Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C646BDF0CC2211EFA6AB03A9762E951A.roa
File: C646BDF0CC2211EFA6AB03A9762E951A.roa (raw, json)
Hash identifier: dn0MUB7zP+PZbO24gr6+CQbfUmpBMgzMwg3N8x6HzbQ=
Subject key identifier: 0F:65:AE:7D:3A:FD:E5:5A:E5:9A:85:BD:75:64:9E:14:B5:04:9E:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C646BDF0CC2211EFA6AB03A9762E951A.roa
Signing time: Mon 06 Jan 2025 11:38:40 +0000
ROA not before: Mon 06 Jan 2025 11:38:36 +0000
ROA not after: Wed 15 Jan 2025 11:38:36 +0000
asID: 40065
IP address blocks: 45.199.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63673 (0xf8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:38:36 2025 GMT
Not After : Jan 15 11:38:36 2025 GMT
Subject: CN=677bc0c0-1675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:3b:f8:33:da:36:05:0b:96:d9:0c:49:f6:
84:72:5c:fe:54:5b:db:6f:43:5e:ff:3d:6a:a9:0c:
de:af:6a:c1:32:ba:50:37:2c:17:13:8f:d4:84:e3:
c5:c0:6d:d9:fb:b1:e0:9d:3d:fc:b2:fb:4b:5b:7b:
49:75:e8:e5:e2:fe:36:a4:4a:4b:a2:b1:18:b6:25:
53:4c:2d:ec:f6:11:71:08:1d:9c:98:e9:ed:43:cd:
66:5a:17:0b:62:1c:ef:63:74:7c:ad:17:33:40:01:
d2:bc:c9:fa:61:78:c0:98:e2:f7:e8:51:94:0e:f6:
fa:c3:b9:61:82:4f:94:1d:76:2a:10:0a:7a:73:3e:
4b:41:0e:e3:1f:a3:c5:12:f0:c1:61:1f:69:4d:50:
a2:26:82:06:2c:b4:b6:95:72:20:39:50:0b:55:b5:
80:ea:2d:ec:1a:c4:ad:aa:76:a0:d0:af:e3:51:c4:
50:21:ee:1f:77:60:ea:8f:b9:c5:a5:d2:8d:03:d4:
95:49:e5:45:59:8f:9b:54:fd:26:c5:ab:ad:db:39:
bd:9a:26:4d:7f:01:a0:ec:1d:b0:4a:ca:c0:91:a2:
30:ed:ff:16:96:1a:56:bf:e9:78:af:29:3e:84:57:
f3:0e:ef:41:21:15:39:36:16:97:96:15:59:44:ed:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:AE:7D:3A:FD:E5:5A:E5:9A:85:BD:75:64:9E:14:B5:04:9E:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C646BDF0CC2211EFA6AB03A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.154.0/24
Signature Algorithm: sha256WithRSAEncryption
19:15:a1:6e:15:50:a9:6c:37:08:56:38:f6:45:69:a9:22:09:
b4:1b:1a:26:2f:5d:50:ed:47:6c:62:ea:15:b1:ed:b0:fc:66:
96:10:06:6f:93:97:fd:15:54:ef:e3:3c:af:42:d1:6c:d0:38:
3f:07:c3:f3:59:2b:a0:53:c6:c3:6e:86:e2:83:42:e2:de:11:
59:28:fa:63:ee:66:73:c7:be:8a:24:ff:55:6a:42:f4:ac:7f:
42:c7:ed:fd:0f:8b:8b:b3:81:0a:b7:87:03:6c:f5:30:59:f9:
14:5d:69:9f:c5:a0:ad:60:08:78:97:2e:e2:4a:c4:97:3e:3d:
62:cd:dd:e6:96:40:ae:9f:5a:dc:49:02:a0:3b:23:ef:d9:ba:
f8:cc:d6:32:9e:26:42:4f:90:42:30:48:e7:cd:81:d1:54:3d:
0e:17:0f:f1:76:35:81:73:88:d6:c9:c8:2e:28:cc:36:fc:ae:
66:4f:f7:49:ba:2a:5a:e4:82:b0:fb:39:36:8b:b8:22:63:34:
9d:c6:07:57:0a:74:aa:af:19:5c:e5:b2:b2:d2:b4:c8:ce:38:
24:94:be:63:e5:dd:89:95:d7:7a:43:89:2e:f8:97:8f:2e:13:
3e:ea:c8:70:8a:e8:89:1c:56:54:1a:cb:10:eb:98:28:a1:e1:
c7:7c:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:12 2025 by rpki-client