Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F292AB28BDD911EFB5BD878F762E951A.roa
File: F292AB28BDD911EFB5BD878F762E951A.roa (raw, json)
Hash identifier: 87myHabhDfhfaz9WvQC12gCshOTZapWir5zRnJpyu8w=
Subject key identifier: 4B:52:9B:1A:80:8D:C4:7C:2B:CE:D7:2A:0E:FE:EA:61:16:B5:58:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F292AB28BDD911EFB5BD878F762E951A.roa
Signing time: Thu 19 Dec 2024 07:22:05 +0000
ROA not before: Thu 19 Dec 2024 07:22:01 +0000
ROA not after: Thu 23 Jan 2025 07:22:01 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58815 (0xe5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:22:01 2024 GMT
Not After : Jan 23 07:22:01 2025 GMT
Subject: CN=6763c99d-ad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:7d:a0:2f:ad:e4:33:bb:22:f2:86:ac:2b:
71:28:00:ec:8b:ae:34:4c:d2:6b:d4:2e:12:19:0c:
a2:56:55:e1:2d:2a:e1:09:94:34:1f:ff:63:45:0e:
0d:6b:59:05:9e:8d:33:6a:90:d5:16:7a:a6:97:03:
a0:74:cf:ad:e7:85:6b:cd:95:3c:d8:75:7b:8b:bb:
d3:67:b7:f4:7a:26:ee:88:f5:d9:e5:31:cd:8e:2c:
bb:c1:b0:e2:30:16:e2:5b:5d:ce:33:2d:cc:ac:68:
48:7c:e4:f6:71:bd:40:fc:f1:b9:a2:fe:91:2b:19:
6d:4d:9f:9a:47:d0:1e:1e:ee:da:f9:b2:71:bf:dc:
62:f0:c7:89:a7:cd:41:da:7c:e5:13:42:ea:ca:2b:
12:40:7a:88:3f:7a:d1:1b:02:40:59:02:ea:2a:2e:
56:82:89:2c:5b:a4:28:cb:20:34:d2:8d:13:80:8f:
35:06:22:fd:3c:fe:26:6a:d6:99:c7:89:73:d7:84:
58:7e:55:2d:de:a0:32:e1:f0:72:6c:b2:67:2c:f4:
f2:f0:62:ed:f2:51:81:64:98:6f:c1:56:7d:2f:27:
ad:12:ec:97:6d:02:e2:39:2a:6c:a3:ee:3a:b1:7c:
e7:71:c5:46:72:14:5c:05:d6:fa:14:8c:d1:26:19:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:9B:1A:80:8D:C4:7C:2B:CE:D7:2A:0E:FE:EA:61:16:B5:58:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F292AB28BDD911EFB5BD878F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d7:ca:ad:00:20:fc:ce:15:ce:df:2b:60:1f:6f:67:8e:2d:
18:c8:c7:48:60:db:72:1c:31:df:e7:0c:31:32:cd:1f:fc:c9:
63:c8:5c:cf:08:0b:7a:24:23:4d:64:8e:92:a0:16:06:db:8e:
8e:e8:59:8b:de:a7:98:1f:f9:9f:80:86:88:db:ad:38:48:13:
3c:13:d3:74:c1:8e:b1:cc:6c:de:1e:24:fd:0b:4e:71:a6:e2:
0b:38:33:10:88:cb:ff:f4:fd:39:1b:f0:c1:f2:35:1b:d0:c2:
66:ae:e3:9f:f2:5c:a5:97:05:c6:62:d9:ad:12:22:2f:55:8c:
f2:1b:27:4b:c9:22:c2:78:30:c7:b8:b8:74:fd:5c:d6:f5:7a:
79:e9:c1:9d:0d:83:0c:6e:03:be:eb:c6:b2:8a:0a:e5:06:1b:
9f:0a:b3:95:ee:ce:76:49:55:f3:86:08:52:d3:c1:85:e2:83:
f9:38:76:04:6b:e7:e0:22:42:a5:4a:ac:aa:f6:68:14:c2:67:
45:a4:57:8c:9d:75:a9:4c:46:f9:42:97:b5:ef:82:8a:06:62:
91:1d:41:f9:1a:55:6b:6e:ae:8d:9c:be:69:63:ef:46:eb:f3:
9b:2a:ec:dc:9f:d5:fd:bd:86:81:1f:40:bd:0e:de:22:6b:56:
b4:15:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:37 2025 by rpki-client