Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B47866CB89E11EDB80195E8F1222468.roa
File: 6B47866CB89E11EDB80195E8F1222468.roa (raw, json)
Hash identifier: 6UeeCZC5E08i5+FrUjwNYVM/Jk8gD4km0heqnQlyVoU=
Subject key identifier: BC:89:56:2A:50:2F:9D:CA:46:AC:57:EE:51:C6:F1:6F:3D:E1:40:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B47866CB89E11EDB80195E8F1222468.roa
Signing time: Thu 02 Mar 2023 02:03:26 +0000
ROA not before: Thu 02 Mar 2023 02:03:22 +0000
ROA not after: Sat 10 Feb 2024 02:03:22 +0000
asID: 133199
IP address blocks: 45.207.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7360 (0x1cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:03:22 2023 GMT
Not After : Feb 10 02:03:22 2024 GMT
Subject: CN=640003ee-b98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:3c:95:f1:c4:59:34:0a:60:33:4c:64:ea:
9f:3e:ee:ff:d0:63:54:d1:dc:ec:2d:e9:31:c4:9a:
45:e3:90:c9:36:1d:d2:a8:ae:7c:57:a1:0f:f8:62:
80:f5:ab:98:04:98:02:54:30:0c:59:c0:60:fd:73:
1d:32:c1:eb:af:14:fb:2c:f6:3d:43:16:4a:bc:4f:
5d:6b:79:6b:91:a4:62:29:ad:2b:e3:d8:1d:46:5a:
32:59:22:64:60:57:cf:9b:ae:1e:74:b4:75:8c:63:
bd:bc:a2:0c:a9:52:05:ab:b8:65:97:21:d4:b7:19:
a8:52:7b:77:e6:94:e7:8d:5d:5c:23:18:f5:24:e7:
5f:0e:4c:ed:d8:6e:55:d4:c5:c8:39:6f:54:db:c4:
73:88:ad:50:15:d4:1f:85:75:ff:8f:12:7a:64:0a:
73:59:48:2a:ec:e3:a6:80:30:a7:ed:61:3c:eb:e6:
17:f7:db:5c:8e:55:fc:ca:6e:65:07:58:75:87:1f:
af:9c:d6:8b:13:3f:0b:88:2d:24:64:8b:86:db:43:
01:66:b5:88:af:b9:5e:6f:26:cb:54:65:73:22:26:
f7:85:94:6d:ef:2c:d3:25:3b:be:1a:5a:ed:d2:8d:
7b:e1:81:38:1d:58:6a:6f:f9:d2:ba:83:4b:97:55:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:56:2A:50:2F:9D:CA:46:AC:57:EE:51:C6:F1:6F:3D:E1:40:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B47866CB89E11EDB80195E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.45.0/24
Signature Algorithm: sha256WithRSAEncryption
78:86:3f:a9:04:82:97:a4:42:fb:97:fb:15:31:59:a6:0c:31:
87:4d:0a:fc:4d:af:4f:93:ba:16:a9:29:02:04:f8:de:82:6d:
37:a5:a9:b5:5f:f5:cc:9c:10:bf:b2:82:b2:a7:de:16:8d:d1:
a3:c3:a6:fa:4f:5a:78:fa:32:18:99:69:44:29:6f:ef:b8:22:
1b:58:38:02:a4:49:d4:a6:a6:34:7a:12:3d:dd:5f:3e:d8:f4:
5e:56:4a:b6:8a:c2:6c:5b:ac:81:e4:2f:f3:1f:b1:52:99:72:
75:a5:66:95:0d:1c:4f:4a:4b:d1:8c:0c:8d:db:64:d0:5e:3f:
31:2e:40:c6:bd:2c:ef:ac:47:52:17:57:c1:81:17:2e:dc:2a:
fa:8c:5e:a1:0d:87:27:22:98:8f:82:05:23:fd:f0:d5:da:be:
ba:67:51:21:05:05:87:6d:a3:03:f1:81:f3:cf:7b:6b:81:06:
93:0f:e8:7f:4b:c7:1a:a5:3e:90:5b:33:9d:24:9f:74:ff:b0:
3a:bf:24:98:db:62:69:76:b1:23:41:dd:38:e5:9c:cb:e5:87:
70:85:a2:ab:0c:21:d3:45:89:ac:45:e8:7d:78:28:98:ff:c4:
15:0c:c2:a2:cf:ff:8a:6e:d0:ec:e8:bb:8d:ed:71:a6:37:09:
80:5e:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:56:10 2025 by rpki-client