Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34E5682CAC511EF98AFD97E762E951A.roa
File: E34E5682CAC511EF98AFD97E762E951A.roa (raw, json)
Hash identifier: h2v7awQl73cuYiRCMqHsALj8LZlFhKGI07jsA7hbha8=
Subject key identifier: FA:E4:D6:63:F9:8D:CE:11:10:A4:B6:38:83:8D:25:0F:82:EB:15:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F734
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34E5682CAC511EF98AFD97E762E951A.roa
Signing time: Sat 04 Jan 2025 18:01:14 +0000
ROA not before: Sun 05 Jan 2025 18:01:10 +0000
ROA not after: Fri 17 Jan 2025 18:01:10 +0000
asID: 39600
IP address blocks: 45.203.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63284 (0xf734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:01:10 2025 GMT
Not After : Jan 17 18:01:10 2025 GMT
Subject: CN=6779776a-c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:71:0b:b6:c9:e8:ac:8b:7a:31:bb:d2:2c:
05:a0:83:14:b1:d5:cb:87:ab:5f:f5:3f:e1:0c:f4:
34:a0:1f:6f:7c:9a:7a:ea:bc:76:89:29:03:ab:72:
77:b5:ba:b1:08:91:0f:17:92:83:e4:d8:b5:57:54:
9c:7c:f6:fb:33:eb:84:20:8e:db:48:75:a4:b2:66:
02:dd:7b:d5:d5:ef:42:c4:95:af:64:66:e3:c0:9c:
dc:b6:a3:1b:7b:ee:7f:d1:00:b6:0e:75:ac:c8:47:
b8:43:69:79:81:fe:c6:c3:04:6c:aa:cd:04:17:39:
2c:05:26:8f:7f:57:48:79:25:c5:ca:e2:f4:70:ff:
e0:4d:3d:f8:ef:dd:3b:45:91:44:7c:c8:8b:ba:69:
9c:f6:dd:60:7d:1d:eb:e0:2b:7d:57:40:37:67:01:
9d:86:21:95:88:df:6c:60:8d:65:c3:da:1e:95:4b:
8e:ed:a4:08:8a:ec:35:03:4d:9b:18:9a:31:67:b4:
71:1d:c3:1c:fc:f9:d0:8c:19:2d:76:04:2a:2c:86:
31:0a:94:77:c9:4e:c0:b9:30:e1:84:85:a7:a3:63:
d3:a3:76:be:09:c3:de:88:b5:ea:75:cf:f9:50:3d:
23:9f:23:1f:ae:72:b4:46:c8:87:f5:cd:cd:b5:22:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:D6:63:F9:8D:CE:11:10:A4:B6:38:83:8D:25:0F:82:EB:15:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34E5682CAC511EF98AFD97E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e9:15:a6:40:09:b8:53:e7:fb:6c:3d:4e:4a:7c:d3:66:cf:
31:61:18:3f:5c:d7:72:e8:34:8a:8b:0b:83:5f:89:e4:01:7a:
65:59:f9:56:55:1d:73:87:d4:24:38:cc:02:38:0a:bb:a9:42:
2a:aa:75:43:99:c6:78:cc:f1:66:cc:57:ff:ac:55:bf:93:fe:
42:3a:d4:39:f5:91:f6:7a:43:b9:55:cb:ab:54:f0:d0:4c:03:
3e:64:f4:13:d5:ca:b8:03:61:c2:4d:f4:c6:ca:82:af:3f:29:
22:55:dd:d3:73:8b:2d:c0:86:5a:e6:95:d0:ad:e2:47:ee:44:
26:7a:ce:e1:aa:35:37:ea:6c:bc:6e:8d:8e:8b:3a:74:4f:a2:
7a:04:98:bb:a9:cc:d2:04:60:9d:ef:78:1c:89:4e:30:c9:8d:
7b:01:76:e9:ec:9a:c1:54:64:9d:86:5e:be:8f:61:5b:88:d9:
ff:37:c4:c0:be:3c:b5:1d:a2:d8:49:f5:56:64:4b:e1:5f:f9:
ce:1a:26:a4:76:0f:d3:1a:cf:23:4b:01:2c:2e:51:09:2f:88:
d9:05:e4:bd:b2:bc:99:94:8f:9f:af:89:98:c2:6d:45:96:87:
3b:18:22:62:5a:60:86:79:58:b1:6a:e6:92:f6:1c:18:6c:87:
a1:b4:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:46 2025 by rpki-client