Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96CC4A8F52211EFB22FF76A762E951A.roa
File: F96CC4A8F52211EFB22FF76A762E951A.roa (raw, json)
Hash identifier: DW1TsekFfooF4NNDadnWI3RXEyuNzd5BCQ1PyfdRL8U=
Subject key identifier: 0F:07:29:DF:BC:8D:9B:3E:EC:CD:43:45:E9:F1:BF:6B:14:A0:CB:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013AED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96CC4A8F52211EFB22FF76A762E951A.roa
Signing time: Thu 27 Feb 2025 15:53:23 +0000
ROA not before: Thu 27 Feb 2025 15:53:19 +0000
ROA not after: Fri 04 Apr 2025 15:53:19 +0000
asID: 7018
IP address blocks: 45.202.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80621 (0x13aed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 15:53:19 2025 GMT
Not After : Apr 4 15:53:19 2025 GMT
Subject: CN=67c08a73-e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:21:b4:61:7a:30:e3:16:ad:70:5d:32:b9:
79:2a:cb:15:87:63:29:a1:d7:1d:10:56:26:2a:98:
9a:80:84:2c:7e:e2:34:62:d9:1a:09:51:5f:05:d2:
2a:b2:87:b8:da:03:ee:fd:bf:f2:cc:e8:9f:54:60:
1a:02:36:16:15:2d:8d:3d:b7:be:ac:b3:9e:51:f2:
f8:55:39:94:2c:98:5d:99:91:7f:ba:86:f0:3e:ab:
9a:4e:e6:d2:18:6e:90:90:37:60:90:18:ea:e1:79:
7b:ee:b0:9e:a0:d6:71:4a:70:17:c6:6f:7f:87:7a:
71:97:16:a4:ad:1d:fd:8f:03:3e:3a:f1:d7:2f:f5:
0c:bc:cc:da:0b:af:9f:b5:36:d2:2a:a7:ad:01:2a:
f6:77:0e:b0:ad:1e:e4:38:59:5e:76:50:6a:10:19:
39:8c:3d:d8:89:a4:f8:95:d1:a0:18:23:77:97:a7:
5b:2e:5d:2d:33:62:60:40:55:a6:b1:7a:ca:f7:84:
3d:e9:c9:b4:93:3a:4f:63:7c:b2:57:a8:29:ba:eb:
ef:72:69:c5:b4:81:d5:25:ea:47:77:ad:70:a8:82:
2c:ac:f7:39:ab:ad:d8:ba:52:ba:e3:ce:ee:3f:64:
5c:f3:d5:42:98:d7:9f:f3:e1:ee:3e:ef:a8:ab:be:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:29:DF:BC:8D:9B:3E:EC:CD:43:45:E9:F1:BF:6B:14:A0:CB:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96CC4A8F52211EFB22FF76A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0/20
Signature Algorithm: sha256WithRSAEncryption
65:13:99:7a:4e:d6:d4:14:5b:b0:78:9e:b1:f7:1c:25:02:02:
da:48:92:32:a0:9c:81:0b:7d:85:a3:ae:65:5a:01:c5:44:3a:
93:8d:87:a7:68:69:e7:33:6f:97:dd:80:de:e2:bc:bf:fe:17:
0c:8a:bc:e4:a7:0f:3e:20:c6:55:c4:37:42:db:98:89:e9:e6:
6a:01:4d:aa:ab:28:4c:a9:dc:8c:58:52:ac:10:4f:92:e2:4d:
fb:ba:1d:64:9c:0c:80:55:29:1e:a4:23:2d:3a:d8:c1:eb:47:
89:c7:38:fa:e9:54:bf:c1:8b:7a:eb:25:f7:8a:8b:05:90:1b:
5e:0c:57:3b:b6:e3:f6:7c:6a:c6:38:28:6e:99:d4:20:57:5e:
83:c8:16:a7:1c:24:ad:cb:d7:f1:37:40:0e:02:3a:08:c1:0d:
80:3f:21:b0:58:14:24:1e:de:c2:76:b2:5c:49:ec:31:ab:65:
54:6b:3a:d9:32:0c:45:d9:8a:ae:88:51:8c:8a:ba:1c:31:99:
55:67:a7:be:fe:e3:a8:3c:23:84:2b:22:4e:e5:73:ed:33:5a:
c3:e2:06:83:ac:5f:d8:cd:17:e6:a2:23:58:20:c2:a2:36:f5:
4f:96:11:23:02:71:28:7e:5d:88:b4:db:4f:d0:9e:9a:12:84:
67:e6:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:51 2025 by rpki-client