Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76DBA4CB89E11EDB71133EAF1222468.roa
File: C76DBA4CB89E11EDB71133EAF1222468.roa (raw, json)
Hash identifier: BGaufD97d3/0sk4i9sLuijTSS0weHO8c8LBM2FIyGVM=
Subject key identifier: BD:84:9F:79:1F:DF:6F:E5:5B:76:77:6C:50:E6:1C:52:0E:0D:05:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76DBA4CB89E11EDB71133EAF1222468.roa
Signing time: Thu 02 Mar 2023 02:06:01 +0000
ROA not before: Thu 02 Mar 2023 02:05:57 +0000
ROA not after: Sat 10 Feb 2024 02:05:57 +0000
asID: 133199
IP address blocks: 45.207.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7370 (0x1cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:05:57 2023 GMT
Not After : Feb 10 02:05:57 2024 GMT
Subject: CN=64000489-c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:9a:8f:0b:73:7f:3b:30:aa:91:ab:e4:3a:
ac:7e:03:57:8a:9e:21:88:95:1c:b8:68:f0:19:9d:
b2:61:b6:53:d9:69:ef:9a:b0:53:05:1b:ce:9f:54:
74:ef:74:13:e4:fa:8e:5d:05:96:f4:19:3f:97:11:
b9:f8:d0:ad:23:9b:ae:b4:f8:98:03:0d:31:f3:36:
ca:ba:d1:0e:8d:5d:e8:6b:be:1f:14:43:8f:a4:67:
f1:e4:f4:9a:cf:c6:32:28:b1:92:8e:0e:9f:68:31:
fd:60:aa:28:32:83:39:67:63:e6:ec:99:da:51:d8:
c8:fe:bc:65:36:d7:b7:ca:dd:2b:4a:70:51:c3:ee:
0b:f2:d4:15:c3:e9:57:c4:5e:b1:58:41:df:f5:5c:
0d:20:bf:1d:06:2b:29:9d:92:81:4c:af:be:73:4b:
fa:f1:11:f0:58:c5:2b:23:c8:06:ad:4f:e9:71:6c:
ef:f3:16:a1:95:e0:5a:1c:76:8a:38:96:1e:cd:a2:
a6:11:85:20:74:32:57:1f:56:b9:a9:0b:84:7a:67:
5d:fb:f3:d6:15:ca:c9:58:56:cd:56:b3:bb:0f:97:
a9:07:e8:ad:51:6c:d3:d4:cf:df:44:80:43:61:09:
4c:84:40:ff:f6:70:77:4e:26:57:44:15:c4:12:a2:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:9F:79:1F:DF:6F:E5:5B:76:77:6C:50:E6:1C:52:0E:0D:05:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76DBA4CB89E11EDB71133EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.51.0/24
Signature Algorithm: sha256WithRSAEncryption
64:74:95:61:ed:0b:b0:b1:04:dd:42:80:69:49:5a:0f:ad:cc:
6e:b6:0c:12:0b:81:c3:de:62:7a:0e:cf:e5:fa:16:ee:1a:a5:
e9:69:d2:dc:ce:c5:a8:60:72:0e:ee:06:47:73:3c:c0:5c:a2:
61:71:92:c4:38:5c:43:1b:58:3f:c0:13:d5:0a:65:f6:e6:1e:
3b:5a:75:e1:df:a8:04:0a:58:7e:a7:99:61:15:20:65:7d:71:
ca:ef:95:e9:24:d1:68:0e:31:f5:bb:d3:51:46:a3:ce:f9:3a:
cc:42:8a:ab:36:5e:ab:dc:59:67:8f:47:0f:80:1b:60:19:1d:
c8:9a:ab:e0:27:f3:c3:27:9d:8a:96:ea:52:4f:f0:f0:1d:ff:
d5:05:60:9c:c3:35:fb:61:12:a6:f3:78:bd:2e:a7:6d:67:76:
89:15:ec:3f:bf:b2:1a:44:75:e1:f9:dd:58:dd:cf:12:14:f7:
58:29:94:8e:e8:0c:8b:f3:b7:bb:a2:ab:1c:85:04:44:b7:22:
40:11:1b:5c:ec:9a:f2:e5:68:c8:c6:4f:8e:47:1e:76:d9:e8:
c3:bb:0e:dd:7f:46:7a:43:7b:98:30:22:0c:ca:4f:4f:0a:b6:
b3:1f:15:fe:4e:de:5e:4e:14:c5:3c:85:70:ef:0d:e4:fe:12:
34:19:9f:db
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICHMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzAzMDIwMjA1NTdaFw0yNDAyMTAwMjA1NTdaMBgxFjAU
BgNVBAMMDTY0MDAwNDg5LWMwYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkxpqPC3N/OzCqkavkOqx+A1eKniGIlRy4aPAZnbJhtlPZae+asFMFG86f
VHTvdBPk+o5dBZb0GT+XEbn40K0jm660+JgDDTHzNsq60Q6NXehrvh8UQ4+kZ/Hk
9JrPxjIosZKODp9oMf1gqigygzlnY+bsmdpR2Mj+vGU217fK3StKcFHD7gvy1BXD
6VfEXrFYQd/1XA0gvx0GKymdkoFMr75zS/rxEfBYxSsjyAatT+lxbO/zFqGV4Foc
doo4lh7NoqYRhSB0MlcfVrmpC4R6Z13789YVyslYVs1Ws7sPl6kH6K1RbNPUz99E
gENhCUyEQP/2cHdOJldEFcQSotwvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvYSf
eR/fb+VbdndsUOYcUg4NBYEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M3NkRCQTRDQjg5RTExRURCNzExMzNFQUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzMwDQYJKoZIhvcNAQELBQAD
ggEBAGR0lWHtC7CxBN1CgGlJWg+tzG62DBILgcPeYnoOz+X6Fu4apelp0tzOxahg
cg7uBkdzPMBcomFxksQ4XEMbWD/AE9UKZfbmHjtadeHfqAQKWH6nmWEVIGV9ccrv
lekk0WgOMfW701FGo875OsxCiqs2XqvcWWePRw+AG2AZHciaq+An88MnnYqW6lJP
8PAd/9UFYJzDNfthEqbzeL0up21ndokV7D+/shpEdeH53VjdzxIU91gplI7oDIvz
t7uiqxyFBES3IkARG1zsmvLlaMjGT45HHnbZ6MO7Dt1/RnpDe5gwIgzKT08KtrMf
Ff5O3l5OFMU8hXDvDeT+EjQZn9s=
-----END CERTIFICATE-----
Generated at Sun May 11 15:11:07 2025 by rpki-client