Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A429ECE8111EFB4257950762E951A.roa
File: BE1A429ECE8111EFB4257950762E951A.roa (raw, json)
Hash identifier: 4aNobkUlFhjfMqmihsyKBvp6OhRPZWUGZIW9G64ilGE=
Subject key identifier: 6D:7A:CA:17:FE:3F:F9:81:1D:CA:37:22:0F:79:AF:29:42:C2:71:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A429ECE8111EFB4257950762E951A.roa
Signing time: Thu 09 Jan 2025 12:03:31 +0000
ROA not before: Thu 09 Jan 2025 12:03:27 +0000
ROA not after: Sat 01 Feb 2025 12:03:27 +0000
asID: 17561
IP address blocks: 45.203.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66475 (0x103ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:03:27 2025 GMT
Not After : Feb 1 12:03:27 2025 GMT
Subject: CN=677fbb13-2c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:34:92:75:c0:f3:df:c1:bb:8a:c1:00:55:
3d:ae:a5:9f:89:df:cd:aa:00:1d:d0:66:b4:a8:50:
f7:b5:92:4c:a7:b1:8b:cb:a2:fd:b8:76:7d:e3:7e:
eb:4b:e5:43:0d:24:fa:9d:8f:99:fa:25:4f:93:da:
ba:99:a1:c9:07:01:0c:33:1e:64:71:e0:8b:e7:83:
5e:9e:17:31:a4:5b:e7:36:52:30:74:41:0f:8e:03:
47:b7:2a:bf:d0:e6:2d:69:06:97:c3:0c:ef:6b:c2:
03:09:91:77:ff:84:66:47:70:d3:d9:60:06:b4:a4:
0b:01:5a:d6:d5:d5:8e:2d:d9:83:6e:5f:5e:73:47:
d2:43:a4:68:aa:5a:e5:d1:51:b8:35:f7:f3:af:de:
ef:26:ef:79:d6:e9:9e:52:77:cc:b7:11:64:16:0c:
e6:42:1a:c0:cb:1a:92:86:3d:33:3a:23:13:9f:42:
dd:fc:a3:c0:98:91:fd:b6:7d:55:4c:60:80:c8:03:
80:13:38:db:08:3f:ef:3d:93:8a:ba:09:05:a3:3d:
b7:36:fa:98:5b:7f:a9:0e:f2:7e:ef:35:d1:82:c0:
2d:6f:9d:5c:1d:50:2e:2c:33:dc:ec:f7:c7:fb:45:
4e:85:2f:11:0e:3b:33:ab:09:4b:20:76:fd:1c:44:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:CA:17:FE:3F:F9:81:1D:CA:37:22:0F:79:AF:29:42:C2:71:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1A429ECE8111EFB4257950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6e:41:64:48:7e:38:af:dd:86:84:96:8d:ab:c7:0b:df:06:
e1:9c:33:79:7b:fe:14:3e:9d:a1:1d:7b:f2:d6:84:5d:00:7e:
2e:5d:22:92:77:27:b6:97:ea:ea:bb:ed:6e:c0:33:25:a6:bb:
a6:8d:30:e0:65:0d:07:59:48:83:cf:d2:85:1c:21:c8:5a:73:
d4:eb:54:7d:fb:0d:d3:a9:79:38:ed:3e:75:ca:cf:db:cb:04:
ec:96:5b:69:0c:ea:b2:b0:ff:68:eb:2c:17:30:c7:0e:5f:9b:
93:46:4d:d4:44:d7:36:55:23:9e:aa:27:26:ed:43:95:fb:0b:
49:76:5e:6d:7e:a3:19:14:6f:48:e8:bb:0e:ff:7f:62:d3:b3:
91:99:04:26:78:02:67:b7:2e:d7:93:bd:78:49:c7:7c:9c:00:
df:b3:b5:ba:b5:ab:fa:d7:23:89:02:da:04:5c:dc:12:30:2e:
df:4f:83:75:96:14:2f:f1:92:a3:8b:67:2d:11:55:f9:43:79:
c8:1a:ce:f2:70:81:80:4a:a1:cc:03:6f:39:22:11:67:f5:7b:
6b:cf:e7:95:37:c1:e1:b8:8f:e9:49:84:7f:0d:d8:fd:d0:9b:
db:3b:ed:1a:d7:84:4a:46:aa:88:e2:3d:dd:47:b8:08:62:78:
32:30:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:12 2025 by rpki-client