Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FB97B2CE8511EF99CAAE68762E951A.roa
File: C9FB97B2CE8511EF99CAAE68762E951A.roa (raw, json)
Hash identifier: YsDCJ+RxsmeGLRvXelChZ+SgYRArz8nLfguQiu72aD4=
Subject key identifier: F0:9C:E8:DE:4D:17:F2:47:1D:72:AA:A5:C7:E3:5E:8B:E8:36:D3:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0103CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FB97B2CE8511EF99CAAE68762E951A.roa
Signing time: Thu 09 Jan 2025 12:32:29 +0000
ROA not before: Thu 09 Jan 2025 12:32:25 +0000
ROA not after: Sat 01 Feb 2025 12:32:25 +0000
asID: 17561
IP address blocks: 45.203.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66506 (0x103ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 12:32:25 2025 GMT
Not After : Feb 1 12:32:25 2025 GMT
Subject: CN=677fc1dd-3b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:42:fa:30:37:d5:89:36:63:98:65:27:9b:
e7:8d:79:92:4b:22:d3:20:61:8a:13:62:1e:26:6b:
23:b2:75:31:bf:ec:a0:5b:32:1e:bd:ea:64:7e:82:
bc:c9:eb:bb:04:df:9d:76:39:3c:a1:9a:6c:bf:f7:
19:88:fc:94:2a:da:67:1d:d3:11:16:60:eb:51:4e:
6e:f8:2c:cb:a9:5d:a3:37:3e:72:af:d3:90:e3:19:
87:43:6e:e0:8b:85:8b:6e:08:5f:24:fa:74:1c:77:
96:08:b3:ee:96:51:35:cc:ec:3b:50:eb:b6:97:1c:
89:98:56:1c:eb:c0:c2:9b:38:9e:81:5f:bb:c3:a4:
2b:ca:0c:14:f5:4f:ea:d9:ca:fe:25:2a:1f:14:34:
a4:15:8d:65:5c:86:44:83:4b:7e:0f:78:97:dd:c9:
53:cb:1a:a8:d2:d9:21:c1:4e:f1:eb:c7:0d:f7:f1:
03:02:d8:b5:03:44:63:92:61:8a:37:d4:bf:4e:df:
1a:e7:84:64:00:7e:01:11:23:71:27:c0:78:4b:d5:
6b:bd:a0:24:df:39:a5:39:4e:e7:68:e8:1f:ef:3f:
1a:c2:bd:47:6d:71:d9:ac:f2:9c:7b:01:d2:4c:69:
3d:17:e8:9d:66:3a:75:fc:3f:69:21:8f:ec:60:63:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:E8:DE:4D:17:F2:47:1D:72:AA:A5:C7:E3:5E:8B:E8:36:D3:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FB97B2CE8511EF99CAAE68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ef:dc:54:7b:e7:ee:3f:48:d2:7d:fe:c1:11:6d:39:1f:6c:
92:e0:c2:bb:bd:bf:d9:08:f9:8f:90:c0:d6:59:00:36:d0:2c:
61:f2:9b:be:a1:c9:02:c5:d6:35:5c:49:fd:53:7a:11:cd:fa:
c8:d1:08:b5:5d:73:9c:60:1c:34:80:66:5d:89:2b:15:3d:68:
47:b6:8a:e5:07:46:3e:d0:09:b6:dd:e3:44:2d:f7:24:e2:4e:
22:c7:0f:69:b4:5d:60:c2:e0:50:7a:32:de:6e:ad:30:6e:a8:
72:a8:36:1c:82:84:9e:72:9a:32:fa:81:7e:68:b9:10:58:56:
61:05:64:4b:93:bf:37:f2:78:aa:6f:4e:f1:75:d4:3b:d0:ea:
a0:9c:b6:f4:44:50:cb:27:9c:71:9a:f6:b8:78:1e:72:62:e1:
d7:69:9f:b7:68:45:20:5a:da:48:d4:d0:2b:6f:69:5a:9d:e0:
e6:db:bb:64:f1:ba:fc:d3:3f:30:99:88:a1:fe:17:cd:9d:41:
57:be:a1:fa:a7:e3:07:0f:7c:bd:aa:f8:5f:be:6c:9b:a9:11:
38:a2:16:78:db:19:9b:6f:c4:ba:16:d0:6e:c7:48:87:65:a7:
e0:73:2f:dc:a2:3e:57:97:69:c3:24:00:c8:ec:bf:23:6d:48:
9f:f2:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:09 2025 by rpki-client