Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B19115CB89F11ED8AB1C5ECF1222468.roa
File: 9B19115CB89F11ED8AB1C5ECF1222468.roa (raw, json)
Hash identifier: J7sQ25iRlzIAuZk9RlsQTaWLspoCsOwjzwGFrV/lUQQ=
Subject key identifier: 50:1B:34:46:1E:68:7C:DB:3E:F0:BC:07:67:A7:3C:C4:80:F5:3F:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B19115CB89F11ED8AB1C5ECF1222468.roa
Signing time: Thu 02 Mar 2023 02:11:56 +0000
ROA not before: Thu 02 Mar 2023 02:11:52 +0000
ROA not after: Sat 10 Feb 2024 02:11:52 +0000
asID: 133199
IP address blocks: 45.207.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7378 (0x1cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:11:52 2023 GMT
Not After : Feb 10 02:11:52 2024 GMT
Subject: CN=640005ec-cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:77:1a:2a:27:b4:10:ba:68:92:6f:e8:9e:
4f:4f:44:40:86:8a:9a:75:c2:23:52:ec:fa:61:44:
f2:d0:66:2f:fe:8b:8f:21:b8:77:b3:94:5e:8a:93:
54:73:47:21:2e:60:d5:86:1e:65:fc:e6:05:9e:63:
00:ec:ec:63:8a:06:70:e6:ad:c8:92:de:87:18:c9:
64:f8:8b:a2:d9:a4:d9:98:ac:bd:53:4e:5e:91:df:
27:ac:6b:9e:a3:87:f1:8a:8b:af:fe:cf:ac:ac:59:
04:f5:aa:fa:38:88:97:be:4f:b9:82:89:15:91:0c:
e5:5c:55:25:07:e1:fd:e2:79:9f:4c:7a:ea:e4:9a:
51:71:50:cc:bc:44:9f:4d:de:56:b4:46:88:cf:1f:
8d:85:70:27:69:bb:f4:c7:03:4c:42:1a:49:e7:fa:
57:74:b2:ca:b1:4a:a4:43:f7:ff:00:c5:72:b3:d9:
55:3e:28:d8:38:f8:43:34:87:75:9c:c5:f8:30:e2:
bd:d1:78:f4:74:84:74:0e:73:81:d5:d2:97:d6:f0:
47:2d:c5:c1:86:70:c3:e6:02:21:e7:ce:21:e6:d7:
a8:ce:39:c3:a3:4d:62:54:ab:22:6c:61:f8:f9:d3:
d0:1b:45:db:86:ec:7c:80:eb:78:4b:0b:7c:d4:5a:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:34:46:1E:68:7C:DB:3E:F0:BC:07:67:A7:3C:C4:80:F5:3F:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B19115CB89F11ED8AB1C5ECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.54.0/24
Signature Algorithm: sha256WithRSAEncryption
14:18:46:6b:8c:01:a8:17:79:d4:e2:8b:0f:40:f8:ca:ae:24:
25:e6:02:c1:72:b5:d3:3c:09:51:84:98:f3:98:83:8f:64:4f:
fa:a8:49:59:cb:03:97:61:20:38:8b:1b:e6:ab:d6:0f:34:3f:
b1:43:50:c2:eb:17:94:0e:fb:52:bf:45:20:eb:da:37:83:dc:
af:f0:45:97:87:8c:3d:d6:00:5e:7d:0b:7b:ef:d8:00:d9:e3:
67:b4:12:13:73:51:35:a0:2b:cc:8b:3f:15:48:1a:34:8a:34:
ba:16:0a:f9:12:c1:6f:be:81:35:21:09:d8:0a:fd:bf:5b:b8:
22:65:80:64:d5:c9:b4:e7:8e:a7:56:da:67:9d:c4:7a:92:60:
ac:ff:be:e4:ab:1e:5d:91:6c:2d:af:f7:a2:31:16:b9:d5:3a:
c8:1e:9a:20:d5:4b:2c:76:a1:dc:4a:ad:14:31:67:ea:27:70:
7a:a6:f6:cd:c0:39:03:78:6c:6f:18:77:ab:17:3a:e9:e5:91:
40:73:8b:80:0f:dc:fe:c7:08:76:75:6c:42:3d:f6:cc:a0:9e:
12:d3:3a:9e:74:8c:b6:b9:da:24:e3:57:96:49:f0:dc:ae:61:
33:5e:69:2c:ed:39:dc:db:96:40:fd:46:e6:46:10:5a:ca:eb:
fe:f3:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:13:31 2025 by rpki-client