Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D0C96ECE8011EFA298514A762E951A.roa
File: E8D0C96ECE8011EFA298514A762E951A.roa (raw, json)
Hash identifier: fmlkRRujZvtblcKHMWyfo6In7RBVfSXqvwBa+UrwLJY=
Subject key identifier: EB:C3:D1:D3:9A:B4:1C:2A:F0:4F:7C:06:55:58:AA:A2:FF:C8:EB:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01039E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D0C96ECE8011EFA298514A762E951A.roa
Signing time: Thu 09 Jan 2025 11:57:33 +0000
ROA not before: Thu 09 Jan 2025 11:57:29 +0000
ROA not after: Sat 01 Feb 2025 11:57:29 +0000
asID: 17561
IP address blocks: 45.203.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66462 (0x1039e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 11:57:29 2025 GMT
Not After : Feb 1 11:57:29 2025 GMT
Subject: CN=677fb9ad-483f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:db:83:86:12:58:18:f3:97:1a:89:24:e1:
df:ea:aa:de:a8:e9:56:e1:0c:a5:6e:57:e1:f4:e3:
af:87:8e:35:0a:31:92:70:5f:30:cb:60:47:2e:28:
69:8b:6e:f5:19:05:1f:ea:3b:e1:96:5c:16:e0:63:
d3:fb:1c:40:e6:3e:97:31:93:9c:fe:8a:08:4a:d1:
f6:67:9f:23:66:26:eb:e0:61:c7:06:87:16:a0:61:
cd:39:03:31:2f:56:07:f9:fc:2f:ad:75:ff:d9:f8:
19:da:0c:d1:01:71:c4:a2:47:b6:f2:f5:d9:7b:14:
fc:12:c9:13:f1:66:74:c7:bb:0f:b1:1c:d8:7b:1a:
97:dd:ad:5a:87:39:4d:33:3c:db:47:e2:e4:92:d9:
1d:96:0b:2d:33:f3:4c:33:4b:f4:81:8e:17:92:dd:
b5:7b:56:7b:34:4f:ce:7f:f8:44:a8:2a:ba:01:cb:
e5:00:8c:06:a2:9a:35:fa:bf:af:ff:fa:f1:25:07:
60:a2:a4:48:29:e3:eb:d1:da:e7:0a:ba:42:a5:2a:
cb:d2:e3:63:62:9e:23:a8:cd:85:ac:df:37:33:1b:
b6:c5:a7:ad:16:31:89:2c:71:4f:68:73:0d:48:ab:
1d:4a:03:2f:12:78:b0:af:7f:fa:b0:56:81:4d:82:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:D1:D3:9A:B4:1C:2A:F0:4F:7C:06:55:58:AA:A2:FF:C8:EB:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D0C96ECE8011EFA298514A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.13.0/24
Signature Algorithm: sha256WithRSAEncryption
31:63:30:dc:2d:93:8f:e1:e2:3f:66:5b:ab:ba:35:58:13:f5:
e0:4a:e6:f0:41:08:ba:1a:98:c7:15:ce:99:44:88:b7:b1:b8:
a4:fe:55:62:ee:c6:9e:29:49:53:49:63:b3:b4:78:26:8f:e3:
4c:c7:7e:ae:21:c0:c1:33:47:57:ea:c9:06:0d:5a:67:c8:d6:
10:75:28:a3:51:1e:51:e1:68:28:39:18:72:77:c9:76:c2:ee:
3f:4b:5d:df:78:39:59:97:8d:aa:b9:88:d5:87:7a:f4:bc:bb:
fb:21:ea:15:e9:0d:1c:fe:b3:d0:2f:ec:93:b0:43:05:cb:2e:
45:47:d8:9d:eb:21:67:ef:46:2d:43:e3:b6:27:d9:c7:c4:40:
8d:bb:eb:54:37:2b:d3:a9:c9:82:fd:06:61:46:d2:79:58:91:
bb:ce:6c:5c:5d:c6:f6:96:f0:25:ae:03:35:97:cc:0a:c8:38:
78:1e:1f:49:98:df:c0:c0:11:75:e0:5c:8a:02:a0:c2:0d:94:
1e:af:39:0f:62:0e:2e:13:b0:69:d8:94:e6:b5:07:c3:bf:e0:
d0:f6:2d:ba:d1:c2:b1:c5:51:52:bb:dc:f1:e1:2a:f4:ec:e3:
02:78:ba:88:4a:67:3c:3b:33:f8:7d:0a:9f:e6:79:5b:17:fc:
c6:d7:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:56 2025 by rpki-client