Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C0182ACE9F11EFB4793C8D762E951A.roa
File: E8C0182ACE9F11EFB4793C8D762E951A.roa (raw, json)
Hash identifier: dZ7WmHOW6dOQBcALchD5RNhGCNK+OyTcvvgP1F8T3PM=
Subject key identifier: 05:BA:9E:85:29:15:E8:88:4F:B8:FE:D8:4E:18:5C:5F:6E:9E:39:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01043C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C0182ACE9F11EFB4793C8D762E951A.roa
Signing time: Thu 09 Jan 2025 15:39:27 +0000
ROA not before: Thu 09 Jan 2025 15:39:24 +0000
ROA not after: Fri 24 Jan 2025 15:39:24 +0000
asID: 39600
IP address blocks: 45.204.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66620 (0x1043c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 15:39:24 2025 GMT
Not After : Jan 24 15:39:24 2025 GMT
Subject: CN=677fedaf-e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:d0:df:34:e2:03:02:03:cb:98:05:43:f3:
83:01:64:7c:8a:cc:ef:c7:37:2e:bf:75:ae:d4:23:
08:be:95:07:db:98:6e:19:5f:05:b5:2d:4d:76:4a:
62:d7:6e:1c:fe:53:e6:34:f0:75:f7:d7:53:24:ce:
9d:1c:ab:b6:0b:1f:49:b9:4f:dc:85:29:92:9d:e5:
ec:95:e6:a7:49:9d:1e:d2:fe:4c:86:70:fe:57:3c:
63:76:af:97:2c:c0:43:93:0d:32:4a:47:a6:c2:60:
d5:e3:81:c0:92:60:17:2e:c8:20:b1:e7:44:fe:34:
1a:89:3b:eb:92:86:06:68:af:50:eb:2a:7b:b8:ad:
a8:71:8c:dc:9d:85:5f:95:46:fd:c0:c9:b6:c5:4d:
41:92:9e:c5:9d:6e:6a:14:0f:3d:42:5c:95:97:89:
5c:d0:ce:83:1e:47:c3:bd:7d:39:7c:fa:30:29:db:
8b:0f:e3:a9:a7:d5:ff:9d:8c:e0:40:57:21:df:d1:
ae:b5:1d:a3:97:73:2f:ba:88:8a:03:58:35:44:ac:
57:c1:24:09:7f:7b:12:cc:77:a0:6c:da:cf:a4:94:
81:8c:82:67:fc:5d:f4:11:56:10:71:00:2b:6e:a6:
5d:78:72:ac:fc:ed:60:21:7d:9a:99:3f:3a:14:6e:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:9E:85:29:15:E8:88:4F:B8:FE:D8:4E:18:5C:5F:6E:9E:39:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C0182ACE9F11EFB4793C8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.74.0/24
Signature Algorithm: sha256WithRSAEncryption
21:07:bd:bf:63:af:89:2e:62:41:62:f6:9b:04:7d:29:fb:82:
63:21:c8:1c:53:f0:db:75:9c:da:2e:65:c8:a1:13:17:bd:44:
1d:f5:58:89:59:e0:37:44:9f:65:0b:80:82:5b:8b:bf:bc:0b:
12:b7:88:e0:79:8e:8a:d7:10:bf:a1:6a:86:bc:bb:da:d4:fd:
8b:b2:99:cc:1b:fd:b6:56:3b:aa:61:4b:22:e9:9d:0a:eb:34:
ae:35:2f:96:17:53:aa:54:61:aa:f4:5a:01:9a:23:2c:c8:9d:
52:87:1a:54:4a:a2:82:21:50:b6:ef:66:66:ec:04:20:06:85:
c5:a1:01:1b:58:4e:81:8c:e3:49:53:db:25:dc:fd:82:45:1d:
31:d3:78:62:55:80:03:a7:08:94:e5:be:6f:ba:45:b1:69:50:
76:60:da:4a:21:18:c9:86:99:fd:40:04:4b:e4:e1:98:df:86:
b3:7f:3e:40:63:d3:6d:08:34:0a:9c:85:12:44:d7:4d:7d:c7:
07:4e:c8:1f:e8:3d:96:dc:b4:de:0c:1d:7e:2c:5c:83:ed:e0:
f5:77:18:01:13:47:0a:03:9f:16:63:65:67:83:af:ac:72:19:
6e:22:11:09:92:95:67:b8:72:0f:0d:e2:d4:24:b6:e9:01:0c:
60:5a:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:25 2025 by rpki-client