Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85907AAAB89F11ED87AC9FECF1222468.roa
File: 85907AAAB89F11ED87AC9FECF1222468.roa (raw, json)
Hash identifier: i3qYbzbtJviyWXx66cbzRE8qPDtIAGzH6VY1050ANK8=
Subject key identifier: 7F:4E:03:57:F7:51:8E:11:82:E0:A4:3B:5F:81:4C:9F:53:1E:49:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85907AAAB89F11ED87AC9FECF1222468.roa
Signing time: Thu 02 Mar 2023 02:11:20 +0000
ROA not before: Thu 02 Mar 2023 02:11:16 +0000
ROA not after: Sat 10 Feb 2024 02:11:16 +0000
asID: 133199
IP address blocks: 45.207.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7374 (0x1cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:11:16 2023 GMT
Not After : Feb 10 02:11:16 2024 GMT
Subject: CN=640005c8-62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4a:f5:f8:ea:a3:62:f8:09:2e:21:3c:aa:94:
d7:19:6d:a7:45:13:85:6a:b0:f8:90:ab:1a:df:91:
23:5e:77:ef:d9:ed:cb:38:15:22:6e:a2:14:0b:f0:
96:86:54:f8:e7:e6:a2:fa:b6:1b:3c:79:fc:b8:86:
e3:93:4d:d0:fb:0a:02:47:5c:35:5f:56:15:d6:69:
0c:63:21:e0:a3:eb:7b:5b:b4:9c:d2:46:48:d9:e1:
be:a8:c0:ac:de:74:4c:3e:5b:21:f1:11:d7:5f:31:
62:b6:b1:ed:96:56:4a:6b:2b:c8:37:a5:1c:a1:cf:
57:42:f2:e6:8d:d2:1f:1f:8f:e7:87:5d:cf:ea:d6:
6a:fd:b4:ac:a3:b6:84:55:6a:09:3b:64:4c:0c:40:
e4:c6:3f:df:82:5f:69:be:d1:cf:2c:1e:dc:11:31:
c0:15:d4:83:8c:10:7b:f8:9f:d3:2c:52:20:c5:28:
1e:50:41:58:5d:98:f2:87:e1:3f:fa:65:12:34:57:
2f:47:3a:40:02:50:1b:8c:bc:4d:b0:05:6b:29:89:
16:3a:58:46:6b:d1:a9:de:41:32:78:47:81:08:83:
35:0c:5b:6e:96:e6:23:5a:c3:b3:33:79:d1:37:d1:
8b:0a:3e:9c:69:3a:fd:57:65:44:ab:9f:ca:a1:30:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:03:57:F7:51:8E:11:82:E0:A4:3B:5F:81:4C:9F:53:1E:49:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85907AAAB89F11ED87AC9FECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:90:aa:c7:57:d1:e7:0f:d5:62:57:48:dc:7c:84:b5:56:
3f:65:7d:f1:15:6b:1d:49:8a:c0:ee:b6:fe:e4:69:09:25:fa:
f8:15:e0:5d:8f:56:a3:dd:12:fd:c4:c9:31:6f:49:38:40:31:
79:86:a8:73:fa:24:e2:6d:d8:16:a7:3f:17:07:da:e8:32:29:
2c:e4:8b:fa:03:9a:2c:cb:1e:29:3a:f2:a5:7c:17:ff:a5:61:
1b:6d:a7:83:c2:a3:9a:80:d8:b7:d6:61:e0:05:c1:91:ca:35:
a2:20:8e:7a:c4:a5:e0:c0:e4:ce:8b:7b:85:23:a2:4d:71:da:
1b:4a:05:df:12:a6:81:55:db:a1:b9:e3:d8:59:79:65:4f:dd:
bd:d1:3e:ea:c1:d6:46:89:55:c9:c1:af:72:50:e1:50:74:21:
45:1e:a6:35:b4:ff:52:bd:65:e2:d0:52:3f:5c:58:d6:ca:dc:
94:7b:86:60:dd:8d:be:4f:94:f4:48:cb:ca:cc:b1:31:b4:ea:
d6:58:86:af:cc:e7:cc:20:d7:cd:ab:80:67:94:16:f2:7d:f0:
3d:92:c3:3c:a1:59:4b:0e:3b:a2:1f:78:41:99:02:c6:f0:f7:
41:cc:ea:f9:77:a8:55:60:ac:d9:7a:d0:92:d7:11:3e:b8:08:
96:0c:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:51:29 2025 by rpki-client