Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75B08E8B92311EF9E3EBA72762E951A.roa
File: C75B08E8B92311EF9E3EBA72762E951A.roa (raw, json)
Hash identifier: xW4nFL22sRMBSmXohaQ9LftE7K4nXvbPU2gunh6Vhk0=
Subject key identifier: 95:B5:FA:4E:E7:23:D5:A2:02:3E:89:AC:B0:7B:25:C9:56:04:BE:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75B08E8B92311EF9E3EBA72762E951A.roa
Signing time: Fri 13 Dec 2024 07:27:59 +0000
ROA not before: Fri 13 Dec 2024 07:27:56 +0000
ROA not after: Sat 25 Jan 2025 07:27:56 +0000
asID: 48031
IP address blocks: 45.200.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58091 (0xe2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:27:56 2024 GMT
Not After : Jan 25 07:27:56 2025 GMT
Subject: CN=675be1ff-687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:1b:30:9c:eb:01:68:e9:c6:37:32:18:7d:
91:7c:b6:ed:4d:af:71:53:39:c1:53:7f:89:70:38:
bf:0a:62:a6:09:3d:41:01:85:23:74:58:dc:5e:3f:
7f:2f:cf:a0:f7:f7:20:eb:36:b4:24:2d:3d:ee:4a:
43:72:d9:ee:f5:e3:49:4c:ae:2c:4c:92:37:56:89:
68:dd:44:83:27:66:44:6c:04:69:2e:f1:28:25:6a:
7b:f0:78:42:c3:54:2e:27:e9:12:29:a5:dd:33:40:
b2:65:b2:72:ae:18:0d:a0:e6:d4:bd:87:9d:38:e6:
0e:1d:89:77:cb:a5:f1:23:d7:fb:4b:d2:59:ea:fb:
61:89:e5:89:cc:dd:35:8a:4c:fc:38:f3:2d:99:b8:
2f:70:1a:48:88:bd:90:d2:04:2f:b7:63:68:4e:70:
01:7f:44:bb:b3:1f:ef:fa:fc:ee:7f:0b:b7:e7:46:
1f:40:bb:6c:c3:c5:ca:a4:41:72:90:0f:18:83:67:
f6:58:4e:fb:7d:0b:82:f9:6f:61:6c:dc:64:e3:03:
72:7a:25:77:d3:00:e1:96:de:97:69:b6:f9:59:f1:
63:58:7f:2a:b4:0d:04:17:7a:e5:f9:4c:cb:a0:c9:
e1:19:47:a7:fb:e3:c5:83:04:44:e1:76:1d:5b:c1:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:FA:4E:E7:23:D5:A2:02:3E:89:AC:B0:7B:25:C9:56:04:BE:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C75B08E8B92311EF9E3EBA72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.182.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e3:27:b8:84:ce:9c:33:b7:c3:da:52:7f:d2:92:e7:d2:97:
f7:1a:76:8e:53:75:39:d7:43:b4:e7:29:ca:f7:20:51:43:cb:
c6:d9:3a:01:de:c1:21:de:06:62:a2:6d:a1:2f:1a:a1:bc:16:
9a:a5:62:d9:6e:50:3b:8b:61:8e:8a:28:24:59:b6:33:ae:72:
c4:a8:3d:d7:b4:f0:47:8c:ef:20:48:38:e2:bc:fc:76:22:d4:
25:0e:3e:f0:64:02:61:a4:56:0d:c5:fe:58:90:cf:d9:c7:02:
24:8f:e5:da:40:02:f5:32:0f:21:3c:a7:16:2e:ae:74:dc:b2:
9a:d8:fe:77:ec:a2:ec:33:05:42:a1:37:9d:22:21:39:24:70:
2f:03:e4:ec:72:70:38:41:22:2c:ac:94:1e:99:27:fa:f3:1d:
80:5e:8b:63:e7:35:fc:3c:b1:86:eb:4a:4a:d0:97:65:2b:4f:
b7:c4:70:e7:b3:99:c4:5b:9f:47:45:c4:36:c0:15:4c:ce:29:
c2:34:b9:66:4a:de:99:c1:a0:eb:de:a0:03:51:a8:58:db:70:
1e:1e:67:ef:d1:a9:32:a2:3e:96:4d:f8:d7:ea:5c:c3:8e:47:
7a:27:f5:c1:07:85:e9:57:11:4d:f2:33:69:28:cb:02:8e:d7:
6e:1a:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:08 2025 by rpki-client