Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0521D2BEB111EFAD5EAD5E762E951A.roa
File: FA0521D2BEB111EFAD5EAD5E762E951A.roa (raw, json)
Hash identifier: XToFuNlIZr46RsCgFSBShizSY/jdqATXbmwP9DtUASg=
Subject key identifier: B1:79:C8:B7:56:CD:CA:D1:FF:C3:27:F0:3C:32:EF:84:3A:2F:25:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E757
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0521D2BEB111EFAD5EAD5E762E951A.roa
Signing time: Fri 20 Dec 2024 09:08:29 +0000
ROA not before: Fri 20 Dec 2024 09:08:25 +0000
ROA not after: Sat 25 Jan 2025 09:08:25 +0000
asID: 6079
IP address blocks: 45.205.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59223 (0xe757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 09:08:25 2024 GMT
Not After : Jan 25 09:08:25 2025 GMT
Subject: CN=6765340c-0200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:38:54:ba:19:52:93:f1:44:54:b0:e5:5b:
bc:17:7d:7f:f4:3e:9c:27:f4:cf:23:b8:60:28:89:
16:00:71:7e:84:cb:8d:40:0f:cd:55:a6:af:31:24:
7c:45:71:d2:f0:04:f1:52:fc:06:36:b6:76:37:8e:
9e:31:6e:ca:00:f4:74:cf:cf:50:63:01:4f:66:ab:
61:59:8b:3d:20:93:1d:e8:23:18:1e:d3:10:ff:e0:
ca:77:70:3c:d6:99:2d:23:31:3e:8c:5a:2c:e5:27:
19:2d:2a:65:b7:6b:7a:ad:96:5e:01:fc:bc:cb:6a:
70:be:9e:c3:64:3d:7b:3f:a9:c2:0b:b3:b7:e1:22:
2f:26:87:c9:4c:b4:64:f8:10:7f:26:a1:05:64:6d:
7f:50:11:35:c4:3e:99:cc:54:ca:f7:d4:d1:82:f3:
c2:4c:9d:9e:51:7f:2d:92:a0:ed:ea:30:a6:4d:b8:
19:f5:18:d0:2b:c8:34:5b:64:51:30:e6:fc:85:f8:
ed:d4:16:f9:e8:ea:59:a3:d3:40:e7:ff:3d:46:4d:
de:21:09:2b:60:76:3b:84:8a:f8:43:c6:1e:86:d9:
d3:39:ff:f8:07:38:f9:09:9a:58:b8:b6:e9:52:9b:
aa:70:56:12:48:0a:25:88:5c:53:a2:f5:c7:83:77:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:C8:B7:56:CD:CA:D1:FF:C3:27:F0:3C:32:EF:84:3A:2F:25:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0521D2BEB111EFAD5EAD5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7a:c6:16:1f:f0:b9:7d:c6:7c:75:cf:cb:84:f6:ed:b5:dc:
cf:e2:b6:7f:9c:8c:4a:a7:fa:2d:8d:72:33:e3:e1:55:c2:68:
ae:ef:95:3c:7d:71:8d:f2:50:25:03:13:e3:26:ba:5f:c2:9e:
24:74:d7:b3:bf:55:e8:62:da:6e:cd:d1:c2:04:1f:ff:9a:c5:
0a:7f:90:88:50:70:94:4a:31:d7:e0:b3:87:8d:88:d9:fb:f8:
d2:08:cb:4a:cf:be:b7:c0:23:ab:c3:c7:c1:78:51:b9:7c:e7:
f1:8b:be:43:bb:9e:3d:dc:ad:57:d1:e0:90:ad:c9:0c:0b:46:
a0:03:af:78:9a:be:6b:7a:13:52:c7:ff:2c:92:65:32:45:89:
a7:d6:ac:dc:ff:86:35:69:86:64:97:69:e8:93:27:b4:14:9c:
c9:3d:85:26:89:2d:68:8e:9c:d8:29:60:14:ce:74:3f:1f:7c:
97:cb:85:64:71:27:31:01:05:c4:7f:d0:44:22:e3:2b:96:e2:
ef:56:9c:00:e4:f1:9c:75:5c:60:ea:d0:89:68:cf:db:80:bb:
54:15:50:e1:b5:91:7b:05:35:2a:68:ac:fb:be:d4:47:3f:7b:
7a:db:47:88:fb:d1:ea:db:46:eb:d0:3a:5d:2f:29:45:ec:e9:
0a:e9:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:00 2025 by rpki-client