Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F849422EC99C11EF965E31B1762E951A.roa
File: F849422EC99C11EF965E31B1762E951A.roa (raw, json)
Hash identifier: ReeIwcdCS32UTA81qdwCf18Z1LVew4n1C6gYmfE5bKw=
Subject key identifier: 26:4E:A6:FD:F6:C0:F2:55:FF:BB:2D:BD:ED:3F:94:A3:13:5A:79:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F64B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F849422EC99C11EF965E31B1762E951A.roa
Signing time: Fri 03 Jan 2025 06:35:49 +0000
ROA not before: Fri 03 Jan 2025 06:35:45 +0000
ROA not after: Fri 17 Jan 2025 06:35:45 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63051 (0xf64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 06:35:45 2025 GMT
Not After : Jan 17 06:35:45 2025 GMT
Subject: CN=67778545-9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:02:38:03:e7:e1:b7:50:18:a3:b8:d5:f9:
08:c9:c5:de:05:57:52:67:f4:c8:15:68:05:df:c2:
a4:2e:71:0c:97:e8:b2:ab:0b:86:34:5f:6c:26:c0:
d2:d7:cf:5e:a7:90:83:2e:60:2f:a6:2b:94:8a:e3:
e5:28:77:c9:ea:cc:5d:64:84:19:d3:3a:d4:2c:36:
7c:a5:35:cc:9d:4b:3d:5e:b2:5e:89:cb:9f:e6:95:
fc:0e:f7:29:7c:74:38:7e:a2:22:8a:90:4a:c1:00:
a1:dc:4e:da:4d:35:b4:93:6d:ee:7d:3a:7d:75:66:
38:55:6b:03:0d:7d:d9:4f:15:b9:c9:15:76:fd:b5:
bd:12:fd:5b:23:b5:eb:5f:33:87:5d:a2:40:e1:59:
6c:ef:1e:96:e1:ae:c7:e8:74:f5:43:97:36:d0:4f:
cb:1d:25:c3:a6:cd:19:84:06:32:87:3d:29:51:4b:
7d:aa:61:a9:16:b8:c9:c1:db:68:62:c8:fa:dd:bd:
59:22:5e:2c:ed:d4:aa:a7:b2:1d:32:ef:b6:af:5a:
fa:7b:91:e5:ce:dc:5c:2a:b3:4a:44:a4:95:f7:83:
d9:4d:a3:01:11:b9:ff:9c:d5:99:dd:ab:0b:77:43:
3c:65:6c:1b:72:f4:5c:26:01:7f:e1:39:04:66:c9:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:A6:FD:F6:C0:F2:55:FF:BB:2D:BD:ED:3F:94:A3:13:5A:79:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F849422EC99C11EF965E31B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:81:a3:b9:9d:e2:0a:3e:66:a8:58:5e:96:e0:f1:01:30:70:
79:01:24:e5:fb:9f:ca:bf:34:5c:a6:70:ff:bf:97:b3:7c:a1:
ea:ef:7e:6c:04:db:48:0e:d7:62:58:be:67:4e:33:c0:b5:c6:
58:73:6c:d1:d7:4e:38:8a:32:85:c2:9d:d9:57:bf:72:35:d6:
9b:79:d2:73:53:63:03:6a:0a:e9:bb:95:a1:c6:1e:9d:5c:5e:
43:f2:6b:6b:59:8d:24:76:ef:67:ae:0f:ac:dd:89:fa:fc:6c:
5a:c8:9f:ab:82:32:e6:e7:32:9b:0d:be:ba:66:de:56:38:0e:
61:92:ec:79:69:36:b8:35:c3:4c:ae:e0:c3:e4:28:dd:ec:a4:
a7:a2:a6:2c:6b:19:69:4e:9c:d8:ae:2a:18:ed:af:22:f3:09:
76:01:63:db:45:eb:57:83:c6:af:72:b2:e6:6e:86:c5:12:5d:
fe:5c:e9:c1:77:47:0c:40:4f:db:01:55:37:c6:b6:66:7f:75:
4a:85:35:5b:55:df:a3:2c:3b:a7:03:1b:8b:b4:b6:eb:f3:f2:
07:d9:a2:d2:89:1f:ec:24:71:da:8b:0c:fb:6f:fe:56:23:03:
a6:7b:1b:3e:0d:e8:3c:67:c8:19:f1:bf:fc:e7:05:ff:c0:06:
ee:1d:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:13 2025 by rpki-client