Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9AAA37CD25811EFB452259E762E951A.roa
File: B9AAA37CD25811EFB452259E762E951A.roa (raw, json)
Hash identifier: RG0mdsOoZPoApcp3qn8z550v1EFosWZ4OK5vrelNZWc=
Subject key identifier: 89:E9:17:17:89:CD:E8:A7:15:AC:21:58:83:D5:87:C1:35:C0:83:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01071A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9AAA37CD25811EFB452259E762E951A.roa
Signing time: Tue 14 Jan 2025 09:19:59 +0000
ROA not before: Tue 14 Jan 2025 09:19:55 +0000
ROA not after: Sun 26 Jan 2025 09:19:55 +0000
asID: 215208
IP address blocks: 45.202.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67354 (0x1071a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 09:19:55 2025 GMT
Not After : Jan 26 09:19:55 2025 GMT
Subject: CN=67862c3e-17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:6a:1f:9b:c6:36:e5:cf:24:29:09:1e:ea:
e8:3d:d4:74:7a:51:18:21:d4:31:af:75:02:11:27:
ef:41:45:1a:09:f7:0e:af:54:23:5f:58:5f:91:d1:
94:7f:65:f3:e1:2b:56:70:e6:8c:cb:8b:48:2e:3e:
d1:48:7e:6d:08:3d:2a:e8:18:b1:e1:e6:5e:5b:cf:
c2:be:2f:28:7d:d8:4d:01:a7:0c:82:5c:48:2f:5f:
3d:6e:52:15:5f:43:d2:d5:d2:42:af:a8:57:7a:d7:
11:0c:e7:08:f3:2b:a2:74:d5:9d:ff:6e:3f:c7:9a:
a3:89:b1:20:a1:d7:ff:65:fa:00:8f:04:3f:85:43:
6c:f6:67:f1:40:d8:eb:4f:dc:55:22:a0:4b:3f:05:
79:08:da:40:05:60:a3:cf:f9:56:a6:f0:fe:2d:27:
e7:70:dc:4b:dc:f7:bc:ac:c8:60:f0:f7:0b:9e:cd:
02:b4:57:69:80:3d:c5:06:3a:ac:a0:99:22:84:72:
13:b1:22:02:ad:e3:7a:e8:29:f8:54:93:76:0d:69:
c2:2c:de:1c:44:b7:70:4f:f4:af:8c:1a:b4:c1:67:
38:d4:7c:35:2b:2c:dd:f0:20:5f:20:78:51:27:d4:
22:79:67:a3:f1:e3:f2:65:c1:82:a5:08:68:5e:c1:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:17:17:89:CD:E8:A7:15:AC:21:58:83:D5:87:C1:35:C0:83:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9AAA37CD25811EFB452259E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:74:34:4a:e5:97:af:c8:5d:8a:0e:1b:00:59:ed:1e:5c:eb:
34:e8:10:89:03:65:6b:94:3f:06:4e:ed:8c:09:cd:d2:25:96:
f4:5b:11:83:e5:15:a6:aa:c7:62:8a:a0:e3:35:9e:86:75:b3:
fe:a9:8d:05:ca:d1:2d:4d:c0:55:65:fe:bb:7a:29:2e:98:bc:
a3:54:19:18:56:0e:40:1d:23:69:cb:5d:d3:08:2d:ad:1b:57:
4b:11:fa:1b:28:94:db:dc:49:64:e3:1f:d1:cc:8f:e0:45:2b:
03:60:97:a6:41:1c:6c:45:2e:52:4a:13:d2:1f:27:3c:7b:5c:
c9:ca:e0:e0:5a:b1:d3:22:87:7a:e5:e1:a4:73:7d:3e:f5:60:
61:dc:68:38:d0:e0:c8:8d:d8:c6:13:c9:74:f7:94:8a:2a:39:
0a:11:23:c5:88:b2:c3:ec:7d:88:80:ca:54:cf:91:37:b8:6c:
93:61:2f:59:a6:30:50:1a:de:33:08:34:a0:64:ed:4c:f5:bc:
d0:47:fa:f8:1d:a4:ab:4d:64:1c:3d:8a:90:37:17:c6:ac:e3:
95:09:c1:bb:19:52:da:75:83:31:1a:51:af:3c:32:e4:bf:d0:
a9:7c:61:d4:57:b4:b7:13:30:f4:13:91:68:fe:61:43:81:b2:
28:1b:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:36 2025 by rpki-client