Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20CFB88CE5811EF849AFA4E762E951A.roa
File: F20CFB88CE5811EF849AFA4E762E951A.roa (raw, json)
Hash identifier: cu9Q7xsY18+AQWgePm4y25kvvi0KWIkzqSQoVQ0s8sA=
Subject key identifier: 8C:0F:C9:AA:CC:35:0A:27:1E:90:EB:29:75:78:CA:E1:F9:8F:F5:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0102F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20CFB88CE5811EF849AFA4E762E951A.roa
Signing time: Thu 09 Jan 2025 07:11:28 +0000
ROA not before: Thu 09 Jan 2025 07:11:25 +0000
ROA not after: Thu 16 Jan 2025 07:11:25 +0000
asID: 17561
IP address blocks: 45.204.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66290 (0x102f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 07:11:25 2025 GMT
Not After : Jan 16 07:11:25 2025 GMT
Subject: CN=677f76a0-95c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:98:79:84:a5:02:df:03:0e:fd:ce:00:05:
1b:37:de:bf:45:65:6f:5c:81:e1:e2:b4:0c:a6:08:
5d:77:48:2e:84:9c:78:61:85:f6:92:cc:ce:8b:4f:
8b:65:73:4b:f2:06:0c:8e:d7:32:83:f5:e5:cb:df:
07:a0:09:32:b8:d6:5f:24:97:6b:1c:43:de:00:46:
3d:ec:5c:d0:4b:d1:e6:58:a2:6a:91:a0:13:c2:62:
9e:29:1d:91:12:c7:07:47:78:d2:45:14:b7:e8:c2:
49:85:01:89:1c:4d:5c:af:e5:3c:ef:76:be:7b:4b:
6a:09:44:d0:57:f8:df:5b:b4:2a:b6:1a:f5:d8:98:
87:47:3c:eb:92:96:dd:b0:18:70:54:7f:33:1d:17:
1a:f5:b2:40:5b:7f:51:02:01:13:54:d2:3b:04:68:
c4:f1:84:a4:9b:bd:3b:65:36:c0:2c:8b:17:1a:7e:
62:a7:62:ad:fa:31:95:4c:88:7a:bb:19:ad:f9:48:
a6:b0:93:75:fd:2b:7a:fb:56:e5:7e:48:2e:49:13:
66:fe:2f:22:24:86:be:ed:ff:2f:c9:41:fe:87:35:
67:9f:41:90:91:9d:bb:4d:08:b1:e6:f4:fd:73:76:
e8:2f:0c:61:ee:85:5d:d8:42:81:5d:35:48:0a:7e:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:C9:AA:CC:35:0A:27:1E:90:EB:29:75:78:CA:E1:F9:8F:F5:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F20CFB88CE5811EF849AFA4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.32.0/19
Signature Algorithm: sha256WithRSAEncryption
20:52:80:2d:f3:7b:fe:b6:ee:20:57:ad:00:e8:4a:d1:19:9b:
f1:6f:4d:23:bd:e4:ba:1e:16:68:b7:52:09:9b:a7:52:e2:c7:
fe:8f:a9:65:98:42:52:9c:f2:25:4d:20:99:c5:6a:c8:2b:b5:
27:51:6f:4c:c7:d4:ef:65:66:c4:eb:ee:fe:ab:23:77:e5:ba:
d2:6b:c3:85:aa:af:34:b9:a4:6c:bb:e5:d5:05:75:3a:39:c4:
1d:f2:e6:c3:c6:c4:4a:32:3b:7f:ac:d7:33:b7:91:1a:90:5f:
f4:96:fd:96:4d:44:f4:16:3e:25:4e:37:59:44:a3:2e:e4:dc:
2f:04:79:79:52:bd:d8:9e:a1:5d:1d:11:3b:d6:e4:6c:56:9e:
65:ee:80:ba:50:c2:8b:9a:7f:45:ed:e7:c4:24:e8:84:79:04:
47:2b:c0:e1:07:42:77:61:db:86:02:70:87:67:33:ca:89:f2:
96:f5:33:6b:70:1b:25:df:86:76:04:fe:7f:70:ab:ee:35:4e:
c5:09:ea:5b:2b:b0:05:0a:7c:7a:5b:d1:d5:3f:84:65:a3:7e:
04:3d:0e:78:6d:da:8a:3b:38:e9:6d:cd:17:c9:84:87:07:f1:
8d:84:6c:dc:01:95:65:ff:31:6a:bf:10:f5:e8:5b:0b:02:8a:
50:74:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:23 2025 by rpki-client