Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B07F06D30E11EFA48901A9762E951A.roa
File: F1B07F06D30E11EFA48901A9762E951A.roa (raw, json)
Hash identifier: xt//GsJNG3CKG7xkAtZk7yGbAI1MXAwZU/i168a/Bg0=
Subject key identifier: 34:A4:7F:7D:B4:30:3D:B1:75:EF:02:6E:E9:4F:F0:F1:17:9C:62:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01083F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B07F06D30E11EFA48901A9762E951A.roa
Signing time: Wed 15 Jan 2025 07:04:21 +0000
ROA not before: Wed 15 Jan 2025 07:04:17 +0000
ROA not after: Mon 27 Jan 2025 07:04:17 +0000
asID: 142032
IP address blocks: 45.205.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67647 (0x1083f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:04:17 2025 GMT
Not After : Jan 27 07:04:17 2025 GMT
Subject: CN=67875df5-7cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:3b:4f:66:31:c8:45:ba:ca:69:37:ef:04:
df:32:f6:57:f9:38:04:5b:aa:2c:8f:46:d8:e5:24:
81:59:d6:b7:b1:77:cf:b9:36:d5:f3:5c:09:ff:77:
c2:df:ff:58:b8:c9:1f:e9:7d:54:e7:1b:26:03:8d:
64:99:ea:68:79:b8:f6:09:a9:f9:1a:99:01:74:c7:
04:26:ef:a5:91:6b:fd:c0:05:2c:b9:b3:d3:d1:c1:
4b:4b:7b:b4:35:61:fb:3b:17:54:31:41:ad:f2:f6:
d3:67:56:6e:43:56:1d:15:77:9e:cc:9c:1a:a7:5e:
87:62:d7:0e:5d:75:d3:dc:92:60:ab:95:2f:a3:86:
7d:94:bf:56:ee:c9:51:6d:b8:0b:37:3b:b0:38:f9:
36:63:ae:c5:4d:0a:a8:28:8c:86:18:af:27:d7:15:
a1:ec:1f:67:9c:c6:cd:8b:99:00:39:eb:24:7d:69:
db:42:e4:0c:1e:be:af:eb:68:17:3b:6d:16:fb:65:
14:2d:02:dd:b0:90:03:9d:cf:f4:39:0a:51:8c:24:
ab:7a:a3:be:52:a1:ef:99:cb:dd:87:5d:08:99:a9:
38:e2:1d:e3:0d:78:db:ff:f7:58:e0:cd:eb:b1:25:
e4:0c:53:7c:3f:55:5b:00:7c:6e:02:3b:12:06:b1:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:7F:7D:B4:30:3D:B1:75:EF:02:6E:E9:4F:F0:F1:17:9C:62:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B07F06D30E11EFA48901A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c3:fc:76:4a:02:f8:b3:74:97:91:71:25:c5:c0:98:7a:35:
13:c3:b0:b8:c6:19:5d:e9:db:05:f4:c3:23:ed:b4:c7:3e:fe:
58:c4:45:7c:8c:41:14:02:cc:b5:b6:b1:c7:bf:f2:29:34:a5:
cc:f8:15:59:0e:9d:88:c3:f2:c9:7e:5f:7f:88:a5:a5:c8:ef:
6e:23:21:c6:b5:23:09:07:f3:b5:75:ac:4a:12:19:d5:2a:76:
3c:43:18:44:46:bb:54:49:43:59:27:6d:97:5f:87:83:30:19:
31:72:30:ed:bb:99:f7:2e:da:67:8e:83:c4:91:7c:a5:97:fa:
c5:0d:2a:cc:89:fa:e0:19:58:af:19:0b:b6:59:e5:3d:16:3b:
eb:2b:68:0b:2f:bb:f7:88:4d:3d:e3:36:9f:b4:59:91:d5:88:
29:8c:e0:71:46:00:fa:cf:87:89:18:c6:6c:be:1e:10:54:a7:
2c:0e:81:20:36:2d:14:e6:68:45:a0:3c:8c:a5:d7:3d:0c:f8:
7f:2c:c0:c8:54:6c:fe:ca:5b:41:2b:f1:a8:f7:46:f0:4b:a7:
6e:c3:4f:09:33:5a:db:b5:a3:f5:62:8d:e2:e3:4f:53:ad:56:
b8:e4:84:27:6b:86:bd:53:c8:5e:af:7a:51:3b:42:76:e3:be:
86:6d:1a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:43 2025 by rpki-client