:84:C8:00:C4:A1:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79D5544CE5611EFAF997741762E951A.roa
Signing time: Thu 09 Jan 2025 06:55:32 +0000
ROA not before: Thu 09 Jan 2025 06:55:27 +0000
ROA not after: Wed 22 Jan 2025 06:55:27 +0000
asID: 5065
IP address blocks: 45.199.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66275 (0x102e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 06:55:27 2025 GMT
Not After : Jan 22 06:55:27 2025 GMT
Subject: CN=677f72e4-6bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:96:42:e5:73:d1:9f:16:03:ef:3d:b9:44:
1a:6a:55:b8:e5:fe:28:67:b4:fd:eb:91:59:5b:fe:
5d:1f:60:0c:85:49:db:bf:4b:6d:42:7f:36:24:2b:
fe:db:5f:f4:dc:b8:3b:f7:1a:b6:29:2c:a3:25:36:
e2:ba:d9:fb:04:d8:5c:aa:36:50:3d:4d:8e:f6:03:
12:2d:6c:72:55:69:76:35:41:1f:b7:45:c5:67:75:
e1:06:f1:62:16:f0:2d:ea:b9:df:c6:bd:5c:f1:1d:
14:d2:ab:fa:a1:de:d1:b9:6d:0b:6f:db:61:a4:67:
ab:97:02:45:82:59:76:35:4c:c1:5a:af:7e:e9:3b:
35:ee:55:c3:82:42:03:c6:44:a6:bb:de:18:61:4d:
b6:a7:df:33:55:76:6a:c2:c2:c0:5d:5c:8c:bc:40:
00:2f:58:44:21:ba:1f:c4:db:00:96:f1:4a:02:f8:
0e:b5:d7:1d:34:5f:17:e3:4c:38:d7:ae:db:a6:d5:
0e:e1:ff:ec:9f:1c:d9:8f:53:16:81:57:fb:f2:d4:
57:e5:23:2b:d6:99:6a:67:7c:39:e9:53:d8:c7:71:
71:1f:3f:97:4d:78:64:0d:16:13:ae:99:29:d5:df:
70:ec:7c:21:87:36:26:b6:31:51:d4:aa:8f:63:ea:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BF:21:45:8F:EE:A1:1E:2D:80:06:7B:B5:72:84:C8:00:C4:A1:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79D5544CE5611EFAF997741762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e5:cb:94:41:e9:ae:05:e4:07:cf:48:b0:7b:28:12:e4:65:
5a:16:9a:68:71:ac:2e:85:72:39:5a:02:fd:52:d5:49:06:39:
9a:67:c4:65:9d:3c:5b:14:d2:66:19:5e:2b:ba:37:25:77:ed:
1c:d8:9b:bc:31:6d:8e:6c:a5:1d:1d:e4:75:15:b6:a2:a0:2c:
e7:d9:f3:ee:19:64:ff:5c:d6:b6:1d:7d:e9:ab:43:6a:dc:00:
e3:45:22:f2:78:52:e8:ac:73:35:4e:e8:0f:2f:95:0e:80:ae:
2a:12:6a:20:41:70:fc:8d:d2:6f:92:67:35:76:50:15:b0:33:
70:b7:31:0b:c8:e5:dc:6a:ee:32:8c:ad:1b:89:de:8c:1b:f1:
bd:0c:9f:a1:71:21:94:32:7c:d2:d0:a6:12:74:7a:b5:ee:76:
dc:ae:83:4e:4b:ef:f4:1f:dd:a3:96:66:fd:57:f4:3b:f4:b2:
96:f7:a6:f3:8a:ea:c8:89:b3:3a:19:16:7a:ca:3c:01:42:4f:
5e:7b:5e:a5:23:2d:2c:ac:63:48:e6:03:4b:a6:73:cc:db:3e:
e7:91:02:7d:2c:18:34:5f:19:85:d4:07:7a:5c:8f:45:0e:5b:
86:c2:04:ac:4d:b3:4e:05:32:da:09:d8:b6:45:95:21:92:73:
78:eb:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:20 2025 by rpki-client