Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A11486CEFD11EF81102C67762E951A.roa
File: D8A11486CEFD11EF81102C67762E951A.roa (raw, json)
Hash identifier: jgRrNp1Z1mxQ5IkGMosPy3pVSTNzq7nn90SeoaadfW4=
Subject key identifier: 19:9D:CE:AF:89:E4:B8:DB:FC:22:2E:60:03:0D:5E:47:D0:C1:4A:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A11486CEFD11EF81102C67762E951A.roa
Signing time: Fri 10 Jan 2025 02:51:53 +0000
ROA not before: Fri 10 Jan 2025 02:51:49 +0000
ROA not after: Mon 27 Jan 2025 02:51:49 +0000
asID: 137547
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66749 (0x104bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:51:49 2025 GMT
Not After : Jan 27 02:51:49 2025 GMT
Subject: CN=67808b49-68c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:14:ad:1e:4a:83:ee:39:73:fa:26:ac:60:
13:ee:46:f6:ff:ff:86:c9:20:5a:fa:22:86:4f:e4:
67:40:e9:93:bd:d0:ed:cb:1f:e8:a1:fa:77:c8:58:
b8:68:81:58:92:e7:10:12:df:a3:30:82:65:b7:1e:
7f:82:46:2d:5d:28:21:5d:c5:0f:8a:91:e4:3b:75:
df:b4:ae:3d:86:d2:b8:0e:4f:91:64:55:0f:41:2f:
49:78:f9:44:f7:7e:cf:6e:7b:49:0c:f3:67:ad:2a:
fd:44:10:d2:32:86:37:43:9d:3a:b0:d6:e0:b6:f8:
8a:74:27:aa:8f:20:70:84:ab:59:14:90:12:e4:b7:
88:dd:34:99:c6:7d:c5:6b:08:62:ed:aa:f2:8f:4f:
92:90:d7:3c:2b:54:ae:30:65:ae:fa:07:75:84:9a:
db:23:bf:e4:69:33:ad:c3:5b:08:06:60:a4:0e:97:
fa:c3:67:b1:19:be:36:c2:9b:04:6f:e5:96:7b:94:
90:74:50:75:fd:3c:37:2e:28:5e:69:d3:38:75:e0:
50:f9:36:ea:15:31:28:36:f7:9b:a6:4d:e1:18:6a:
b6:87:72:19:9d:37:fb:9a:8d:72:14:ef:4c:d1:b7:
b3:62:12:b4:1b:b5:18:54:b2:c1:6e:5d:09:c3:34:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:CE:AF:89:E4:B8:DB:FC:22:2E:60:03:0D:5E:47:D0:C1:4A:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8A11486CEFD11EF81102C67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
51:f7:f6:b6:71:b4:d7:10:d3:79:93:03:76:a7:a1:31:e6:8b:
7f:d3:f8:5b:be:05:ff:d7:65:00:2b:34:05:9c:73:87:5b:7a:
da:be:5e:2f:ba:40:c0:ae:c6:bb:e1:90:71:2e:20:27:ba:ef:
f2:e3:8b:b2:33:42:c7:d6:bd:ea:59:8e:ae:f6:b2:3c:cf:0c:
db:83:e4:92:51:ca:a9:4d:e5:20:b1:56:91:d6:2e:da:1f:0a:
41:17:0d:7c:a5:a2:21:4f:bd:ab:5b:20:94:ca:f3:c7:3c:7a:
f0:46:3c:af:86:c9:9e:a8:bb:28:2a:c8:fd:6d:e1:bb:33:e0:
fc:b6:47:84:3c:bd:22:3c:9e:ec:6b:f2:72:82:f5:a2:e9:9e:
b7:2b:61:79:57:75:ee:e0:28:ae:85:0f:72:a0:15:69:7d:5b:
90:d3:a2:8e:74:46:4a:c4:8a:22:e9:78:02:66:11:13:b0:d1:
b0:4e:59:64:09:86:41:ef:c1:db:74:72:ee:8e:2f:67:76:db:
04:17:e5:48:e2:a4:1f:18:a3:d5:5e:52:66:aa:2f:da:86:24:
99:a6:46:d4:bb:c2:d7:0f:d2:f1:aa:3d:82:fb:5f:46:54:c1:
e3:36:b3:9e:2e:6a:a9:34:04:01:4f:17:3e:ea:60:9d:cb:9c:
6f:29:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:46 2025 by rpki-client