Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F040D382B92311EFB47CCE72762E951A.roa
File: F040D382B92311EFB47CCE72762E951A.roa (raw, json)
Hash identifier: wMb2/SxQAQ6DQbfVcT5nyYhKBR0R5tzCsT0QrSy8fZI=
Subject key identifier: FA:BE:62:7E:3B:3A:E9:DD:27:42:6A:72:1C:FE:21:6A:41:87:5F:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F040D382B92311EFB47CCE72762E951A.roa
Signing time: Fri 13 Dec 2024 07:29:08 +0000
ROA not before: Fri 13 Dec 2024 07:29:04 +0000
ROA not after: Sat 25 Jan 2025 07:29:04 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58093 (0xe2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:29:04 2024 GMT
Not After : Jan 25 07:29:04 2025 GMT
Subject: CN=675be244-4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:f8:73:02:7b:3d:af:b7:cf:3d:d7:8f:98:
38:86:68:29:f8:f7:02:f2:ac:2b:04:67:52:ec:23:
55:3a:5c:8d:83:2b:f6:76:a9:71:dc:c7:a3:e0:53:
e5:e5:e4:21:d1:71:4a:35:cf:5f:41:b7:89:27:9d:
35:72:ed:b1:a3:a3:be:79:32:82:f3:3c:d8:1e:bd:
6c:bd:a1:ae:be:6c:58:62:70:14:7d:91:ea:5b:fa:
dd:3d:a1:28:2c:58:3c:37:a5:ab:c0:13:2a:43:6c:
9d:c9:94:15:0f:ef:f6:0d:ea:78:c8:12:ea:85:0b:
13:b1:74:52:cd:92:a7:0e:5b:f1:94:60:37:35:d9:
3d:c8:e7:49:0f:16:b7:a7:36:b8:18:3c:4c:12:fc:
7c:9c:b6:7c:a4:0c:8b:df:4d:5b:8d:76:47:6b:48:
bf:fb:6c:38:6a:fc:ae:87:f5:cf:85:d5:8f:c2:85:
f8:39:78:a3:b0:ef:b5:db:3c:bc:fc:88:bc:22:cf:
66:82:03:19:d4:16:0b:8c:66:07:7f:a0:24:69:e7:
2e:0b:21:92:e5:fe:b3:d2:73:18:8e:5a:8c:df:3c:
5e:61:a0:15:c8:0c:1e:2f:25:d4:71:cb:4d:fe:36:
d5:6a:b1:80:8e:12:be:94:4e:54:2b:d2:df:19:aa:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:62:7E:3B:3A:E9:DD:27:42:6A:72:1C:FE:21:6A:41:87:5F:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F040D382B92311EFB47CCE72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1b:17:71:87:67:5b:0f:91:3c:cd:f7:e9:bb:5d:f6:0d:aa:
38:19:9f:2e:6e:07:d1:b5:79:29:58:ab:48:07:a6:8c:a5:ca:
9e:4c:58:0d:99:c9:38:8f:ea:9c:0e:a4:96:fd:4e:75:25:74:
1c:23:13:79:92:c2:e8:fa:71:17:97:60:f1:66:74:fa:47:38:
b2:f8:6f:e0:53:1f:30:04:a0:56:48:ab:3c:31:35:f8:e9:0b:
48:57:89:eb:0b:0f:c5:8b:27:5a:c0:88:21:7d:a7:1f:0a:0e:
d1:15:6a:dc:60:84:bb:9e:4a:0b:a3:3e:8a:21:f3:6e:46:53:
be:c6:28:b6:ad:20:b6:17:67:49:6a:b0:9a:a1:ba:fe:df:2e:
d7:70:00:c0:99:35:c3:a6:b5:0e:e5:00:b0:e8:b8:3c:44:c0:
df:0d:54:c4:b0:10:ff:4d:64:74:ce:13:9c:e5:48:04:2e:b1:
ae:13:53:f4:f9:76:2d:45:7b:cf:5f:fb:81:7b:cd:66:ba:07:
37:10:bd:08:a3:75:2c:f8:83:f2:b6:51:b2:a6:a7:6f:96:9f:
55:74:1b:c8:2a:cd:ce:0d:b1:6f:1e:17:5d:9f:7f:69:47:3d:
20:f0:39:50:eb:c5:79:29:dd:92:68:c1:40:b7:04:b6:59:85:
c7:a7:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:24 2025 by rpki-client