Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10885D8834DB11EDBA74E2BAF1222468.roa
File: 10885D8834DB11EDBA74E2BAF1222468.roa (raw, json)
Hash identifier: CSrAj3Ni9QkmQ4EazplPjoae3rxF7/Lj9R18w9Uj+QU=
Subject key identifier: 56:FF:33:02:96:ED:2B:D1:32:D8:35:92:C3:BF:D0:44:58:7D:3F:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10885D8834DB11EDBA74E2BAF1222468.roa
Signing time: Thu 15 Sep 2022 09:45:00 +0000
ROA not before: Thu 15 Sep 2022 09:44:57 +0000
ROA not after: Wed 31 May 2023 09:44:57 +0000
asID: 1239
IP address blocks: 45.200.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6091 (0x17cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 09:44:57 2022 GMT
Not After : May 31 09:44:57 2023 GMT
Subject: CN=6322f41c-ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:2e:35:ab:dc:f8:18:51:a8:f2:f1:1b:ff:
49:6f:d2:26:d4:84:63:4c:55:23:e8:84:f2:9e:74:
4b:49:0f:78:6b:13:e3:b9:63:60:40:6c:64:fb:d7:
22:17:50:39:30:ef:9b:5a:33:df:40:c0:c2:70:67:
0d:32:cc:01:da:c7:43:85:fe:ce:19:1a:d7:06:af:
b1:78:df:b9:cf:9d:30:76:0b:be:83:0b:86:aa:f5:
4f:06:5b:1d:57:f6:10:ea:87:12:e2:a2:ac:d0:41:
f4:82:1b:ba:95:00:a5:45:42:1a:86:85:11:db:f4:
2c:4f:3a:fd:23:b3:70:e1:56:25:e5:e6:47:fa:60:
82:68:00:96:b8:d6:1b:16:53:4c:93:af:8e:6c:64:
67:25:e8:c9:f8:cb:0a:a9:7c:03:88:d7:87:c9:68:
6d:32:9c:b5:3b:13:7d:4d:f6:47:80:cd:14:e9:4a:
98:1a:03:b7:3c:e0:ae:f5:a1:de:4a:57:50:10:4c:
7d:ed:a5:01:02:23:36:7b:12:1a:fd:21:56:55:a2:
52:91:69:3b:04:d7:7c:72:9d:9e:b9:99:b1:80:d1:
7a:ab:83:36:27:8e:61:7f:41:b3:a6:57:11:03:37:
05:18:00:b3:23:68:50:86:2f:1a:19:fe:96:9a:d9:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:33:02:96:ED:2B:D1:32:D8:35:92:C3:BF:D0:44:58:7D:3F:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10885D8834DB11EDBA74E2BAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:13:03:37:b1:f6:a8:bf:cc:ac:a1:49:fc:d7:e8:c8:bb:72:
e4:12:15:3f:de:05:1f:af:a8:fc:6b:75:b0:12:fd:b7:0f:30:
c2:b4:05:95:17:2b:6b:cf:b5:9e:29:de:31:3b:b2:ff:28:f5:
97:68:24:40:9c:1b:7b:66:a0:e6:47:06:ab:0c:31:7c:ca:68:
72:66:f4:0c:77:70:67:10:51:10:a5:82:b2:62:31:e2:24:06:
db:37:fe:3a:be:26:22:f1:96:62:8d:20:18:2e:ad:11:fb:03:
9b:c8:8b:0c:48:13:50:97:a6:75:c4:7c:c2:e2:e2:da:ec:79:
7b:82:83:18:dc:55:ed:8b:7c:b6:f1:72:2a:2d:09:55:64:73:
d4:5b:d3:3c:d6:53:d3:85:c6:cd:68:59:fe:98:32:c9:eb:11:
95:b9:44:bc:5f:74:8a:0d:0c:a7:a6:d4:c5:54:b8:75:61:09:
ab:7a:49:30:20:70:41:26:c8:f9:89:1f:9f:e9:30:94:06:03:
4c:9f:ae:62:d8:90:20:48:3e:7b:b2:bd:43:20:e7:72:40:0b:
8e:0f:32:1d:11:35:53:f8:2c:2f:4a:75:72:2b:f0:22:c7:1d:
a1:fa:cc:89:83:0f:4e:b4:7a:a9:ca:68:90:d4:c3:b8:5c:93:
ab:73:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:23:24 2025 by rpki-client