Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D9E9F4B89E11EDA0CD01E7F1222468.roa
File: 01D9E9F4B89E11EDA0CD01E7F1222468.roa (raw, json)
Hash identifier: IIkeb+WREUO/JD79e16H07IbH0Fh/kP6PbnP6V9iUzk=
Subject key identifier: 77:36:50:AC:8D:B6:4A:5C:D3:1A:5A:9E:3F:3A:15:73:F7:3D:F5:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D9E9F4B89E11EDA0CD01E7F1222468.roa
Signing time: Thu 02 Mar 2023 02:00:29 +0000
ROA not before: Thu 02 Mar 2023 02:00:26 +0000
ROA not after: Sat 10 Feb 2024 02:00:26 +0000
asID: 133199
IP address blocks: 45.207.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7348 (0x1cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:00:26 2023 GMT
Not After : Feb 10 02:00:26 2024 GMT
Subject: CN=6400033d-e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:f9:f5:73:e6:37:ce:2d:cb:03:2f:06:33:
56:d9:8d:7e:ae:1c:01:ff:95:22:e0:31:ef:12:a9:
68:05:fd:be:f6:47:ef:65:dd:08:f8:f8:8b:17:71:
4a:24:8d:8d:ab:cb:36:08:9c:00:7c:de:b0:f6:dd:
8a:de:1d:0a:fe:8e:49:0c:74:a3:b5:88:c9:35:8f:
c2:e4:ae:18:e1:18:39:18:cb:6d:50:5a:72:9f:44:
bd:2b:ce:af:fc:36:bf:79:4c:f2:0b:2c:25:c1:df:
d8:74:70:bd:8e:57:f5:ba:8a:f1:28:10:f8:8a:be:
c5:ad:c1:02:db:db:f1:27:70:35:fb:fb:85:f6:0d:
b2:9a:00:01:2c:5d:16:32:66:4f:fc:29:60:59:da:
13:23:4b:17:a1:1c:b3:aa:ea:fe:55:de:44:2d:5c:
23:2f:98:ae:69:8d:25:05:a6:4c:0c:56:4b:57:2f:
3f:51:73:66:eb:7d:3f:f9:b3:09:17:dc:6d:da:a8:
fd:b8:ca:ae:5f:a2:c6:50:74:22:4a:3f:c7:e6:bb:
72:b0:ae:ac:ef:c4:7e:58:60:b7:1b:9c:fc:86:8a:
c0:ad:d4:8a:dd:f6:a1:c0:63:1d:1a:10:f7:af:13:
65:b8:fe:24:b4:c3:d7:96:16:ed:22:a0:bf:a3:b2:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:50:AC:8D:B6:4A:5C:D3:1A:5A:9E:3F:3A:15:73:F7:3D:F5:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01D9E9F4B89E11EDA0CD01E7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:71:06:8c:38:a5:03:0a:7e:df:fc:1e:82:13:10:85:8d:10:
be:f8:f7:bd:3c:a2:75:27:b3:98:63:38:73:e1:f9:4d:0a:8b:
af:95:7d:fb:78:2e:1c:51:ab:e2:b3:e1:b8:26:31:af:91:44:
d5:9e:99:5f:ef:81:6d:10:36:94:4b:02:8c:77:2e:aa:d8:07:
f9:9d:50:96:2f:c6:09:4b:1c:3c:22:a6:77:bc:d1:7b:c8:d7:
5a:40:07:c9:8a:83:e0:38:4e:d9:92:80:ad:ec:e0:a9:58:ee:
df:ce:12:4a:79:0e:1b:4f:69:fb:b3:49:75:a7:79:e2:ff:a8:
37:7b:b5:f5:5d:bb:aa:f3:1b:42:04:16:db:75:35:b5:e3:f5:
13:52:fb:5e:5b:09:a5:0a:85:46:4c:bc:a8:c7:71:7d:f0:da:
a7:96:24:22:38:7b:77:5c:b4:17:be:92:f1:a5:0c:f2:21:17:
10:18:25:4d:51:45:e8:2a:fd:38:c7:cc:02:dd:19:5f:61:01:
76:24:e0:74:66:35:be:ee:b4:67:d4:4e:64:85:f1:96:fc:76:
1f:a5:2a:c7:17:c3:5a:bf:70:04:7b:e8:02:71:ac:1d:5b:8f:
06:a3:7f:c9:1b:73:0d:81:38:f3:66:74:07:de:08:91:ee:81:
7f:dd:21:68
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHLQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDIwMjAwMjZaFw0yNDAyMTAwMjAwMjZaMBgxFjAU
BgNVBAMMDTY0MDAwMzNkLWU4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDw1vn1c+Y3zi3LAy8GM1bZjX6uHAH/lSLgMe8SqWgF/b72R+9l3Qj4+IsX
cUokjY2ryzYInAB83rD23YreHQr+jkkMdKO1iMk1j8LkrhjhGDkYy21QWnKfRL0r
zq/8Nr95TPILLCXB39h0cL2OV/W6ivEoEPiKvsWtwQLb2/EncDX7+4X2DbKaAAEs
XRYyZk/8KWBZ2hMjSxehHLOq6v5V3kQtXCMvmK5pjSUFpkwMVktXLz9Rc2brfT/5
swkX3G3aqP24yq5fosZQdCJKP8fmu3KwrqzvxH5YYLcbnPyGisCt1Ird9qHAYx0a
EPevE2W4/iS0w9eWFu0ioL+jsh9rAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUdzZQ
rI22SlzTGlqePzoVc/c99XwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzAxRDlFOUY0Qjg5RTExRURBMENEMDFFN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzyYwDQYJKoZIhvcNAQELBQAD
ggEBABxxBow4pQMKft/8HoITEIWNEL749708onUns5hjOHPh+U0Ki6+Vfft4LhxR
q+Kz4bgmMa+RRNWemV/vgW0QNpRLAox3LqrYB/mdUJYvxglLHDwipne80XvI11pA
B8mKg+A4TtmSgK3s4KlY7t/OEkp5DhtPafuzSXWneeL/qDd7tfVdu6rzG0IEFtt1
NbXj9RNS+15bCaUKhUZMvKjHcX3w2qeWJCI4e3dctBe+kvGlDPIhFxAYJU1RRegq
/TjHzALdGV9hAXYk4HRmNb7utGfUTmSF8Zb8dh+lKscXw1q/cAR76AJxrB1bjwaj
f8kbcw2BOPNmdAfeCJHugX/dIWg=
-----END CERTIFICATE-----
Generated at Sun May 11 14:58:47 2025 by rpki-client