Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C53C40C9A711EF845D7975762E951A.roa
File: E7C53C40C9A711EF845D7975762E951A.roa (raw, json)
Hash identifier: gxezRW9ULmHTPjwEEheG+D6a+Wx9qWcjLuUkeCSBOZ8=
Subject key identifier: C3:CE:FE:6D:06:2C:2E:5C:8F:CD:7C:8B:31:A9:F3:64:CA:9F:F5:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F68B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C53C40C9A711EF845D7975762E951A.roa
Signing time: Fri 03 Jan 2025 07:54:06 +0000
ROA not before: Fri 03 Jan 2025 07:54:02 +0000
ROA not after: Sat 18 Jan 2025 07:54:02 +0000
asID: 54801
IP address blocks: 45.207.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63115 (0xf68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 07:54:02 2025 GMT
Not After : Jan 18 07:54:02 2025 GMT
Subject: CN=6777979e-7f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:cf:dc:a7:33:89:07:3f:0e:00:d0:4c:fc:
38:6b:4d:de:2b:08:ff:a5:41:d5:fd:21:93:f3:5e:
1c:b6:7b:04:28:ba:ea:6f:a4:d1:c7:4c:d4:a3:d3:
fa:49:b3:f4:7a:70:2f:b1:18:39:9d:61:8f:ae:1a:
74:55:25:43:2b:b0:60:79:40:55:9b:89:8d:2c:92:
83:44:e3:43:3a:cb:cb:aa:73:de:c5:a1:3c:04:8e:
c1:41:5c:ea:fe:2f:b5:4d:9a:fd:5e:8e:34:cf:c8:
81:fd:e1:d0:47:56:d6:50:a7:9a:fb:e9:7a:e8:ae:
c7:c6:43:ec:de:5e:0d:d3:6e:31:d4:3e:64:8e:9a:
45:f5:47:96:12:98:db:52:59:18:e6:f4:75:0d:c7:
b6:5b:e1:bf:56:21:07:76:22:39:8f:2e:eb:65:6d:
8b:33:d6:79:d5:45:ba:bb:4e:49:03:56:26:e9:9a:
be:85:f5:00:f1:47:16:72:a4:73:2e:e0:72:ec:39:
e9:66:46:4e:48:20:88:58:e8:69:70:bc:b2:be:1c:
db:e1:f6:a3:25:0c:51:87:c3:24:6e:41:20:ce:aa:
04:62:01:05:01:cf:bc:89:ca:0d:99:4a:55:cf:f8:
c9:9d:29:bc:92:33:af:f1:6d:62:43:39:87:23:27:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:FE:6D:06:2C:2E:5C:8F:CD:7C:8B:31:A9:F3:64:CA:9F:F5:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C53C40C9A711EF845D7975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
19:87:3c:ca:43:af:1f:5c:88:08:3b:96:40:bd:4a:09:e6:f2:
b5:bf:fc:15:e0:39:c9:45:b2:7a:b3:00:d7:24:bd:5b:15:e3:
99:d5:fa:ea:74:75:2b:20:9a:b1:af:47:cc:78:06:7c:7c:bf:
40:08:64:fb:d6:1a:d1:ea:27:fa:9d:dc:2a:e3:94:cb:a0:df:
d1:97:a9:59:e6:e2:d2:ec:0a:5e:1b:cb:e1:83:c9:85:31:aa:
85:f1:bb:de:66:52:e7:88:ce:37:3e:fb:4e:7a:a5:8c:f9:0d:
62:6b:bc:68:2c:67:74:59:19:79:28:01:ca:5b:90:74:a6:bc:
e0:02:0c:4d:ea:72:ed:92:55:63:70:ab:c6:6d:39:f5:b7:94:
b2:c9:88:58:4e:88:58:db:5d:e0:35:d1:02:9e:74:ca:d3:30:
68:ea:3e:59:d7:d1:a5:bb:2e:e9:16:d5:5c:7f:cb:51:9f:c6:
63:6e:52:78:bf:26:77:4b:dd:a7:af:57:b0:44:33:77:df:14:
f4:68:9c:31:6d:ff:3c:f1:40:af:84:f9:97:c7:5a:6a:cf:3c:
e4:03:7d:60:c8:a5:34:18:18:17:da:cc:6b:89:f3:ea:6c:83:
29:c0:63:ad:5c:ae:9d:6b:f0:24:bd:49:e7:0f:2a:d5:4e:2b:
c4:64:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:18 2025 by rpki-client