Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/911FE02CB89F11EDBAADB3ECF1222468.roa
File: 911FE02CB89F11EDBAADB3ECF1222468.roa (raw, json)
Hash identifier: 6FqVbYQjA/jWa+0+RO+Mnee5TBVRf0viwiIWsVQ98rk=
Subject key identifier: 42:93:08:A5:33:4A:43:C4:45:70:FB:52:4B:B6:9A:EA:51:E0:60:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/911FE02CB89F11EDBAADB3ECF1222468.roa
Signing time: Thu 02 Mar 2023 02:11:39 +0000
ROA not before: Thu 02 Mar 2023 02:11:36 +0000
ROA not after: Sat 10 Feb 2024 02:11:36 +0000
asID: 133199
IP address blocks: 45.207.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7376 (0x1cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:11:36 2023 GMT
Not After : Feb 10 02:11:36 2024 GMT
Subject: CN=640005db-1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:1b:48:06:af:75:5d:3d:92:e5:c0:13:df:
02:83:d3:da:4c:ef:76:27:19:b7:23:e5:b0:cd:cb:
6c:9d:70:47:a6:4e:d6:55:3e:05:e1:e6:66:99:84:
01:ec:50:17:65:71:36:3d:52:11:88:ff:1c:db:0b:
3b:8f:73:8c:ed:f9:ee:67:26:ad:c3:bd:88:82:10:
1d:0b:ac:4e:48:83:a8:52:c3:cf:db:43:fc:7b:a1:
3c:9c:53:c5:d1:58:5e:5b:01:67:10:74:60:09:1e:
21:03:d9:0e:aa:71:5e:1b:64:21:ef:6c:6c:76:99:
d1:94:d3:88:be:15:64:bf:08:28:d8:90:da:40:24:
7f:d3:de:5b:95:4e:ec:d2:81:cd:eb:81:e4:f8:02:
e2:28:1c:bc:d6:4a:40:c1:32:70:25:dc:6c:19:88:
06:ac:72:c9:74:80:f5:a9:17:35:43:20:6d:e2:25:
c2:cc:6f:2b:1d:c1:8c:b0:1d:77:d1:38:72:3c:41:
01:a6:ca:24:f5:49:64:6c:7b:3b:34:77:88:7b:8b:
91:80:a5:a5:25:19:b4:f4:b5:c5:af:1a:4f:fe:d0:
c3:4d:93:89:9d:82:df:5a:f2:3b:24:80:40:63:c6:
cd:13:aa:c0:28:37:d7:7b:40:c9:ae:87:b6:f3:b8:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:08:A5:33:4A:43:C4:45:70:FB:52:4B:B6:9A:EA:51:E0:60:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/911FE02CB89F11EDBAADB3ECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d3:f0:10:b5:fb:f7:78:d1:ad:fc:18:99:d6:de:e7:dd:e3:
c4:10:a1:6d:ec:08:33:c7:ae:2a:b6:8f:a4:be:07:d9:a2:40:
bf:ce:22:2f:32:ba:10:0b:a6:a2:a6:f0:24:ab:d8:ad:d7:e5:
2a:16:a3:45:e5:83:c2:12:84:3e:5f:27:8b:5f:94:df:29:16:
38:57:fc:ba:b0:f8:91:b0:e3:de:b5:2a:36:6e:02:df:c4:47:
af:f4:23:6e:6b:57:36:2a:d7:8e:2a:df:96:3c:4d:49:1f:b1:
04:7f:3e:45:64:c3:9e:fd:63:67:32:03:b0:14:28:a2:34:4f:
7a:b2:72:7c:b3:ec:5c:73:34:95:09:12:21:28:91:26:91:04:
bc:26:94:55:87:d3:66:10:59:11:3a:3b:eb:a1:17:2d:00:07:
15:a0:12:07:ab:40:2e:aa:07:dc:cf:e1:3a:05:65:56:56:2b:
37:ca:b2:43:a6:33:d8:5f:b4:d4:23:c4:28:2c:31:6f:c9:0f:
7a:e2:e6:7c:3e:38:d3:4e:18:06:87:79:9c:2a:b2:ac:f7:28:
d7:0d:65:51:0b:46:fa:2f:b5:59:58:c3:1c:4a:4f:3a:af:1f:
e3:26:b4:09:90:89:60:9f:93:39:fe:3b:6b:b7:19:fd:e6:b1:
5a:5c:fc:3f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHNAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDIwMjExMzZaFw0yNDAyMTAwMjExMzZaMBgxFjAU
BgNVBAMMDTY0MDAwNWRiLTFlMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC32htIBq91XT2S5cAT3wKD09pM73YnGbcj5bDNy2ydcEemTtZVPgXh5maZ
hAHsUBdlcTY9UhGI/xzbCzuPc4zt+e5nJq3DvYiCEB0LrE5Ig6hSw8/bQ/x7oTyc
U8XRWF5bAWcQdGAJHiED2Q6qcV4bZCHvbGx2mdGU04i+FWS/CCjYkNpAJH/T3luV
TuzSgc3rgeT4AuIoHLzWSkDBMnAl3GwZiAascsl0gPWpFzVDIG3iJcLMbysdwYyw
HXfROHI8QQGmyiT1SWRsezs0d4h7i5GApaUlGbT0tcWvGk/+0MNNk4mdgt9a8jsk
gEBjxs0TqsAoN9d7QMmuh7bzuBIzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQpMI
pTNKQ8RFcPtSS7aa6lHgYPEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzkxMUZFMDJDQjg5RjExRURCQUFEQjNFQ0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzcwDQYJKoZIhvcNAQELBQAD
ggEBAC7T8BC1+/d40a38GJnW3ufd48QQoW3sCDPHriq2j6S+B9miQL/OIi8yuhAL
pqKm8CSr2K3X5SoWo0Xlg8IShD5fJ4tflN8pFjhX/Lqw+JGw4961KjZuAt/ER6/0
I25rVzYq144q35Y8TUkfsQR/PkVkw579Y2cyA7AUKKI0T3qycnyz7FxzNJUJEiEo
kSaRBLwmlFWH02YQWRE6O+uhFy0ABxWgEgerQC6qB9zP4ToFZVZWKzfKskOmM9hf
tNQjxCgsMW/JD3ri5nw+ONNOGAaHeZwqsqz3KNcNZVELRvovtVlYwxxKTzqvH+Mm
tAmQiWCfkzn+O2u3Gf3msVpc/D8=
-----END CERTIFICATE-----
Generated at Sun May 11 15:22:48 2025 by rpki-client