Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCCF8002CABD11EF911E9D4D762E951A.roa
File: FCCF8002CABD11EF911E9D4D762E951A.roa (raw, json)
Hash identifier: /3O8MJ589+LFRpq5GEi8RleNdw9mZ9jmLCtNdRbP7K0=
Subject key identifier: 03:E4:AE:20:2A:C8:48:D5:03:10:D3:02:8B:50:AB:7A:6E:75:D9:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F708
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCCF8002CABD11EF911E9D4D762E951A.roa
Signing time: Sat 04 Jan 2025 17:04:41 +0000
ROA not before: Sun 05 Jan 2025 17:04:37 +0000
ROA not after: Thu 16 Jan 2025 17:04:37 +0000
asID: 5065
IP address blocks: 45.200.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63240 (0xf708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 17:04:37 2025 GMT
Not After : Jan 16 17:04:37 2025 GMT
Subject: CN=67796a29-f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:5c:7e:b4:1d:a5:ce:ec:8c:96:00:3d:85:
53:06:bd:55:4a:ee:ef:d4:b6:9c:6f:e7:d4:2d:25:
e0:9c:26:46:28:1c:d2:9b:e3:81:bf:12:74:1e:db:
01:61:07:1b:06:33:22:6f:67:2d:7e:7c:78:ad:5b:
97:eb:ba:b1:91:ac:d0:a4:14:7e:40:8c:7c:66:99:
9f:64:91:cc:78:b8:a3:74:4f:f7:a8:dc:40:13:fe:
ef:07:01:af:02:c6:5e:dc:ea:b2:bc:96:94:24:ee:
06:0f:a5:0c:20:73:ea:c1:46:ef:97:62:e0:84:07:
1e:a4:0b:ca:8c:73:d3:da:39:af:85:8f:23:e8:f2:
43:00:48:5a:a1:fd:80:2d:8d:39:fa:e9:77:27:fe:
eb:c8:3e:8a:12:10:c1:0e:2d:c4:ec:bb:39:ed:65:
66:b0:c9:c2:de:61:e1:ea:43:52:bf:ac:65:81:91:
07:b1:d4:c4:3a:2f:74:ed:59:83:5a:94:c8:a8:27:
7c:4e:3e:7e:88:f3:c1:e3:4b:97:71:20:7c:a9:94:
9b:24:71:0d:ba:64:6f:49:73:28:37:63:6c:df:89:
ce:bf:67:6a:bf:f4:de:84:3a:8e:2b:b2:c3:1d:66:
77:7f:fb:3b:b5:dd:9e:c7:8e:f2:5e:2c:14:5c:00:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:AE:20:2A:C8:48:D5:03:10:D3:02:8B:50:AB:7A:6E:75:D9:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCCF8002CABD11EF911E9D4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.152.0/21
Signature Algorithm: sha256WithRSAEncryption
84:e0:26:7d:d2:aa:60:3e:c3:d4:27:9e:50:de:0e:23:87:a1:
30:bf:15:f1:f3:69:57:ff:aa:ab:70:54:76:f2:c2:42:c0:63:
6b:4b:55:d8:61:0c:c6:bc:ae:61:a5:4e:f9:ca:97:cf:1f:d2:
2a:e4:fa:7d:0c:28:b9:97:fa:68:70:e2:7e:3d:5b:1e:da:e0:
32:cf:2c:2f:e0:ff:73:6d:bd:e0:59:6d:89:6e:e7:ca:84:ed:
3e:60:b8:9a:f3:cd:70:03:39:c2:88:4a:43:e0:ec:22:07:41:
99:2a:98:f4:2e:ff:43:22:57:b5:f6:fa:89:af:59:a9:66:f0:
fe:f5:c0:b6:53:01:5c:0e:e0:f3:a7:08:9f:f3:b4:66:b8:fc:
8f:05:bc:c6:88:54:e0:91:30:6f:63:1b:a7:04:a8:b8:6d:6f:
5c:37:26:44:bc:56:da:0b:cc:e8:3a:a1:26:df:43:b7:5c:59:
5e:ae:dd:b9:96:01:2f:fd:25:eb:f4:55:a7:b8:e4:e1:35:9b:
21:67:e7:2b:dc:6a:6b:ec:34:d0:72:72:80:ac:91:c2:71:60:
c9:7e:1c:4b:e2:bf:ae:2a:16:31:27:13:b5:2e:27:1d:41:40:
ef:fe:e4:be:2e:8d:75:ae:e9:95:fb:bd:83:8a:f1:80:08:22:
bb:68:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:12 2025 by rpki-client