Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0224ED2B92911EFA1775197762E951A.roa
File: C0224ED2B92911EFA1775197762E951A.roa (raw, json)
Hash identifier: +qb4+NKLWqhiZpX0e7DhNFEGBa+xJ3roEvteON9raOE=
Subject key identifier: 90:9E:97:6F:E3:0A:F8:4B:48:BF:2F:C9:72:32:45:9E:95:A8:B9:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E335
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0224ED2B92911EFA1775197762E951A.roa
Signing time: Fri 13 Dec 2024 08:10:44 +0000
ROA not before: Fri 13 Dec 2024 08:10:40 +0000
ROA not after: Sat 25 Jan 2025 08:10:40 +0000
asID: 202656
IP address blocks: 45.200.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58165 (0xe335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 08:10:40 2024 GMT
Not After : Jan 25 08:10:40 2025 GMT
Subject: CN=675bec04-05ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:a7:d7:db:68:fc:bd:4d:32:bf:31:c6:4d:
cc:bf:9e:4c:0e:60:5f:a9:7f:3d:60:32:79:ad:64:
a3:94:72:60:58:3e:4d:1e:1e:4c:81:a2:07:7c:cd:
a5:cf:50:80:9c:c5:dc:6c:4f:13:e6:cf:af:b5:a3:
60:84:7f:12:f3:ed:30:8a:1c:0a:27:4d:d0:8f:bf:
0f:0c:d6:3d:6b:12:cc:88:f5:27:11:35:3d:ad:c6:
06:e1:de:cd:b1:89:4c:6d:06:bb:4c:fd:47:90:52:
f2:6d:f4:ab:c0:79:ef:d3:4e:16:3d:c4:09:cc:1a:
9d:de:f2:3f:17:ae:ea:29:61:e8:82:f8:f5:ca:93:
1d:95:89:75:e8:be:f1:b3:77:dc:3e:f7:8d:1d:dc:
d7:21:ce:55:ef:c8:53:60:5a:fd:5c:4d:ab:3f:ef:
2b:ee:37:46:b1:49:4f:61:57:a9:69:3d:ed:b2:da:
05:d1:4f:37:f6:24:1e:46:59:cc:94:e6:bc:1a:41:
14:b4:83:de:69:2b:df:bf:a7:fe:67:03:15:1d:9c:
a5:ad:76:2a:8c:db:a9:a9:4f:f8:e4:92:ee:61:c3:
0b:2a:a4:90:7f:e0:3a:e9:cb:73:0e:70:0b:e2:bd:
57:4e:53:c8:96:2c:ec:07:a8:ca:c8:f6:b3:00:da:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:97:6F:E3:0A:F8:4B:48:BF:2F:C9:72:32:45:9E:95:A8:B9:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0224ED2B92911EFA1775197762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f8:2e:c2:a1:3e:cb:2a:10:cc:2b:63:46:d5:bc:5e:82:02:
b9:de:3e:1f:29:ba:6c:b5:bb:a3:1f:ca:84:dd:4c:0a:60:f0:
e9:0d:b6:62:70:1a:2b:38:27:60:88:7f:0b:d0:b9:61:4a:98:
56:70:2c:dd:8b:34:97:d0:d8:cd:e8:7e:67:2e:fa:8c:d4:cf:
09:fe:04:3c:fe:bb:71:cf:b1:40:61:18:1e:b4:b6:40:23:27:
8a:35:bd:cc:e9:a9:c4:5b:aa:16:7b:a5:2e:14:d5:39:3c:58:
6a:4d:25:06:7b:68:1c:52:7e:a4:0b:e9:81:99:89:f7:ab:08:
88:ac:c0:30:6d:30:08:ac:89:05:9d:2a:09:e2:d4:2d:e9:8d:
b0:f8:f5:34:7a:c6:56:02:3f:e5:e9:49:f3:66:94:96:5d:d1:
1e:12:d8:96:06:52:b1:30:8d:6a:5a:3d:dd:52:92:3b:cf:f9:
2a:c9:a3:ee:65:3e:43:ce:cf:91:f5:6d:d8:ba:f9:50:d4:a5:
7b:a1:85:be:6a:a6:1b:f7:a6:0c:44:d4:41:8e:e9:df:0d:92:
b8:04:cd:2b:00:1e:26:58:28:5b:1b:53:9f:0c:9a:7a:7a:87:
c1:35:30:80:42:6a:a0:29:f5:ff:21:1a:94:42:fe:a4:11:9b:
4f:c8:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:45 2025 by rpki-client