Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D8431ABEB011EF811DF257762E951A.roa
File: C3D8431ABEB011EF811DF257762E951A.roa (raw, json)
Hash identifier: 81h3qhahcyRMMoQuSSbBKD+QtD6sxVfLSACjlqxsF0I=
Subject key identifier: 9A:54:8A:F7:42:47:58:A4:D4:EF:66:66:0E:56:49:08:E9:4C:2E:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E749
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D8431ABEB011EF811DF257762E951A.roa
Signing time: Fri 20 Dec 2024 08:59:48 +0000
ROA not before: Fri 20 Dec 2024 08:59:44 +0000
ROA not after: Sat 25 Jan 2025 08:59:44 +0000
asID: 6079
IP address blocks: 45.203.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59209 (0xe749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 08:59:44 2024 GMT
Not After : Jan 25 08:59:44 2025 GMT
Subject: CN=67653204-2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:0a:ff:b3:99:26:70:2a:34:c4:5f:af:33:
15:be:fd:4c:07:e1:9d:bd:ee:22:71:56:79:85:ff:
eb:17:f1:2b:b8:e3:a3:18:1b:eb:e4:2b:07:9b:7a:
2a:24:74:1e:34:a0:67:3b:6f:2b:57:68:87:ca:98:
55:b1:fb:0a:31:d7:90:d0:9e:e5:71:83:ff:77:3e:
8b:ef:71:46:24:e5:56:a3:6e:d1:1f:65:56:e4:83:
96:1e:07:75:8e:2e:5e:88:bd:86:a0:4e:b5:c6:00:
f1:53:5b:af:a0:2d:a4:f5:29:78:9d:96:ae:f3:bc:
af:4d:99:a1:82:a7:ae:1d:24:73:99:ac:ff:1f:71:
dc:21:0f:d5:39:d0:9c:aa:9e:48:d9:3c:58:46:5b:
e7:47:cc:0c:16:c4:10:0a:b9:37:23:72:12:13:d6:
f2:ad:89:07:7a:0e:e7:0d:53:60:5f:75:78:28:9f:
cb:54:b1:8f:78:61:81:cc:c2:a4:e0:d5:ff:15:ad:
29:52:5f:9a:bd:e6:02:2d:99:7f:f1:8e:18:2d:70:
e0:f2:fb:e2:91:cd:b2:e9:9b:09:3c:a5:73:31:6e:
8b:e8:7d:41:78:04:e8:8e:5f:72:cf:90:3b:9f:de:
be:d5:3f:dc:62:de:3c:c9:54:6e:d2:8c:80:68:88:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:8A:F7:42:47:58:A4:D4:EF:66:66:0E:56:49:08:E9:4C:2E:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D8431ABEB011EF811DF257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.244.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1e:ed:7f:a2:75:41:cd:6f:06:d3:67:b2:ab:84:45:e6:2a:
bc:27:43:19:7f:af:6a:c8:90:e8:7a:b6:2a:84:6f:29:21:41:
51:83:71:16:a8:ab:41:0e:98:78:57:74:32:58:b7:ef:e3:c8:
8a:de:a9:7c:60:73:0f:bd:f5:39:aa:2e:7d:2e:32:7a:43:da:
92:30:35:96:2c:4a:13:70:24:5b:03:74:7f:90:cf:04:8d:b0:
fd:30:87:b4:c0:9c:5f:4e:37:0c:1d:b5:8d:b8:2c:22:8a:14:
6f:b4:be:19:0c:0d:24:0d:09:51:4c:4b:f4:9f:a0:44:ea:f0:
9a:10:b9:b7:e7:4f:4a:c4:03:c4:30:39:e9:fc:c5:12:70:3b:
22:b1:08:34:cb:ad:64:f4:a2:3a:16:1c:ca:a5:15:1c:20:0f:
02:86:bf:7d:54:cd:bd:20:83:4f:d0:33:85:4a:ed:08:d6:35:
d4:d2:be:14:3e:38:a4:ae:3b:06:a3:cf:4c:ec:61:ff:4f:4c:
12:36:d4:f4:70:24:0d:59:d2:f3:9b:05:bd:5f:43:d8:26:55:
c9:60:ce:25:8a:08:a6:8f:38:53:13:e8:fc:f3:08:62:60:86:
90:4d:68:fa:f9:5b:c2:33:6a:25:8e:2b:b7:d0:b7:09:46:2e:
3c:d9:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:05 2025 by rpki-client