Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C81CCB89E11EDB38802EAF1222468.roa
File: B72C81CCB89E11EDB38802EAF1222468.roa (raw, json)
Hash identifier: NHODbCrDQKlwdKEqt2NezfoFsdSK9QFJohq0UzVv23Y=
Subject key identifier: DD:8A:CB:F2:D7:FF:06:F5:5A:3F:0F:0B:64:44:18:37:FB:E0:9C:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C81CCB89E11EDB38802EAF1222468.roa
Signing time: Thu 02 Mar 2023 02:05:34 +0000
ROA not before: Thu 02 Mar 2023 02:05:30 +0000
ROA not after: Sat 10 Feb 2024 02:05:30 +0000
asID: 133199
IP address blocks: 45.207.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7366 (0x1cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:05:30 2023 GMT
Not After : Feb 10 02:05:30 2024 GMT
Subject: CN=6400046e-9dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:58:6c:9f:bc:de:bd:ef:35:55:8b:8f:52:
b4:4f:6a:fa:07:58:22:33:74:c7:6d:a5:53:64:7b:
91:5f:ba:0b:94:19:76:8c:4d:69:25:69:40:72:85:
57:c0:83:2f:ce:36:bc:5f:e6:7d:fe:97:08:54:01:
84:8e:06:93:39:fe:90:ff:78:c8:a5:a9:9d:8b:8e:
5f:af:49:d5:1e:d6:79:1b:fb:b0:e7:e2:54:3f:9e:
20:45:a8:1b:3a:c9:09:dc:b2:1d:40:a6:6f:ea:f2:
c7:e0:3c:56:c7:6b:f7:a5:b6:a5:f2:b1:3f:a5:2e:
51:b9:d8:d9:65:2a:2c:99:f1:29:6a:17:31:db:ab:
f8:84:87:0a:dc:bb:3f:a9:79:51:c9:59:f8:2e:2b:
16:55:34:2e:0d:17:c5:ce:e2:4d:ac:fd:fe:5c:d5:
33:2f:7e:7c:d7:d2:8d:d5:f7:63:27:ca:d7:96:12:
89:6b:6a:f9:19:14:82:19:aa:c3:ca:80:70:fc:f5:
67:9c:07:92:c2:60:31:a9:69:fe:2d:79:0b:89:f1:
26:c1:5c:80:0c:4d:33:8a:6e:f8:52:dc:6d:66:50:
9b:15:a6:e8:22:c8:3b:8e:21:f8:41:4a:5b:4e:3b:
18:bd:07:d5:d3:58:f0:08:ee:49:d3:03:6b:23:38:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:CB:F2:D7:FF:06:F5:5A:3F:0F:0B:64:44:18:37:FB:E0:9C:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C81CCB89E11EDB38802EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.49.0/24
Signature Algorithm: sha256WithRSAEncryption
76:96:b5:f0:ea:dd:45:44:8e:f3:a5:d8:d0:71:34:cc:0f:17:
b6:42:33:8e:a0:f1:5b:55:40:e0:96:34:ec:e1:ca:aa:ea:df:
6a:dc:95:f3:31:0a:69:cf:17:69:fc:87:0c:ba:7f:50:69:69:
35:15:1f:0f:c4:b3:fa:6c:d9:11:f7:73:91:f7:a2:7c:a6:83:
76:4c:40:9f:b2:28:e0:3d:62:75:4e:41:f6:12:11:62:f2:0f:
5d:2c:d1:f7:48:e4:6c:50:04:c4:a5:67:a9:4e:d9:ab:6d:2e:
59:ce:90:88:7e:18:42:fb:e3:4c:16:77:83:de:37:c0:e2:58:
8b:97:b0:bb:d5:66:ff:f7:cf:54:08:e7:af:9d:4b:2c:98:e0:
f1:9f:a1:1d:91:3e:b0:42:4e:c7:18:9e:a9:e2:34:c5:bf:c6:
be:a8:e6:37:7a:df:41:04:be:63:29:86:77:67:e9:02:99:b8:
39:38:d2:83:10:d7:aa:2d:6d:ce:60:dd:0c:5a:68:b6:59:0b:
58:6a:00:c3:ff:77:01:45:0c:78:52:5b:cb:33:ed:76:c8:b8:
58:61:07:04:08:a0:77:11:76:36:9a:3f:bf:20:53:06:e8:09:
31:12:f3:1f:15:c6:e5:97:0b:fc:79:cd:71:b4:78:93:18:a2:
fd:63:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:05:04 2025 by rpki-client