Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E054D55AD00611EF85262279762E951A.roa
File: E054D55AD00611EF85262279762E951A.roa (raw, json)
Hash identifier: 2J30vl4VvjqzQV3NgOZwkqpk/F8Wp3EWGVJkXShP3U4=
Subject key identifier: 0B:FA:2A:B7:29:A0:4A:B4:21:39:F9:F7:C0:D3:F0:C2:BF:45:42:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0105AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E054D55AD00611EF85262279762E951A.roa
Signing time: Sat 11 Jan 2025 10:29:02 +0000
ROA not before: Sat 11 Jan 2025 10:28:59 +0000
ROA not after: Sat 25 Jan 2025 10:28:59 +0000
asID: 54801
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66986 (0x105aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 10:28:59 2025 GMT
Not After : Jan 25 10:28:59 2025 GMT
Subject: CN=678247ee-07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:d5:0a:34:82:44:f6:76:36:1e:23:97:e3:
8a:3a:83:4a:3b:b1:27:aa:31:74:75:d5:a5:bc:5d:
ed:9b:be:96:dc:f9:8e:f4:f2:66:84:f0:2e:ab:8f:
e0:80:93:61:10:49:31:7c:f1:86:d3:fc:b8:cb:b6:
15:a4:99:5a:4f:a6:45:1f:9f:9f:fb:ea:83:1e:30:
b3:75:4a:d7:c8:63:78:df:3c:dc:74:4a:52:23:58:
84:9e:16:5a:d0:8a:64:ab:5d:77:64:63:7e:27:a5:
d1:70:2f:8a:f2:fe:51:85:7f:4a:a2:4d:0a:b8:12:
e2:58:dd:51:cd:d5:25:89:6b:95:cd:29:82:ce:a9:
46:57:29:52:f7:e1:bc:10:20:06:06:d6:2a:ff:0d:
a4:3b:a2:b0:35:75:84:9f:e7:c0:64:9e:e4:50:2c:
c5:c9:b0:41:1d:6e:86:44:fa:71:62:08:c0:1a:3f:
8b:bd:53:e0:0b:d8:9c:26:ea:08:60:03:a6:1c:9c:
75:ba:9f:9a:c6:4c:c2:e9:20:94:ae:c1:d8:16:c8:
e7:60:36:88:dd:f0:b7:71:3b:18:17:ac:6c:7d:8f:
bb:05:e6:9b:38:e3:9d:72:42:a5:b2:62:d3:40:f1:
39:15:b8:72:7f:91:b4:36:de:be:32:7d:63:dd:7b:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:2A:B7:29:A0:4A:B4:21:39:F9:F7:C0:D3:F0:C2:BF:45:42:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E054D55AD00611EF85262279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:23:5b:b3:b2:ff:16:70:d0:82:c6:20:0f:8f:90:d8:1c:ad:
2f:bf:8d:dd:2c:13:11:4e:c7:d6:b3:b1:17:44:2b:53:9d:c7:
19:c4:94:75:bb:63:31:f3:4f:9e:25:3e:07:5b:e6:7f:e8:13:
2e:dd:bf:de:fc:39:e5:78:33:2f:6c:ec:ba:fb:d2:2f:94:c0:
38:0a:6f:61:fd:10:f8:c5:ba:88:62:67:d9:5b:6a:7d:c2:63:
b0:c5:dc:75:8d:70:4f:54:ac:1b:c5:3a:cb:2e:af:69:bb:8b:
78:0b:e9:dc:ff:96:47:b1:27:32:49:97:c0:36:c5:b9:7a:c6:
73:3b:fc:a4:f8:0e:b3:e0:2b:0c:e1:9f:df:b0:ab:f0:d4:40:
f1:96:29:76:62:b5:bb:66:c3:ed:35:f2:bf:cc:a4:b6:f5:9b:
79:e6:c5:80:67:bc:13:57:8e:37:b4:40:0e:e7:10:db:9f:fe:
5a:41:ab:28:eb:b9:06:57:4a:b8:77:4d:00:96:04:70:a6:b9:
66:c1:fc:33:5f:bc:0e:ca:8f:e8:e6:00:05:40:52:75:37:0f:
b3:c3:4c:1d:86:f0:ce:31:83:dd:eb:a2:43:b5:fe:69:cb:5c:
06:ff:60:ee:c0:ca:18:51:e6:b7:a0:a8:47:b0:c2:ae:c2:4d:
6e:78:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:37 2025 by rpki-client