Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED747B0BEB111EF889ADA5C762E951A.roa
File: CED747B0BEB111EF889ADA5C762E951A.roa (raw, json)
Hash identifier: gTfwWh7C1VWpezsLT0mWGx5C0BqaWsUnfGEYbXQ8qyI=
Subject key identifier: C6:06:EE:A7:9C:51:6D:E8:94:B2:71:E4:78:CB:60:51:89:C3:09:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E755
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED747B0BEB111EF889ADA5C762E951A.roa
Signing time: Fri 20 Dec 2024 09:07:16 +0000
ROA not before: Fri 20 Dec 2024 09:07:12 +0000
ROA not after: Sat 25 Jan 2025 09:07:12 +0000
asID: 6079
IP address blocks: 45.205.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59221 (0xe755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:07:12 2024 GMT
Not After : Jan 25 09:07:12 2025 GMT
Subject: CN=676533c4-11db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:6b:fa:20:40:a4:db:22:a6:f4:c3:7d:c4:
d8:b7:f6:1b:95:8d:be:c3:57:cf:a5:1d:75:56:18:
e5:b4:c4:97:a9:b8:b9:2e:8f:ad:99:91:0f:8e:d3:
c2:a5:11:75:72:f1:6c:b5:ce:2b:f1:34:ce:dd:0c:
c2:28:7a:db:a5:82:2d:59:b9:7d:28:d2:cb:77:d4:
7e:1e:1d:79:9e:08:dd:70:e9:18:b0:65:f0:3a:8c:
af:bc:ae:34:7a:8e:29:b4:3f:38:64:51:62:ac:a0:
a9:e2:29:ed:51:12:da:dc:cf:ec:22:20:4a:7b:35:
aa:27:10:0a:96:90:69:0a:7b:e4:a5:85:55:b0:d3:
a4:f6:8d:be:a5:13:74:c9:30:df:a6:df:7d:fa:de:
e0:47:54:86:2c:75:44:ea:29:14:36:22:dc:0d:11:
f9:1b:0f:b7:1d:7f:38:b4:9a:1c:55:6a:89:28:9d:
94:b1:df:4e:7f:bc:aa:4a:49:27:18:ec:ad:2c:45:
4e:8d:ce:3f:32:e1:64:9f:53:84:1e:0e:a7:ac:1b:
7f:de:11:a1:b4:67:83:3d:85:12:dc:11:8d:fa:5b:
2e:28:fa:fd:9d:32:84:f8:73:88:45:19:c1:d1:59:
62:75:c6:3e:a4:30:6e:34:43:cd:8d:6d:1b:2b:1e:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:EE:A7:9C:51:6D:E8:94:B2:71:E4:78:CB:60:51:89:C3:09:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED747B0BEB111EF889ADA5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.154.0/24
Signature Algorithm: sha256WithRSAEncryption
50:af:fd:00:a0:0a:d8:cd:69:8f:06:ee:d3:d4:fe:18:67:d6:
0e:3b:1e:27:de:ae:64:61:01:d8:74:d8:dd:91:7d:69:38:a3:
42:99:7e:49:5c:59:23:c5:d4:c2:6d:32:60:39:23:ed:55:52:
15:43:42:8c:b6:5e:48:dc:5f:91:88:28:31:b6:65:29:d7:0c:
6a:18:dd:01:f3:82:23:57:f2:e7:46:4a:a5:26:22:50:a7:ab:
1d:54:fb:8d:20:ce:52:ec:ce:21:b0:fb:c3:a5:16:1e:f7:f7:
73:85:8e:1f:57:87:e2:20:36:85:a3:78:cb:d9:e6:4c:64:4c:
03:7d:75:f6:30:b3:34:b8:a1:69:69:d1:76:76:c0:cf:69:98:
42:4b:b3:5d:1e:5b:3d:78:83:cf:57:4a:da:62:7d:43:29:d2:
ec:7b:e4:37:c7:6d:72:d7:1e:bd:f7:5d:a8:da:31:0f:09:8f:
55:db:80:68:fe:49:3c:01:5b:9d:61:0b:f9:2f:91:7b:e4:bc:
30:df:8b:04:56:b2:f7:f3:95:3a:e5:fb:37:3f:3e:8c:85:d4:
72:8d:53:e3:9a:bc:bd:8b:ee:40:f7:48:09:c3:6d:c7:68:c5:
c5:fc:2f:f8:ac:81:c5:f2:b2:63:dd:cb:36:d3:3d:82:aa:94:
01:8f:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:24 2025 by rpki-client