Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B2661AD00711EFAF2B857F762E951A.roa
File: C2B2661AD00711EFAF2B857F762E951A.roa (raw, json)
Hash identifier: Qw41RsN3K4T0qPaKPe1bmHJOP9ElmfRy9xHuepKEeOA=
Subject key identifier: 24:73:87:F5:1E:E2:AC:5E:4D:C4:BA:D5:27:38:9E:77:9E:F1:C0:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B2661AD00711EFAF2B857F762E951A.roa
Signing time: Sat 11 Jan 2025 10:35:22 +0000
ROA not before: Sat 11 Jan 2025 10:35:18 +0000
ROA not after: Sat 25 Jan 2025 10:35:18 +0000
asID: 54801
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66992 (0x105b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:35:18 2025 GMT
Not After : Jan 25 10:35:18 2025 GMT
Subject: CN=6782496a-5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:f0:a2:e3:14:f1:08:e9:09:e0:20:44:67:
84:ba:20:43:69:95:c9:f9:a5:ab:7f:55:ee:14:df:
b7:d5:86:3f:8a:c4:ff:63:74:bf:da:cd:fa:12:d5:
4d:83:2c:7a:9b:7d:c5:04:b0:55:9b:1a:64:53:3c:
5d:e9:0b:31:f6:1a:57:b5:06:b5:9e:5b:12:cc:a2:
89:5e:b6:40:fa:10:be:cf:d4:00:b0:ee:f8:5f:24:
e8:8a:2a:4b:eb:c6:5b:20:55:51:03:63:08:b3:ed:
83:ad:e7:5a:d5:7c:ec:af:8a:37:5a:ab:f7:8f:fd:
c7:6a:de:69:26:a0:a4:af:97:a7:15:10:f6:cf:b2:
b3:ed:b7:42:42:6d:ca:78:af:04:aa:05:3a:15:5d:
1a:a8:6d:0c:14:64:29:e4:97:3d:32:4e:6b:3d:5b:
51:b2:25:55:31:cd:76:65:b7:db:a7:28:37:df:9d:
6e:55:9d:79:45:43:6e:0e:a5:cf:e6:fe:75:70:aa:
ac:21:e0:d3:a7:f7:77:35:9a:ea:e3:cd:4f:b7:da:
a5:92:5e:c9:bc:ed:62:1a:db:4a:17:4c:61:bf:38:
23:02:db:03:17:0d:b6:c2:e0:84:1a:00:6c:73:43:
dd:80:50:d1:73:1f:aa:25:47:30:e0:62:8c:4e:d2:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:87:F5:1E:E2:AC:5E:4D:C4:BA:D5:27:38:9E:77:9E:F1:C0:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B2661AD00711EFAF2B857F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
60:27:e7:18:44:5d:43:d3:6d:8d:93:53:a2:6b:9e:9a:27:0c:
12:ad:63:9d:d3:e3:82:96:0d:72:82:b0:27:b4:48:87:41:e3:
74:f5:3d:01:2a:96:ee:e6:72:b7:f0:3f:5d:1a:50:19:d4:51:
c7:24:49:f8:ff:86:a9:94:b1:19:be:66:56:ff:6b:73:dc:69:
ce:a8:43:f7:41:e0:44:9d:eb:d6:d1:03:ee:34:ff:48:c8:6f:
da:ac:5d:d4:02:ea:04:68:38:21:69:bf:c1:9f:c5:b6:df:58:
7f:39:57:ac:81:d6:07:30:f4:1d:0e:06:5e:98:40:a5:8a:2a:
92:40:2a:cb:5e:6b:0c:87:4d:49:53:e7:64:6e:e3:d8:ec:c0:
3b:5d:68:b8:88:3c:6c:7c:6a:c9:ce:df:59:22:25:a1:7d:37:
88:4b:67:52:b5:23:0b:19:91:d3:a2:08:15:c3:d5:22:db:ee:
4b:ad:9d:c9:1a:2d:1e:63:b5:5b:e6:9f:73:24:05:7b:79:4b:
c0:98:37:10:8e:b7:c6:30:44:aa:88:6c:72:fd:8a:ae:55:64:
d3:8e:46:e1:64:f8:4f:96:0c:b8:4b:c1:d3:fe:47:42:8f:49:
4a:61:90:f0:b3:e9:e0:b4:11:c4:91:ad:33:70:42:93:33:24:
6a:13:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:52 2025 by rpki-client