Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8E3314CE6211EFACB4528B762E951A.roa
File: BC8E3314CE6211EFACB4528B762E951A.roa (raw, json)
Hash identifier: Hye2zUix1i3RpaX+zq4Vxb5WGdnTwX2/wh1Ltd9KDco=
Subject key identifier: A5:38:CF:61:BA:65:68:2A:30:22:00:A7:60:B7:41:1B:D3:46:F2:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010318
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8E3314CE6211EFACB4528B762E951A.roa
Signing time: Thu 09 Jan 2025 08:21:34 +0000
ROA not before: Thu 09 Jan 2025 08:21:30 +0000
ROA not after: Thu 16 Jan 2025 08:21:30 +0000
asID: 17561
IP address blocks: 45.204.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66328 (0x10318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 08:21:30 2025 GMT
Not After : Jan 16 08:21:30 2025 GMT
Subject: CN=677f870e-a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:f2:6c:82:ed:02:c7:01:20:4c:2c:14:e1:
b3:73:49:a9:56:18:c8:a4:cc:fd:67:3f:f5:2a:2c:
3d:79:a9:6f:ba:6e:2d:14:67:66:4c:ec:be:07:b1:
47:71:ae:22:44:b4:32:ad:01:f6:98:cf:72:48:98:
4d:8d:f8:38:8d:58:bc:ba:d5:1e:fa:c9:67:ca:c7:
da:41:6e:bc:0f:41:78:3d:61:e2:e8:65:3d:75:49:
43:aa:4c:d0:a5:cb:2c:0f:46:7d:a6:43:68:70:ae:
68:4a:a9:b4:36:04:70:0a:cf:95:51:16:cc:46:92:
cb:7e:12:d8:1f:31:08:49:90:75:4e:65:49:ff:41:
8e:08:c7:44:b9:cb:a5:e1:25:96:9d:13:d0:06:f7:
97:10:b5:f8:43:8d:36:6e:56:8a:44:16:3e:d1:ea:
f0:38:59:9d:a0:90:25:ee:8f:88:31:a2:30:87:a1:
90:49:54:43:34:c3:d8:2d:1a:04:21:85:af:c6:bd:
b5:52:6f:0e:d9:42:43:86:44:24:72:8e:b4:ab:06:
8a:a2:75:4a:8f:fe:c4:08:df:b3:fa:a4:73:0a:00:
43:ce:0c:8c:aa:28:79:d8:51:b4:b7:e6:86:03:36:
3e:d2:b0:a6:b5:42:7e:14:d9:e8:4d:73:db:e8:0b:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:CF:61:BA:65:68:2A:30:22:00:A7:60:B7:41:1B:D3:46:F2:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8E3314CE6211EFACB4528B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:60:c8:92:46:26:29:55:62:01:1c:16:20:af:cf:53:39:81:
d5:75:ec:92:c9:ce:18:71:c1:8d:2b:c5:c7:eb:2f:7a:fe:d2:
c1:0b:cb:fc:6b:b8:15:e2:74:4e:96:81:cf:4d:2a:b2:04:38:
dd:b8:1f:14:d5:4d:43:c0:68:5f:6f:50:f1:aa:a9:f9:07:26:
2c:3e:4f:67:0c:7b:39:13:d3:29:cf:a3:63:ae:c7:1b:2a:e8:
3d:d6:f3:09:7a:5c:e2:0f:d0:6d:0d:09:6a:94:44:85:a9:fc:
e9:16:b1:b0:70:2e:e6:66:3f:12:d8:ed:f2:56:c1:1c:a5:12:
65:74:52:80:14:88:56:49:d3:fe:40:10:8d:7a:ef:f7:bb:53:
bc:eb:51:c6:18:0f:05:b4:0b:14:34:9d:45:b3:38:1a:d9:70:
c1:39:00:96:8b:4a:98:46:98:02:cf:d0:18:49:34:c2:dd:36:
cd:34:83:f0:6b:85:7d:68:39:cd:47:fd:b1:8e:2f:57:19:de:
b6:73:58:21:3d:32:8f:43:ec:92:25:e6:19:77:ae:e8:8d:21:
b8:0a:6c:d7:88:b0:21:b3:34:b9:ad:f9:5a:bf:f7:17:01:3c:
bf:b6:0b:d9:76:21:73:b3:f1:2c:53:73:4a:13:c7:80:c4:cb:
6c:c9:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:42 2025 by rpki-client