![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/074A28903B9711EF8725B681762E951A.roa
File: 074A28903B9711EF8725B681762E951A.roa (raw, json)
Hash identifier: 7MFp8/ELn3tcXimXecFSgc1EGyUZH42/XyEbBpbx4ZU=
Subject key identifier: 64:33:A9:D7:54:7D:A2:01:57:C2:B4:99:3F:F4:0D:99:38:55:13:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 993A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/074A28903B9711EF8725B681762E951A.roa
Signing time: Sat 06 Jul 2024 12:55:32 +0000
ROA not before: Sat 06 Jul 2024 12:55:29 +0000
ROA not after: Thu 08 Aug 2024 12:55:29 +0000
asID: 142032
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39226 (0x993a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:55:29 2024 GMT
Not After : Aug 8 12:55:29 2024 GMT
Subject: CN=66893ec4-3b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:1a:3d:9e:18:28:a4:be:3f:97:b4:5f:6b:
19:a9:ee:2d:98:94:da:db:44:4d:9c:68:f9:4e:83:
92:06:44:1e:1f:5d:f3:d8:35:24:35:ee:e0:d0:bc:
39:e3:77:9f:17:5d:c7:a5:51:28:ac:22:ad:be:75:
3b:d3:ce:c2:b6:0d:2f:89:1f:d7:c2:77:21:c2:94:
91:f1:5e:18:f5:f9:0e:4e:60:a4:f8:39:1f:50:fc:
78:b5:56:df:75:96:cf:fc:6c:cb:f9:32:64:0b:7a:
18:9d:57:62:40:21:55:12:93:e3:a8:4e:ca:dc:60:
2b:bd:0d:d5:57:e0:2d:fd:d3:8c:a0:1a:46:fd:15:
7c:d0:f1:c7:30:d4:8c:32:92:ce:83:1f:55:5c:06:
87:15:0b:6d:cc:f0:6e:a4:b7:19:3a:3b:a9:f0:42:
d6:b3:79:85:cd:83:bc:5b:f3:2d:48:31:b5:cc:75:
58:40:12:02:a7:eb:ef:ce:e2:ae:8a:1a:d6:f0:16:
d5:60:29:7c:0d:f6:cc:45:dd:9c:98:2a:f4:a8:e3:
db:34:c9:15:17:bc:31:35:33:66:aa:f8:3e:af:7f:
dd:46:27:8d:bb:b1:5b:6c:f7:3c:30:fc:cb:dc:e7:
05:e0:0e:93:51:11:cc:54:bb:fd:db:08:4a:db:24:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:A9:D7:54:7D:A2:01:57:C2:B4:99:3F:F4:0D:99:38:55:13:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/074A28903B9711EF8725B681762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
04:78:0c:aa:58:e7:bd:f0:1b:64:eb:ad:a3:7c:ab:f6:9a:8f:
23:8c:c8:a4:22:f4:a0:78:fb:97:9d:53:61:a1:96:2b:c5:81:
fb:45:75:76:e2:fc:1a:23:1e:79:20:e4:d6:6a:e7:79:67:ab:
18:cd:01:3e:58:19:83:85:da:3c:19:b9:83:f6:87:71:6a:6f:
54:ff:0d:6f:ae:be:02:ae:8b:dc:c0:f9:d1:8a:09:82:bd:8c:
8b:75:a0:65:e3:55:cb:4f:a1:0d:2e:66:37:dc:54:3d:2a:e5:
10:23:42:c5:4e:5c:1c:64:fe:37:4b:22:ea:46:ef:2b:8d:8c:
2f:da:2a:fb:e6:e6:68:9b:81:98:c2:01:94:cd:ac:c3:94:6b:
c2:a9:67:ba:10:37:91:a3:6d:af:04:73:b2:68:31:fd:41:d1:
62:fb:e5:cd:a0:fb:aa:ee:4e:70:1c:a7:e7:55:01:59:63:07:
5f:f6:22:89:fa:5c:62:c6:a0:bb:b8:a9:ac:71:2f:73:67:f2:
65:1a:23:03:79:d2:3a:89:a4:34:1f:29:7c:f7:90:71:f7:64:
bf:ff:e5:50:c5:cb:64:7b:07:2c:6e:68:c1:b8:a4:f0:cd:c9:
f2:84:0b:f3:7a:75:ef:59:fe:c6:51:a7:3e:b3:36:bd:f6:c9:
f5:ec:a5:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJk6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA2MTI1NTI5WhcNMjQwODA4MTI1NTI5WjAYMRYw
FAYDVQQDEw02Njg5M2VjNC0zYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqVwaPZ4YKKS+P5e0X2sZqe4tmJTa20RNnGj5ToOSBkQeH13z2DUkNe7g
0Lw543efF13HpVEorCKtvnU7087Ctg0viR/XwnchwpSR8V4Y9fkOTmCk+DkfUPx4
tVbfdZbP/GzL+TJkC3oYnVdiQCFVEpPjqE7K3GArvQ3VV+At/dOMoBpG/RV80PHH
MNSMMpLOgx9VXAaHFQttzPBupLcZOjup8ELWs3mFzYO8W/MtSDG1zHVYQBICp+vv
zuKuihrW8BbVYCl8DfbMRd2cmCr0qOPbNMkVF7wxNTNmqvg+r3/dRieNu7FbbPc8
MPzL3OcF4A6TURHMVLv92whK2yR/EwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGQz
qddUfaIBV8K0mT/0DZk4VRPEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzRBMjg5MDNCOTcxMUVGODcyNUI2ODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQAEeAyqWOe98Btk662jfKv2mo8jjMikIvSgePuXnVNhoZYrxYH7RXV24vwa
Ix55IOTWaud5Z6sYzQE+WBmDhdo8GbmD9odxam9U/w1vrr4CrovcwPnRigmCvYyL
daBl41XLT6ENLmY33FQ9KuUQI0LFTlwcZP43SyLqRu8rjYwv2ir75uZom4GYwgGU
zazDlGvCqWe6EDeRo22vBHOyaDH9QdFi++XNoPuq7k5wHKfnVQFZYwdf9iKJ+lxi
xqC7uKmscS9zZ/JlGiMDedI6iaQ0Hyl895Bx92S//+VQxctkewcsbmjBuKTwzcny
hAvzenXvWf7GUac+sza99sn17KV9
-----END CERTIFICATE-----
Generated at Fri Aug 9 02:55:27 2024 by rpki-client on console-ams.rpki-client.org