Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0184722B89F11ED9846EBECF1222468.roa
File: A0184722B89F11ED9846EBECF1222468.roa (raw, json)
Hash identifier: Wz6fdy1o3TtWWW97SMYh+7x+xE5bD82psI24OUCqPCY=
Subject key identifier: C0:F0:18:1F:F2:EE:3C:B5:97:13:C8:0F:73:6B:E1:20:D0:A7:7A:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0184722B89F11ED9846EBECF1222468.roa
Signing time: Thu 02 Mar 2023 02:12:04 +0000
ROA not before: Thu 02 Mar 2023 02:12:01 +0000
ROA not after: Sat 10 Feb 2024 02:12:01 +0000
asID: 133199
IP address blocks: 45.207.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7380 (0x1cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:12:01 2023 GMT
Not After : Feb 10 02:12:01 2024 GMT
Subject: CN=640005f4-85d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:af:07:cf:09:53:43:97:a2:e8:61:51:29:
a5:14:fa:ea:52:31:36:7c:34:e4:fe:ca:c4:c3:ab:
ff:78:82:8e:c4:60:30:3b:d9:70:36:78:3b:af:82:
ac:39:20:c9:d8:0b:49:1c:4c:09:7d:9d:37:5a:c5:
96:05:42:0a:7f:df:f8:b7:c6:0d:37:15:38:97:1f:
15:5d:24:69:37:22:23:54:b1:7a:4a:b9:d2:1b:7a:
65:85:55:11:b5:3d:b2:c8:71:88:9b:7f:52:ae:5f:
91:30:fc:7d:4b:ce:a3:ce:dc:00:39:49:d6:47:23:
3b:2f:9d:12:bf:a0:ad:0a:9d:5d:cf:76:c5:7b:30:
85:f5:f4:5f:80:49:6c:20:90:36:49:a2:1b:42:91:
5b:6c:47:1e:75:12:c9:d1:4e:08:d6:6c:47:52:35:
4d:22:c4:76:63:ca:25:11:1d:99:f2:a5:41:b3:46:
3e:b8:b5:11:c9:5b:9b:f0:23:a6:72:e6:85:a0:a9:
2b:93:c8:09:b5:2e:7b:ee:26:5d:f2:eb:01:a1:f1:
08:19:c2:c6:2b:9f:ce:22:48:c5:9a:0c:97:79:59:
b8:64:23:99:f4:90:1f:ca:94:97:3a:6f:ee:01:3e:
68:a6:83:26:56:71:9d:38:ae:ab:5c:ac:50:a0:0e:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F0:18:1F:F2:EE:3C:B5:97:13:C8:0F:73:6B:E1:20:D0:A7:7A:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0184722B89F11ED9846EBECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:81:f1:19:02:9d:37:51:ad:b7:38:70:59:86:42:a0:f6:0d:
de:c2:bd:cd:03:f7:fe:eb:09:1a:5d:41:ae:be:0c:18:ab:26:
d8:d0:ff:23:e9:ae:c2:0f:53:d1:85:04:8d:d8:65:64:a0:6d:
32:32:06:a8:ca:90:50:81:ed:a7:62:29:3a:a0:a1:d4:79:28:
f9:f0:67:2e:24:97:2f:dd:8b:a2:ea:9b:9a:e3:5d:ba:dc:bf:
b6:15:22:6f:59:b8:67:7f:ca:1d:f1:09:42:60:d7:a2:4b:59:
e2:6b:bc:2b:1c:d4:47:ec:ed:73:17:b8:e5:54:4f:8a:a8:a9:
90:50:27:a1:ca:6e:95:bf:8c:0e:07:b2:ea:4e:d9:ab:23:2e:
c6:33:ec:bd:22:af:e7:53:59:f2:d6:f6:c8:72:23:1c:3c:d5:
2c:fa:15:cd:0c:59:44:5e:37:d2:68:8f:d3:20:84:ca:14:a3:
55:3f:35:bd:11:61:e5:5f:64:9d:2e:93:f8:78:c0:96:6c:41:
69:61:16:b7:34:3e:2c:ac:8a:e4:c5:70:03:f2:00:79:f3:32:
86:fd:54:68:d1:a2:90:ea:49:70:99:55:f9:09:3b:cd:87:43:
07:16:5b:35:9b:a6:e6:87:2b:86:37:64:9e:b8:40:6b:21:2d:
d2:e0:28:d4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHNQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDIwMjEyMDFaFw0yNDAyMTAwMjEyMDFaMBgxFjAU
BgNVBAMMDTY0MDAwNWY0LTg1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDANa8HzwlTQ5ei6GFRKaUU+upSMTZ8NOT+ysTDq/94go7EYDA72XA2eDuv
gqw5IMnYC0kcTAl9nTdaxZYFQgp/3/i3xg03FTiXHxVdJGk3IiNUsXpKudIbemWF
VRG1PbLIcYibf1KuX5Ew/H1LzqPO3AA5SdZHIzsvnRK/oK0KnV3PdsV7MIX19F+A
SWwgkDZJohtCkVtsRx51EsnRTgjWbEdSNU0ixHZjyiURHZnypUGzRj64tRHJW5vw
I6Zy5oWgqSuTyAm1LnvuJl3y6wGh8QgZwsYrn84iSMWaDJd5WbhkI5n0kB/KlJc6
b+4BPmimgyZWcZ04rqtcrFCgDs4VAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUwPAY
H/LuPLWXE8gPc2vhINCnejswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0EwMTg0NzIyQjg5RjExRUQ5ODQ2RUJFQ0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzUwDQYJKoZIhvcNAQELBQAD
ggEBALWB8RkCnTdRrbc4cFmGQqD2Dd7Cvc0D9/7rCRpdQa6+DBirJtjQ/yPprsIP
U9GFBI3YZWSgbTIyBqjKkFCB7adiKTqgodR5KPnwZy4kly/di6Lqm5rjXbrcv7YV
Im9ZuGd/yh3xCUJg16JLWeJrvCsc1Efs7XMXuOVUT4qoqZBQJ6HKbpW/jA4HsupO
2asjLsYz7L0ir+dTWfLW9shyIxw81Sz6Fc0MWUReN9Joj9MghMoUo1U/Nb0RYeVf
ZJ0uk/h4wJZsQWlhFrc0PiysiuTFcAPyAHnzMob9VGjRopDqSXCZVfkJO82HQwcW
WzWbpuaHK4Y3ZJ64QGshLdLgKNQ=
-----END CERTIFICATE-----
Generated at Sun May 11 15:33:50 2025 by rpki-client