Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33D5518BD1011EF9640B39E762E951A.roa
File: C33D5518BD1011EF9640B39E762E951A.roa (raw, json)
Hash identifier: 4jWtJeIJ9XeUmuxDpcyzuQYSGN755f0dl+7gQfQdFMQ=
Subject key identifier: E8:F6:02:59:42:71:74:2C:72:3B:74:CF:6B:A8:3D:9A:F1:D9:4A:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E47E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33D5518BD1011EF9640B39E762E951A.roa
Signing time: Wed 18 Dec 2024 07:21:56 +0000
ROA not before: Wed 18 Dec 2024 07:21:53 +0000
ROA not after: Thu 23 Jan 2025 07:21:53 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58494 (0xe47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:21:53 2024 GMT
Not After : Jan 23 07:21:53 2025 GMT
Subject: CN=67627814-896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:1e:b0:c8:2a:68:ca:52:09:23:9b:a1:e0:
49:d4:bc:16:2d:24:65:5a:98:6c:81:fc:c3:c5:97:
3a:54:f1:1b:3f:50:ea:0a:b3:dd:3f:71:fc:59:07:
6b:ba:36:93:7d:3e:73:e1:db:15:1d:3e:3e:b7:b1:
8b:41:6f:9f:dd:77:67:0d:4d:1c:7f:1b:e2:f4:c8:
60:d7:d5:37:af:dd:57:2b:2c:2c:4c:9f:9d:3b:74:
dc:07:22:50:57:4f:b7:56:e7:09:6d:64:79:1e:78:
f2:67:77:bd:4c:f0:f3:e6:33:54:83:c2:8d:70:df:
0e:3e:f2:bc:a3:34:ac:b3:b2:af:66:42:ad:05:32:
74:8d:6c:f2:e2:f7:ff:16:1e:f8:4a:60:cf:7d:ee:
e1:dc:45:11:33:31:23:06:8c:d7:57:4f:23:cf:cc:
2b:be:48:3d:96:cd:a6:34:40:ee:22:1a:d3:c1:b0:
95:32:65:35:b4:b2:d5:df:97:01:c2:ba:0e:1d:a7:
86:54:bb:86:93:72:20:9a:04:2c:e9:48:3f:e9:c3:
5f:44:25:ad:2b:dc:94:45:c2:c5:67:bb:ef:2e:ef:
b2:eb:6a:19:86:b4:52:22:0b:33:aa:01:b7:32:db:
f1:1a:ba:fd:78:f3:74:c6:3e:67:10:07:bd:25:bd:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:02:59:42:71:74:2C:72:3B:74:CF:6B:A8:3D:9A:F1:D9:4A:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33D5518BD1011EF9640B39E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:19:55:13:9f:a2:1d:f5:98:9a:77:21:55:1b:44:7a:b8:dc:
2b:41:02:0e:7d:5d:40:a0:b6:ff:96:ae:50:8a:1e:0d:a6:1a:
e9:b5:30:d7:58:19:7b:b5:9d:fa:64:76:28:5f:83:94:9e:f1:
5e:d5:39:fe:77:94:fe:46:ba:91:47:a3:50:7e:1b:11:94:2d:
bd:50:d0:7f:fe:27:de:47:40:9d:3a:57:ab:58:6f:66:75:3a:
3e:e3:0f:98:f5:4f:80:33:17:7f:9e:3a:e4:ad:7f:7e:fb:3d:
ba:02:9f:d2:25:06:0a:b2:62:27:7e:71:29:99:ed:aa:b6:f5:
e1:60:41:ba:2a:6b:eb:58:7a:ee:e5:b5:a9:bd:68:f0:0d:0e:
44:cd:3f:b1:ef:87:78:71:44:64:c5:a5:ff:23:9a:6e:c4:95:
a7:df:8f:2d:24:34:fc:5e:e1:57:36:d3:9c:30:69:af:b6:28:
ac:3e:87:e4:fe:cf:e8:f3:84:6c:1b:23:d7:ee:a1:3d:00:8e:
98:04:e3:68:b4:40:af:0a:f7:99:df:34:bd:0a:9b:5f:2d:7e:
48:c5:0f:20:8d:f1:4e:3c:a1:22:f2:bd:ee:bc:0b:50:52:72:
ea:af:ba:0b:33:3c:a9:c4:a0:f3:d7:c1:bf:e7:2e:c5:53:9c:
d8:ea:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:05 2025 by rpki-client