Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECF9352B89E11ED97B3E8E9F1222468.roa
File: AECF9352B89E11ED97B3E8E9F1222468.roa (raw, json)
Hash identifier: rwhTWmho6ts8spbX3YCRf9tCa16/X1YUQRP+9omvBgk=
Subject key identifier: F3:5E:22:9D:3B:A1:DA:A3:13:A6:23:69:F2:4A:F2:84:F3:A5:2E:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECF9352B89E11ED97B3E8E9F1222468.roa
Signing time: Thu 02 Mar 2023 02:05:20 +0000
ROA not before: Thu 02 Mar 2023 02:05:16 +0000
ROA not after: Sat 10 Feb 2024 02:05:16 +0000
asID: 133199
IP address blocks: 45.207.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7364 (0x1cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:05:16 2023 GMT
Not After : Feb 10 02:05:16 2024 GMT
Subject: CN=6400045f-a098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:a8:d0:5e:0e:dd:33:e8:07:5a:6d:16:8d:
59:52:03:cf:cb:4e:31:1d:25:b6:ea:25:55:17:84:
2e:34:6a:20:7a:a8:a3:7c:f2:7a:a4:7f:3e:70:c0:
64:16:30:0f:17:87:c4:be:40:fb:cb:28:0f:8e:b7:
20:6f:e3:7c:2f:4f:56:66:bb:c0:23:1a:e2:2b:00:
00:66:0f:d1:d3:4e:3c:de:cb:f0:f7:20:fd:d1:75:
5d:3f:9e:f7:36:74:e8:7a:3d:72:33:48:a7:fa:94:
cf:3a:d1:8f:51:89:27:e7:46:80:13:10:8c:b5:95:
3d:df:a1:13:a5:86:2c:56:b9:b9:93:6e:9e:50:ea:
08:7e:88:03:48:96:32:59:04:96:21:15:d3:c8:eb:
16:bd:95:b8:22:96:5d:93:b2:f7:90:fb:59:58:80:
40:53:06:a0:30:71:46:fa:18:d1:4f:37:1c:07:2a:
f6:88:21:ce:94:ac:ff:48:09:88:9c:d7:91:0b:21:
cf:83:e3:20:41:5e:e6:ef:1c:d7:11:75:cc:8f:53:
14:ad:fd:38:b4:71:af:13:f7:d8:86:cb:8d:bf:3c:
1e:99:f3:91:a4:7a:83:51:54:1d:36:fc:36:cc:75:
c9:89:58:4e:69:1f:f0:29:30:ee:5d:46:b8:cc:f1:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:22:9D:3B:A1:DA:A3:13:A6:23:69:F2:4A:F2:84:F3:A5:2E:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AECF9352B89E11ED97B3E8E9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.47.0/24
Signature Algorithm: sha256WithRSAEncryption
41:16:2a:17:15:29:63:bf:01:b7:3b:d3:dd:b4:f5:46:ae:b1:
45:7a:9e:d3:14:0a:a3:56:2f:d7:17:2d:55:b5:64:02:2e:6a:
e7:21:b5:d3:9b:59:e0:c9:c7:3f:7d:fd:92:4a:97:14:b7:c9:
b0:94:79:45:a1:27:3f:5f:cc:dc:d3:c7:d4:4f:62:a7:e1:9c:
ce:11:65:1e:de:77:5e:c0:16:ec:22:46:90:08:dc:9d:54:ba:
42:11:76:c8:ed:53:76:45:59:00:c4:c8:1b:08:30:73:ea:52:
02:6c:c6:da:16:77:7a:f3:ee:fa:e9:62:fe:c9:64:cc:4f:4b:
88:3b:12:e8:be:f7:57:c0:73:1e:a9:21:b9:0c:80:ab:65:09:
f1:d9:b0:2d:bb:e0:c9:fb:b7:74:c0:1d:a5:f2:6b:cf:ee:1e:
02:ad:95:fe:04:ec:2f:fa:6d:77:58:b3:e3:2e:a4:26:7f:8c:
e3:88:38:05:53:d9:01:69:16:f3:cd:5f:06:26:a3:57:1a:40:
06:6f:b5:23:a9:ae:42:c7:26:8d:9c:83:d5:5f:f0:ea:cf:0d:
c2:81:38:6f:77:e5:9e:5f:8d:a3:85:25:43:c8:66:eb:01:64:
15:b0:ab:c6:e4:87:5f:e6:e3:fb:90:cf:13:07:ff:b1:a8:35:
ef:92:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:38:17 2025 by rpki-client