Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7727DFABDD711EFB9BFC882762E951A.roa
File: F7727DFABDD711EFB9BFC882762E951A.roa (raw, json)
Hash identifier: GsNZLVgcommHc5L5W1Hr3CE0OCFz+4FlghJbezKSN/Y=
Subject key identifier: 30:7D:31:D0:32:1F:34:18:35:2D:A3:91:72:DD:63:19:06:4D:68:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7727DFABDD711EFB9BFC882762E951A.roa
Signing time: Thu 19 Dec 2024 07:07:54 +0000
ROA not before: Thu 19 Dec 2024 07:07:50 +0000
ROA not after: Fri 24 Jan 2025 07:07:50 +0000
asID: 395793
IP address blocks: 45.206.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58801 (0xe5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 07:07:50 2024 GMT
Not After : Jan 24 07:07:50 2025 GMT
Subject: CN=6763c64a-301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d1:14:ff:fb:32:ea:5e:93:45:40:19:ca:33:
3a:ab:23:b9:65:23:c9:54:e0:6e:5b:25:82:76:af:
75:1f:9d:ee:af:c2:b5:05:d5:52:ea:b8:3b:4b:c8:
af:a3:be:71:2b:99:14:6d:43:98:c3:cd:60:56:50:
84:51:c9:df:b4:ed:c3:d1:7f:b5:f1:28:94:30:e3:
0d:ad:4d:4e:7b:d9:dd:fa:3a:77:26:fc:a7:43:5a:
c4:67:b5:35:60:cc:11:5e:fa:29:7c:30:85:61:ae:
d2:a3:54:48:61:09:03:ce:cd:81:78:90:2a:54:84:
f8:8c:c3:08:b3:4a:11:13:82:8a:c6:6b:26:31:98:
ef:25:ce:5c:f1:06:9e:69:fd:69:98:a2:dc:3b:e6:
ab:8f:b7:0e:f6:00:cd:ad:a0:74:41:b0:53:a6:8c:
84:94:f7:d6:ca:f2:47:3b:97:80:3b:a8:cf:52:32:
d5:12:9a:96:fe:dd:24:67:d3:23:c6:a0:fe:1e:91:
be:17:39:96:84:01:ca:39:9c:16:86:4e:95:30:80:
2c:5e:f5:e2:d5:6e:4c:3d:90:b7:79:78:66:55:0e:
86:28:d7:2a:54:3c:38:0f:3a:e5:2b:d1:48:56:b9:
1c:98:4d:c8:a7:72:08:c2:3a:e9:d4:27:d6:1d:d9:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:31:D0:32:1F:34:18:35:2D:A3:91:72:DD:63:19:06:4D:68:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7727DFABDD711EFB9BFC882762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8b:ea:5b:d3:5a:06:fb:08:ee:35:ea:a1:79:b4:03:ee:91:
0f:46:94:bc:92:4c:c2:c5:a4:b6:14:ef:0c:73:31:54:ea:18:
d3:43:cc:7f:25:6b:de:25:ab:72:b5:8f:c3:57:ae:43:32:1b:
1f:15:96:70:2e:bb:85:3e:fc:16:2b:3b:f8:17:29:09:71:98:
e3:a7:b9:83:cb:dd:59:a7:d9:05:3a:1d:1d:fd:2a:f6:a7:bb:
b1:f7:f0:06:3b:75:4c:3e:15:56:4c:0b:03:55:b3:14:a1:aa:
9b:89:2a:50:34:44:02:94:62:f8:76:5b:5c:35:cc:ea:2b:a9:
24:9f:5a:c6:a2:2a:51:12:f6:60:cd:13:3b:39:97:46:a9:a3:
1f:21:32:9a:0a:18:76:48:8f:1a:a9:77:4b:0a:3d:30:1e:e2:
1c:c0:69:a1:8d:11:01:27:19:41:1e:d4:ca:ba:bd:eb:d5:08:
60:ec:5a:56:2a:7c:9f:ed:e2:66:5b:af:e7:a7:26:d7:2e:d6:
07:36:a9:40:74:85:38:2b:4f:28:9d:ee:15:c9:30:83:e6:b2:
8a:e0:d0:00:08:bb:a4:54:71:af:f3:94:e6:7f:d2:b6:23:6f:
ed:7a:01:d7:9e:ca:49:2d:ce:d9:5e:bb:fa:9a:8e:14:2f:6a:
3e:70:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:41 2025 by rpki-client