Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BFE7B0D30F11EFAF53A0AD762E951A.roa
File: D8BFE7B0D30F11EFAF53A0AD762E951A.roa (raw, json)
Hash identifier: 3wna3QAxYs73fZwGGoS8kCtR8pWSA+Q7fSHGhamSprI=
Subject key identifier: DB:E5:C3:3D:45:9B:81:CB:6E:19:06:65:A3:92:BE:64:BC:8A:34:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010845
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BFE7B0D30F11EFAF53A0AD762E951A.roa
Signing time: Wed 15 Jan 2025 07:10:49 +0000
ROA not before: Wed 15 Jan 2025 07:10:45 +0000
ROA not after: Mon 27 Jan 2025 07:10:45 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67653 (0x10845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:10:45 2025 GMT
Not After : Jan 27 07:10:45 2025 GMT
Subject: CN=67875f78-cca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:d0:b3:10:a6:6c:16:c8:0e:45:fa:41:e8:
63:7a:0c:6e:c4:c3:3a:0f:b9:2e:91:05:22:d0:5f:
90:bd:b8:a3:07:f6:91:7f:3a:43:04:03:7a:1b:47:
38:6f:7a:70:a9:97:e4:50:16:10:3a:1f:f4:69:39:
e3:29:77:98:5c:ef:6f:53:82:a1:4d:9b:8c:10:ba:
fd:5c:2f:e6:27:a4:ee:0b:1d:b5:d4:9d:ca:b5:18:
66:5b:41:5e:8d:b4:b8:f5:3a:83:ea:77:39:a2:91:
17:f4:58:28:f8:da:2a:76:f0:70:9c:49:65:84:1f:
ae:3c:27:1f:0d:a6:09:9a:49:18:41:68:9a:73:d3:
74:93:05:30:96:cb:96:e7:33:33:ba:e9:4b:08:66:
92:f8:33:11:a0:a5:d9:eb:75:c4:3c:19:00:9b:7f:
d0:d3:3b:ea:63:b3:cf:b9:e4:62:11:9f:9c:ec:72:
aa:da:49:fe:9c:83:07:5e:e4:84:d1:e5:92:1f:60:
c9:c3:48:12:c7:03:49:79:20:8c:7f:f2:1a:a7:76:
47:d1:94:76:0f:7f:82:d7:ce:ab:30:80:c2:10:11:
ce:a1:c0:3a:e6:5f:5c:d8:5f:cc:0d:46:a6:8f:5c:
41:d1:0b:5b:f0:2b:eb:f6:46:48:c1:eb:49:02:88:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:C3:3D:45:9B:81:CB:6E:19:06:65:A3:92:BE:64:BC:8A:34:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8BFE7B0D30F11EFAF53A0AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:4d:90:21:36:1b:1c:d0:df:c0:e5:92:49:d8:27:00:b9:b8:
e0:01:63:1b:2f:ab:19:31:c7:54:1d:34:ae:cd:0a:ea:a1:aa:
87:70:e4:89:7c:5e:f0:04:79:84:ff:52:32:ae:7d:3a:8a:25:
26:13:19:d0:3e:02:58:db:e4:e4:9d:f4:45:c5:77:0a:e1:63:
9a:1f:9b:73:24:24:9a:f2:aa:2a:fa:73:04:2a:5a:dd:9c:c5:
ba:13:e0:70:37:1d:4f:a0:6b:bd:e8:7e:a0:30:0e:35:b2:7f:
41:ba:16:4a:de:31:8a:ac:ff:2e:84:c2:1e:0d:fb:d4:cd:63:
2d:ff:58:d9:d4:33:b2:96:d6:3e:bc:a5:4c:c1:7d:25:dd:04:
a1:f7:b4:09:d4:bd:9f:7c:d4:6b:18:21:3c:e0:7a:25:aa:59:
0a:ac:3e:bd:ca:10:b0:74:0b:85:ba:98:5d:02:d7:a8:fa:7c:
bb:b5:9f:80:70:fb:32:e1:f5:9a:48:ee:c0:36:1f:d4:b7:bb:
83:b0:69:a4:d2:80:f9:0d:89:5b:de:af:da:6c:e2:07:db:7b:
ca:57:72:ed:e4:ca:33:e1:2f:0e:67:99:51:fc:37:98:bc:11:
15:5d:30:ba:e9:6f:18:90:94:c1:2f:3d:42:f8:cc:12:24:8b:
8e:47:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:16 2025 by rpki-client