Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6F698CCC2411EFBB46F4B5762E951A.roa
File: FE6F698CCC2411EFBB46F4B5762E951A.roa (raw, json)
Hash identifier: PB/WsXX1qCjXnJBn3FbVF11+ZOu5I0IfRF/kN/xYZJU=
Subject key identifier: EF:2F:00:72:AD:CA:68:6A:49:18:86:0D:A8:8E:53:FA:97:BC:3E:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F8C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6F698CCC2411EFBB46F4B5762E951A.roa
Signing time: Mon 06 Jan 2025 11:54:33 +0000
ROA not before: Mon 06 Jan 2025 11:54:29 +0000
ROA not after: Sat 18 Jan 2025 11:54:29 +0000
asID: 151206
IP address blocks: 45.200.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63689 (0xf8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 11:54:29 2025 GMT
Not After : Jan 18 11:54:29 2025 GMT
Subject: CN=677bc479-0510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:08:cd:6f:d7:ff:76:a1:9c:c1:c3:a2:12:
56:91:33:8d:c3:1b:68:91:50:6c:ec:c9:12:6b:b5:
a9:c9:77:ca:d7:49:87:90:9c:38:5d:10:92:e3:ea:
59:40:f4:00:ef:3a:83:e6:83:73:66:bb:fc:c4:53:
24:fb:e7:04:f6:6c:b7:87:82:02:86:a8:4d:e3:fb:
bc:13:ff:cb:62:ed:dd:7c:1c:9f:c9:12:8c:e3:42:
be:b1:8c:3e:9a:c3:91:98:ec:7f:b8:83:98:58:48:
14:d8:96:25:3e:88:02:40:b9:96:88:de:1a:07:fe:
78:39:78:ba:7a:13:26:6b:4e:ad:83:38:be:4e:db:
09:c9:8a:e6:d3:c6:7d:c4:86:4c:ce:5c:3f:0d:45:
92:2f:5a:e5:51:be:91:15:1b:15:47:06:14:2b:d3:
1b:d8:79:84:0a:df:bb:aa:b2:67:5f:4d:c3:14:4c:
cd:48:91:a7:56:f6:d2:20:76:d4:59:fe:b5:df:4c:
f6:74:71:bd:9d:d8:70:ae:3e:f1:22:94:b1:25:e4:
54:d0:34:e8:c6:be:67:6f:83:06:b2:0d:e5:06:11:
e8:9f:35:06:39:55:05:25:89:b5:a9:c7:97:b1:e7:
b7:81:25:73:bb:00:3f:48:b2:2d:33:38:11:94:33:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:00:72:AD:CA:68:6A:49:18:86:0D:A8:8E:53:FA:97:BC:3E:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE6F698CCC2411EFBB46F4B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:45:2d:f1:81:03:f5:fc:6b:65:51:fe:03:17:9f:b7:b0:8a:
53:1c:f0:9d:97:3f:dc:01:cc:9f:cd:d4:c5:28:f7:7b:11:21:
5b:b2:75:cf:24:dc:b4:cd:7e:a1:e2:c9:32:69:a9:84:99:84:
a6:78:a9:23:9e:4d:1e:36:f1:f7:d2:be:ac:50:08:e8:da:20:
48:f6:33:c4:1a:27:93:3f:b4:27:04:c1:f5:11:e2:30:75:ea:
31:4e:5b:d8:b9:23:61:48:d5:b6:f9:26:97:78:61:ba:fb:0a:
03:c5:11:58:41:b5:4e:3b:1e:cd:9f:9a:f4:97:d2:1e:60:04:
b3:83:b3:60:a1:86:35:13:27:34:0d:5b:52:28:ae:9c:c0:f7:
92:0b:6b:71:8f:e5:8d:ba:5c:bc:6b:ce:3d:0e:fd:9d:d6:04:
01:24:1d:6f:26:92:61:eb:f8:52:42:2a:d6:fe:9e:15:80:67:
2e:55:9c:dd:5e:5d:f7:7d:40:f6:b9:ff:36:3d:d4:2a:cb:8d:
a2:8d:01:d3:c3:cd:75:58:be:ed:98:1b:e2:9c:f0:2a:3c:3e:
17:e1:67:af:5f:b6:2c:43:db:6e:d2:d7:65:9e:ee:21:7f:1e:
65:d3:95:fe:1b:5d:1b:98:80:54:58:2d:d3:6e:ad:26:8c:8b:
5a:99:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:29 2025 by rpki-client