Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423A748CF0011EFAD88D27D762E951A.roa
File: F423A748CF0011EFAD88D27D762E951A.roa (raw, json)
Hash identifier: M3K9KOcTPTht9OZVPqfCZ7sw8KSzhEsHHz/8Kfch714=
Subject key identifier: 80:51:C3:27:DB:E1:07:F8:A7:5F:48:11:A3:23:EB:DF:0B:BD:74:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423A748CF0011EFAD88D27D762E951A.roa
Signing time: Fri 10 Jan 2025 03:14:08 +0000
ROA not before: Fri 10 Jan 2025 03:14:04 +0000
ROA not after: Mon 27 Jan 2025 03:14:04 +0000
asID: 62468
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66771 (0x104d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 03:14:04 2025 GMT
Not After : Jan 27 03:14:04 2025 GMT
Subject: CN=6780907f-65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:3c:f9:b9:49:da:2b:51:7a:91:d3:3f:f3:
1f:3f:fb:bd:93:b3:c9:da:b9:00:97:9f:06:d1:42:
ac:f9:be:08:a2:64:d7:12:ae:88:86:e5:0c:1e:55:
c0:72:94:64:86:5d:e8:1d:e3:94:6b:95:ba:c2:c8:
de:6e:ed:29:fa:6d:b1:ac:8d:76:0b:3d:9c:02:28:
7e:4d:ef:bc:0e:83:be:47:e1:4f:fc:9f:0d:bf:af:
8d:86:c9:7c:56:08:6a:b8:a5:d7:fe:55:18:10:c5:
be:20:07:2e:da:d7:6e:ea:66:c1:50:51:26:f2:98:
f3:4e:05:3e:c7:33:78:f2:44:0c:e0:6d:08:d6:5a:
f1:cf:3f:7f:b2:93:b1:36:bd:94:5e:3a:44:13:e3:
3c:db:95:bf:6d:22:55:51:60:67:45:7f:a3:23:50:
b5:78:57:86:d3:4a:f6:76:3f:f1:51:af:09:3b:25:
ac:ca:e0:c5:2b:1c:cb:69:df:16:d0:23:00:83:32:
1b:7e:87:04:7c:e8:84:57:22:cf:d3:00:18:7d:3b:
1c:22:39:ee:ac:70:bc:ab:d2:98:41:5a:5e:e1:c9:
54:63:3e:c0:2a:ac:3c:a8:01:18:79:d1:0c:51:28:
0d:70:98:6f:e4:ce:5a:e3:06:a7:67:87:b8:31:cf:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:C3:27:DB:E1:07:F8:A7:5F:48:11:A3:23:EB:DF:0B:BD:74:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F423A748CF0011EFAD88D27D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
74:7a:f6:0c:3b:16:6f:44:96:d6:ad:6e:b8:87:f3:65:7f:e0:
34:b6:f9:06:88:12:22:64:f9:f2:e4:e8:8b:b9:a6:55:f4:22:
bf:4f:e9:de:9e:2d:e5:21:fa:02:0d:66:a6:87:4f:96:e8:2f:
e2:83:08:b8:e0:74:5e:e8:6a:c0:f8:9e:e3:08:da:5d:e0:d7:
2b:1b:99:d1:af:e1:96:50:d6:69:6f:e6:7d:24:ec:b2:2c:25:
08:7b:0e:6b:77:9c:6a:43:75:fb:06:57:9e:f2:a4:aa:92:0d:
88:32:89:2b:f4:44:a7:c9:3f:9e:37:77:91:73:5d:1e:be:ce:
8e:83:ca:51:86:e0:ae:53:f0:a2:29:47:95:37:e7:83:f4:07:
1f:4f:26:3d:c1:1a:ec:f8:52:b7:40:58:da:b2:41:97:8d:f7:
d0:2d:93:52:f9:a6:33:68:c5:3a:84:a1:cb:bf:2e:33:94:c8:
39:8b:a7:b4:26:59:f9:9c:7e:c5:83:bd:d4:64:f8:80:73:7e:
a4:9d:0d:61:33:09:d4:39:a1:3b:50:b3:2b:2b:48:29:f2:72:
5c:12:3c:53:2e:60:c6:75:0d:75:bd:06:ae:94:f5:bb:2d:2a:
26:d0:b9:f1:e2:6e:fe:4a:4f:7b:26:e5:1e:ff:79:ef:8c:6e:
e1:f2:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:46 2025 by rpki-client