Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE47F22CCE8411EF96CEB763762E951A.roa
File: BE47F22CCE8411EF96CEB763762E951A.roa (raw, json)
Hash identifier: mlvTMsmWYQaurdI66iejvFwrz8gr14oPnFibzHPJkik=
Subject key identifier: 2B:CB:A1:6E:DD:CF:37:58:C4:CB:47:A4:5D:A5:88:1B:AE:AD:10:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE47F22CCE8411EF96CEB763762E951A.roa
Signing time: Thu 09 Jan 2025 12:24:59 +0000
ROA not before: Thu 09 Jan 2025 12:24:56 +0000
ROA not after: Sat 01 Feb 2025 12:24:56 +0000
asID: 17561
IP address blocks: 45.203.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66498 (0x103c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:24:56 2025 GMT
Not After : Feb 1 12:24:56 2025 GMT
Subject: CN=677fc01b-aed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:70:47:6a:fc:56:1f:b7:c7:c3:c1:0a:e8:
f5:f4:e9:2b:bf:be:51:72:5c:6a:83:3a:ae:1e:7e:
e1:1a:f8:9e:ff:18:78:95:87:da:bb:fd:fd:3d:34:
c1:d4:e3:cd:e3:3d:26:7f:34:9d:2e:a9:1f:80:03:
e7:12:2d:fe:27:e8:94:6d:f8:24:6d:39:4b:b8:95:
d7:d0:ab:70:fe:60:3b:13:c5:1d:0e:3a:9c:88:22:
10:73:ac:60:4c:4a:8d:ef:cf:3a:fc:15:5c:47:41:
a2:a3:54:5f:3e:5a:b2:43:4e:e4:80:a3:c1:fc:23:
c9:fc:a7:9b:fd:4f:f2:81:96:d6:b5:67:7b:6b:eb:
39:7d:db:62:14:ec:c3:94:e8:93:47:7d:fa:87:82:
65:ed:e3:eb:f3:ae:47:0f:71:75:70:93:ed:6e:c1:
29:80:00:71:3e:37:8a:31:4c:bc:d7:9a:c6:50:9f:
7a:da:9e:c4:a0:f9:09:a2:9e:aa:8f:2a:41:51:2f:
c1:ea:bb:36:ea:ab:e2:b0:cf:60:cd:94:6d:12:6b:
1b:28:b7:6a:59:b9:a2:63:28:56:ac:ef:de:eb:1a:
40:aa:5a:1a:ad:d1:d0:52:44:f0:db:1b:df:96:b9:
3a:86:65:bf:29:d0:ee:19:e2:3e:6f:ae:d6:f5:87:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:A1:6E:DD:CF:37:58:C4:CB:47:A4:5D:A5:88:1B:AE:AD:10:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE47F22CCE8411EF96CEB763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fe:77:cb:7d:d8:38:82:6e:ce:43:29:3e:33:2b:53:9e:93:
20:59:7e:f6:e1:b6:b4:25:fa:99:40:cf:c1:b3:81:6b:de:03:
58:ec:e4:84:8d:86:99:c8:90:bc:a4:c6:0c:9b:6a:50:95:bf:
dd:61:6c:d4:8c:58:ba:b3:4e:ed:ce:98:6c:dc:d6:cf:52:d1:
87:44:2d:06:42:e1:4c:6d:33:8c:d0:6c:13:08:09:65:90:86:
84:4b:b6:82:5e:8d:90:05:3b:eb:da:73:7d:aa:16:2a:c0:40:
57:39:cc:58:56:a0:7c:a8:8c:f7:e4:a9:2b:49:7d:09:e3:91:
65:25:1d:36:b0:07:66:3d:5f:48:7d:7d:d6:8c:c3:31:c1:54:
de:2b:3e:0d:ba:b8:00:f5:9d:4d:5a:fb:1a:9b:56:18:49:24:
91:11:dc:9b:98:c7:2b:7b:21:ae:db:a1:0c:75:fb:31:0d:ce:
3b:b9:9f:a4:a6:04:82:87:9c:3e:6d:f4:58:13:5e:d7:2d:df:
26:48:e1:35:2f:8a:b5:cc:b9:b5:a9:be:24:79:2e:c9:82:f5:
09:0a:a9:75:b7:31:d8:1a:f8:a4:d2:2b:68:8e:b6:c2:02:75:
bd:54:85:d7:db:8a:cf:18:9d:17:ab:64:85:b0:bf:ec:a7:d1:
16:8f:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:20 2025 by rpki-client