Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61161C6CAC611EF9E463385762E951A.roa
File: C61161C6CAC611EF9E463385762E951A.roa (raw, json)
Hash identifier: Y+vCnEAEU6DCg1zWc9zQBq9zbYWvjeidCDDet1AIIkE=
Subject key identifier: 30:97:3D:48:20:12:0B:CB:02:31:0F:82:57:0D:7E:F1:0C:5D:CC:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F73C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61161C6CAC611EF9E463385762E951A.roa
Signing time: Sat 04 Jan 2025 18:07:35 +0000
ROA not before: Sun 05 Jan 2025 18:07:31 +0000
ROA not after: Fri 17 Jan 2025 18:07:31 +0000
asID: 39600
IP address blocks: 45.204.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63292 (0xf73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:07:31 2025 GMT
Not After : Jan 17 18:07:31 2025 GMT
Subject: CN=677978e7-e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:9d:07:15:b6:12:2e:47:25:48:be:6a:7d:
4a:fb:6c:38:8a:8d:3d:6a:c5:64:5e:d1:89:e5:cb:
32:4a:79:a2:42:52:0a:d3:c6:68:f8:86:a6:c9:9e:
d8:79:3d:b8:dc:99:22:70:41:8b:fe:a3:2b:81:7f:
cc:97:c3:16:88:10:e4:fb:4f:91:c2:44:dd:93:d1:
e6:df:1c:af:ac:7a:a0:f2:10:23:0d:51:ae:ba:26:
c4:d5:5f:e1:c5:e2:d3:cf:64:b3:52:96:11:07:48:
65:5b:7e:75:ab:47:33:94:78:db:f2:0e:f8:31:ba:
3a:c2:1c:00:26:cf:48:be:55:e5:d9:87:ad:b2:86:
ca:ae:ce:e8:e1:21:81:6e:ea:d9:bc:c9:1a:b7:13:
42:12:db:6c:a8:95:ab:67:33:f1:49:f9:ff:b6:8f:
2c:3a:f0:c7:7c:cb:40:34:ac:7e:64:57:47:55:45:
6d:8a:e5:0b:c5:69:29:ee:10:c5:27:43:64:af:ac:
5b:c5:2c:17:41:d1:6d:32:53:e8:25:2a:bc:56:fa:
93:70:f5:9d:ec:6e:3f:cd:16:1a:90:a4:fa:58:7f:
e3:7e:91:33:a9:1d:7e:b8:b1:27:aa:d8:0f:6e:28:
c0:7d:9c:2b:63:4a:f9:25:92:35:06:c2:29:01:6e:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:3D:48:20:12:0B:CB:02:31:0F:82:57:0D:7E:F1:0C:5D:CC:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61161C6CAC611EF9E463385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2a:2a:44:d7:26:ff:d1:34:89:3d:07:1d:e0:10:e6:f3:0d:
69:52:c6:29:e9:b3:27:3e:15:73:d5:ab:c4:e9:37:66:c6:dc:
92:75:97:7a:46:18:c2:ec:24:09:6d:2d:01:91:5f:cc:e8:93:
64:25:e0:20:55:ac:d5:bb:a3:68:ce:bb:9e:87:32:e7:e2:c4:
ba:5c:10:a2:e5:50:1c:10:2c:4e:64:31:7f:78:ff:12:5c:4a:
c5:7f:f6:71:87:a4:f3:14:ad:e9:7b:d5:99:06:6c:ca:c1:34:
a8:e8:43:7d:24:6a:98:a2:8f:86:64:07:66:40:02:e4:4b:39:
0c:5b:60:e8:93:ad:79:6b:dc:93:56:24:1d:45:8c:0e:d1:ad:
ff:e3:fb:a5:3f:b2:7f:af:c7:ef:2d:cc:a6:82:2f:fb:3f:ab:
1a:8a:88:51:2e:cf:8f:2b:01:62:c4:3c:c6:dd:20:eb:1c:05:
38:ea:f9:b0:4a:4f:52:5b:14:e5:f7:8e:f9:45:8c:da:bb:15:
8d:6c:a5:f9:c7:0c:d0:b9:ff:46:66:ed:84:30:e0:9a:0b:a3:
f6:b1:ef:ba:3f:04:6f:d7:78:f7:18:09:90:93:19:0a:a0:22:
2f:1c:17:10:91:42:a5:cf:26:aa:21:ca:e7:1a:4d:7c:ef:42:
9e:7e:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:24 2025 by rpki-client