Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F45EC6B89E11ED9794FAE7F1222468.roa
File: 45F45EC6B89E11ED9794FAE7F1222468.roa (raw, json)
Hash identifier: 8euD0tFXLagD8yQ56c8i/sYiYCP2fiV69sXCkx0Wi2E=
Subject key identifier: C3:F1:A7:16:48:0F:4D:C5:39:AE:0C:13:C3:CE:44:E3:E8:2E:3E:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F45EC6B89E11ED9794FAE7F1222468.roa
Signing time: Thu 02 Mar 2023 02:02:24 +0000
ROA not before: Thu 02 Mar 2023 02:02:20 +0000
ROA not after: Sat 10 Feb 2024 02:02:20 +0000
asID: 133199
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7350 (0x1cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:02:20 2023 GMT
Not After : Feb 10 02:02:20 2024 GMT
Subject: CN=640003b0-ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:fb:48:c8:53:0e:75:9b:25:5f:99:cc:a6:
5c:2c:dc:74:4f:d2:d3:db:f1:cb:91:94:7f:88:a9:
cd:58:e7:4d:1b:f6:ec:c1:8c:a5:d3:db:96:91:d0:
d0:f2:e8:ac:1a:e3:13:dc:09:3b:73:33:cf:ef:2f:
5d:cc:19:57:12:09:ab:ba:39:2f:49:b1:d9:24:56:
19:08:4b:bf:7c:1b:34:7e:0d:57:53:0d:4e:f6:94:
5c:c4:cd:cb:26:cf:98:52:73:05:35:59:ad:09:c3:
56:a6:97:2c:e9:d5:53:ad:7d:f9:57:7b:53:2a:70:
94:12:1c:52:ca:06:c7:20:d3:0c:89:41:5a:6a:a4:
81:e9:78:77:1b:46:41:bf:21:c6:f1:37:e3:e6:6a:
12:dc:58:76:eb:06:35:8c:d3:99:67:cf:a5:3a:19:
ca:b3:19:83:08:75:84:dc:b3:e3:28:25:9b:33:9c:
52:f7:2f:c0:a6:0b:61:dd:ce:2f:19:49:85:37:4d:
62:1c:71:47:0c:a7:e0:d9:2a:b9:31:91:bc:9e:a9:
c6:41:b6:6b:0d:f2:fb:20:19:bf:e9:6d:a1:78:c6:
35:09:b5:49:35:83:4e:dd:85:f4:3c:f2:0b:c7:0f:
12:ca:08:49:dd:fa:b8:b7:ec:74:7a:90:93:60:09:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:A7:16:48:0F:4D:C5:39:AE:0C:13:C3:CE:44:E3:E8:2E:3E:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F45EC6B89E11ED9794FAE7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
16:36:be:69:a1:86:ad:a8:eb:2f:d6:0a:9f:0e:16:16:a1:d6:
34:e2:41:90:01:ab:af:0e:03:0e:82:59:b8:88:4e:c1:be:96:
a0:c3:7c:16:0a:e4:c0:07:1a:53:02:90:9b:e7:ef:8e:e8:90:
13:61:3b:18:78:c0:07:8d:e4:5a:30:9c:f2:57:5e:30:d4:3f:
3e:44:9b:2a:8f:03:75:61:45:5e:8c:93:7d:d2:ca:fd:f9:12:
b3:ed:24:7c:80:4d:1e:be:96:49:7b:60:ce:db:47:e1:02:e5:
2e:2d:f5:81:7e:cc:78:c5:a0:8e:a4:96:e3:58:62:91:d7:e6:
17:4a:c2:7a:c2:c8:7f:e3:1b:ea:c7:48:97:4a:72:82:37:22:
a3:8c:d6:64:1e:75:9d:d8:a7:6d:00:d6:6a:e7:fa:69:95:62:
e5:c2:2f:f7:88:21:39:26:c0:29:2b:13:3d:64:9c:de:8c:7d:
3a:3b:9b:1e:7a:12:5b:da:c4:fc:11:06:36:bf:4a:c6:e1:80:
2e:19:33:35:c8:83:73:a4:61:53:9f:7d:d3:de:b0:7d:f9:34:
75:53:d6:c8:5c:29:54:db:a3:e7:df:f6:1b:64:a2:61:3b:60:
8f:22:bb:ec:1e:0c:9b:22:d7:23:b2:c1:d7:6e:94:f3:da:a4:
c4:fc:54:37
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDIwMjAyMjBaFw0yNDAyMTAwMjAyMjBaMBgxFjAU
BgNVBAMMDTY0MDAwM2IwLWViY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrX/tIyFMOdZslX5nMplws3HRP0tPb8cuRlH+Iqc1Y500b9uzBjKXT25aR
0NDy6Kwa4xPcCTtzM8/vL13MGVcSCau6OS9JsdkkVhkIS798GzR+DVdTDU72lFzE
zcsmz5hScwU1Wa0Jw1amlyzp1VOtfflXe1MqcJQSHFLKBscg0wyJQVpqpIHpeHcb
RkG/IcbxN+PmahLcWHbrBjWM05lnz6U6GcqzGYMIdYTcs+MoJZsznFL3L8CmC2Hd
zi8ZSYU3TWIccUcMp+DZKrkxkbyeqcZBtmsN8vsgGb/pbaF4xjUJtUk1g07dhfQ8
8gvHDxLKCEnd+ri37HR6kJNgCbopAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUw/Gn
FkgPTcU5rgwTw85E4+guPnAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQ1RjQ1RUM2Qjg5RTExRUQ5Nzk0RkFFN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzygwDQYJKoZIhvcNAQELBQAD
ggEBABY2vmmhhq2o6y/WCp8OFhah1jTiQZABq68OAw6CWbiITsG+lqDDfBYK5MAH
GlMCkJvn747okBNhOxh4wAeN5FownPJXXjDUPz5EmyqPA3VhRV6Mk33Syv35ErPt
JHyATR6+lkl7YM7bR+EC5S4t9YF+zHjFoI6kluNYYpHX5hdKwnrCyH/jG+rHSJdK
coI3IqOM1mQedZ3Yp20A1mrn+mmVYuXCL/eIITkmwCkrEz1knN6MfTo7mx56Elva
xPwRBja/SsbhgC4ZMzXIg3OkYVOffdPesH35NHVT1shcKVTbo+ff9htkomE7YI8i
u+weDJsi1yOywddulPPapMT8VDc=
-----END CERTIFICATE-----
Generated at Sun May 11 15:44:50 2025 by rpki-client