Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBF31F8ACBEB11EFA50C7153762E951A.roa
File: EBF31F8ACBEB11EFA50C7153762E951A.roa (raw, json)
Hash identifier: GAco77G8pEdCtBLA1aX43M424VzAVEWT2jWzPNTa1Io=
Subject key identifier: 48:4B:BC:A8:5C:B4:89:3C:84:49:2F:84:C1:F9:91:90:DA:84:88:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F82A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBF31F8ACBEB11EFA50C7153762E951A.roa
Signing time: Mon 06 Jan 2025 05:06:01 +0000
ROA not before: Mon 06 Jan 2025 05:05:57 +0000
ROA not after: Thu 16 Jan 2025 05:05:57 +0000
asID: 5065
IP address blocks: 45.195.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63530 (0xf82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 05:05:57 2025 GMT
Not After : Jan 16 05:05:57 2025 GMT
Subject: CN=677b64b9-86dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:a5:1d:b5:28:8a:4a:64:ce:31:14:50:20:
f3:fb:54:86:c2:39:22:10:85:20:b7:47:45:f6:bf:
29:f4:0a:61:3b:03:e5:56:3a:dd:51:ad:0e:6e:68:
e0:47:be:32:cf:06:31:3a:46:fc:fb:cc:53:fa:10:
04:a3:ed:b5:b1:6e:60:39:5e:80:7a:3d:fc:d2:19:
02:96:c4:64:c3:93:41:d5:3b:d4:da:cf:32:35:fa:
dd:c4:f0:83:5d:3b:2c:14:04:45:3b:bb:9b:eb:d8:
cd:8e:30:a6:32:4a:0e:65:0d:3b:e3:37:77:1e:f2:
ae:10:83:8f:5b:f8:0e:38:c8:0c:64:bd:64:12:2c:
52:f6:f2:41:c2:cb:28:b4:a5:30:9b:65:66:cb:30:
56:4e:e3:f6:a0:db:ed:fb:bf:74:1e:f1:85:e6:22:
5a:08:f0:aa:84:2f:e5:81:c8:8c:37:79:a6:9d:65:
62:ba:d9:ee:39:f2:70:28:a5:79:5e:f8:2b:05:62:
c1:a5:de:e1:a0:13:27:07:4b:df:f2:6f:7e:ed:63:
d9:0b:f8:aa:10:93:ba:4b:a4:7d:dd:fe:17:8a:8c:
a9:bf:bb:ee:8e:fc:db:03:8e:89:73:7a:c2:f8:6e:
d4:6a:a7:94:01:91:89:73:10:29:41:e8:e3:c9:65:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:BC:A8:5C:B4:89:3C:84:49:2F:84:C1:F9:91:90:DA:84:88:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBF31F8ACBEB11EFA50C7153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:14:7f:1e:98:3c:5e:1d:ba:2b:14:0e:35:53:0a:92:bc:9c:
48:2f:f3:85:1d:92:f7:54:e5:2f:8e:32:b0:99:86:b2:07:34:
29:45:e4:87:d3:66:a3:e3:56:c9:a1:85:53:75:e4:74:53:a9:
73:b6:fe:db:f4:50:d9:03:d0:2f:65:30:47:65:8a:b3:52:00:
1c:74:ec:2d:0b:a1:5e:a3:e8:b6:be:72:b2:4e:a8:32:96:15:
c2:85:41:9b:d5:d5:20:8c:09:c9:51:0c:34:80:88:ef:ca:3e:
d1:04:0a:b9:e3:72:69:de:6e:b0:0a:f3:1c:d5:22:8e:58:ff:
e9:13:9a:8e:e1:07:ea:2d:e1:90:56:4e:67:f7:23:90:c1:49:
7c:83:91:a4:fe:b5:db:8f:d1:8a:b0:88:3e:d8:dd:f0:ed:e5:
5b:e1:e7:a2:5f:3f:c5:b1:d9:f5:dd:3c:e8:4c:86:74:e7:e6:
53:30:c9:23:ef:0e:65:6f:3f:5d:51:7b:0d:80:d2:39:5e:64:
24:94:7a:1f:f1:2d:4f:63:df:66:15:56:42:ee:eb:5c:ab:ed:
69:5c:10:43:1f:6f:7f:db:45:3d:c3:95:fd:87:28:85:a5:76:
41:af:4a:89:56:dc:a5:d4:b5:b4:d4:7c:75:56:7f:49:18:25:
d9:b1:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:10 2025 by rpki-client