Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4D02B76C6CE11EF9E64AC47762E951A.roa
File: D4D02B76C6CE11EF9E64AC47762E951A.roa (raw, json)
Hash identifier: oqrbUOGDieeLNYzeRjxm1mfxQbbNBxoB6t1pyopJ1v4=
Subject key identifier: 2F:07:C4:5C:72:55:9C:87:73:EF:1B:B2:E2:A2:D9:10:38:7D:96:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F285
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4D02B76C6CE11EF9E64AC47762E951A.roa
Signing time: Mon 30 Dec 2024 16:55:11 +0000
ROA not before: Mon 30 Dec 2024 16:55:07 +0000
ROA not after: Sun 02 Feb 2025 16:55:07 +0000
asID: 54600
IP address blocks: 45.202.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62085 (0xf285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:55:07 2024 GMT
Not After : Feb 2 16:55:07 2025 GMT
Subject: CN=6772d06f-df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:54:07:3e:82:c4:80:46:5b:be:a0:09:64:
a6:e9:b4:cd:04:11:64:6a:23:af:6a:93:37:57:14:
01:ea:3c:76:a5:11:ae:64:21:34:72:fc:db:86:d8:
a0:a8:bf:6e:0c:29:19:5f:ca:4f:92:69:4c:72:d6:
21:37:2d:7f:45:36:a0:0b:a6:64:b6:64:b8:e5:30:
66:92:60:ee:4d:84:3a:dd:6d:7b:8c:80:0d:67:92:
ec:c2:04:36:04:6b:73:8e:a3:9f:12:5b:9b:9a:68:
b6:a4:40:6c:25:e6:81:f9:2a:b3:0a:f7:2b:0b:13:
78:29:ef:e4:8c:8c:a8:33:ac:5a:56:71:8f:ea:b7:
78:e4:69:91:25:33:82:b3:08:20:af:de:f8:25:50:
80:a5:87:1e:5e:fd:79:25:53:5e:5c:67:c8:3c:06:
be:78:07:e3:54:b1:34:08:0d:8b:d6:8f:ef:2b:d2:
aa:8a:c9:9a:cc:10:4c:75:46:36:df:c8:b3:d3:2a:
c0:9f:92:04:72:9f:b1:c8:04:a1:3b:90:00:99:da:
11:b7:13:5f:4f:b7:d3:07:50:ae:1b:92:e5:d0:78:
c3:4d:03:e9:b8:14:20:d3:f7:b5:83:5f:a4:db:4f:
0f:59:0a:35:97:95:51:e1:df:eb:a6:e8:b6:d9:f6:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:C4:5C:72:55:9C:87:73:EF:1B:B2:E2:A2:D9:10:38:7D:96:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4D02B76C6CE11EF9E64AC47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.80.0/21
Signature Algorithm: sha256WithRSAEncryption
11:73:6a:bc:0e:c0:5d:58:d7:d6:4d:20:d6:7e:2c:82:e1:a4:
1a:a4:93:c8:c7:68:94:ac:10:52:a1:03:6b:08:18:7c:d9:14:
8e:77:a9:9a:1d:d6:d3:a1:47:e9:a2:c2:45:ed:6d:7b:67:89:
4d:39:39:4b:75:aa:30:28:49:b9:37:e8:36:99:f7:e6:0c:55:
3e:f4:59:6c:db:05:8f:8a:72:d2:38:65:d2:b8:5e:17:32:e8:
45:44:30:8f:e3:cc:91:08:50:74:cb:ad:70:b7:0d:51:b7:a9:
50:88:f0:64:2e:9e:ba:09:e9:a7:07:41:98:ef:72:6c:65:ed:
e0:06:47:99:ec:be:77:97:77:3c:4b:93:c7:a2:ec:b2:ed:bf:
c5:fa:fe:be:20:1c:cf:56:13:9c:63:c1:f1:9e:5b:bb:0e:2d:
3c:04:d1:29:10:84:d1:71:89:de:3c:4c:5e:2d:54:f5:07:33:
0d:b5:c4:9c:60:1e:2d:29:fa:32:cb:d3:b6:e2:ea:ab:ab:0f:
c7:6a:bd:66:59:0b:7c:8a:0e:34:68:76:f0:5f:77:f7:df:44:
8c:3b:24:d9:1f:13:d9:f8:ce:d5:df:41:39:f1:80:58:de:c5:
53:24:47:95:35:a3:3e:e2:d3:ea:e3:1f:e3:e5:4c:77:31:9d:
7e:61:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:25 2025 by rpki-client