Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B79A90B89F11ED9BB8FFECF1222468.roa
File: A8B79A90B89F11ED9BB8FFECF1222468.roa (raw, json)
Hash identifier: 7V90i+bjhx0lXVIfL4/htgCb7Y9i6so/h7FjBJDjdlY=
Subject key identifier: CE:E1:4E:64:82:3B:1B:4F:E0:6F:1D:85:39:B3:DF:6C:F8:23:88:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B79A90B89F11ED9BB8FFECF1222468.roa
Signing time: Thu 02 Mar 2023 02:12:19 +0000
ROA not before: Thu 02 Mar 2023 02:12:15 +0000
ROA not after: Sat 10 Feb 2024 02:12:15 +0000
asID: 133199
IP address blocks: 45.207.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7382 (0x1cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:12:15 2023 GMT
Not After : Feb 10 02:12:15 2024 GMT
Subject: CN=64000603-2028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:d0:ba:47:9d:f9:0c:44:1b:7f:e1:4d:fe:
32:8a:d7:b7:61:d5:14:c3:30:23:37:8d:41:28:19:
7c:8d:c5:e9:ef:2b:30:5f:3e:37:1e:97:2f:f1:f1:
e3:47:c4:3c:e5:57:10:4d:0c:d7:d2:f4:10:67:a6:
4a:3e:a6:98:b8:2f:55:22:b9:7d:10:16:ca:0d:6b:
b9:5e:55:70:40:ec:dd:08:52:7f:c0:7a:5e:94:10:
07:13:6d:fa:f2:a2:dc:0b:0e:f2:02:2a:8e:fd:7a:
6f:84:5e:b6:84:e6:e5:85:11:6d:fd:5b:ec:f1:cd:
86:bf:dc:7d:db:9e:06:b5:bd:92:b6:ef:d7:f7:87:
4b:a1:5d:93:66:e2:5c:99:06:54:cf:5c:82:e7:10:
d6:ec:d2:68:bf:08:50:39:9a:99:7c:b0:a1:89:ff:
aa:4c:0b:98:9f:ba:ac:47:7b:57:30:29:8b:c7:55:
dd:9f:fa:66:07:00:aa:33:db:a0:40:96:8f:10:e1:
5e:7d:46:d3:e0:40:78:49:52:e5:e0:7a:c3:21:1a:
c3:73:d2:ad:fd:92:59:8a:d1:b1:b1:ca:1d:21:dc:
fb:00:37:05:f1:1e:ef:aa:2d:18:e0:bb:5c:93:9b:
14:d1:db:6b:ee:84:27:b5:4c:d6:cf:c9:32:80:70:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:4E:64:82:3B:1B:4F:E0:6F:1D:85:39:B3:DF:6C:F8:23:88:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B79A90B89F11ED9BB8FFECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:36:59:8f:64:9e:6b:77:9b:31:81:41:31:3c:c0:9d:19:
86:37:27:67:21:37:58:71:65:31:fd:5e:b7:54:4b:8b:51:42:
fe:79:9b:b5:b2:55:e0:2f:04:f7:9d:55:2c:ba:12:7b:12:5d:
04:8f:da:bf:3c:34:e7:bd:b8:1a:0a:b4:0c:ee:09:45:e0:c8:
73:a4:bb:e2:b5:ff:6a:92:fe:0d:a5:12:4c:52:f8:b5:15:cf:
29:e3:5c:01:59:fc:ea:f2:82:55:88:9f:01:76:c6:72:1e:e1:
d2:32:02:15:9c:75:b6:b8:5f:9e:3a:51:0c:dc:61:e4:de:ab:
f6:65:22:70:52:25:6f:0e:6a:75:85:68:b0:23:ae:f8:94:54:
6f:f3:47:35:6b:ba:ea:55:18:1d:10:60:f7:62:0d:13:b3:a1:
ca:75:1a:65:9e:48:9f:ee:a5:45:15:51:78:b8:68:dc:78:ac:
6f:5c:19:70:68:28:f9:27:1f:fd:c4:ba:95:72:a6:dd:ad:4e:
0d:89:d4:c9:42:36:8d:dc:f2:96:78:dd:03:27:4c:3d:03:aa:
5a:0e:8a:98:91:6f:49:28:6a:11:1d:54:3e:5d:46:ff:d1:8e:
66:60:ff:99:aa:e7:7a:8d:3d:91:4e:f3:20:d8:4a:a1:50:31:
21:17:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:12:58 2025 by rpki-client