Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF81E4CAB89D11ED9CAA02E6F1222468.roa
File: CF81E4CAB89D11ED9CAA02E6F1222468.roa (raw, json)
Hash identifier: 4tzZ9HlNSL3i96Ws8jJQFSX8L+xYzIopPhWfzDxpbuI=
Subject key identifier: 7C:14:30:DD:CE:7A:8C:84:98:A4:7F:E6:6B:E4:9C:83:69:02:A0:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF81E4CAB89D11ED9CAA02E6F1222468.roa
Signing time: Thu 02 Mar 2023 01:59:05 +0000
ROA not before: Thu 02 Mar 2023 01:59:02 +0000
ROA not after: Sat 24 Feb 2024 01:59:02 +0000
asID: 133199
IP address blocks: 45.207.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7340 (0x1cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 01:59:02 2023 GMT
Not After : Feb 24 01:59:02 2024 GMT
Subject: CN=640002e9-fe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:75:50:94:e3:40:9b:71:e9:9c:30:11:9e:
f4:8d:e4:cb:9a:f5:28:82:18:63:93:ce:b5:25:c8:
7c:0a:39:37:97:61:d8:37:9b:4e:c0:50:09:cb:eb:
3b:c4:fe:4c:97:e3:62:7f:c4:a1:78:1d:48:f7:bf:
85:41:d3:8b:c8:73:ff:61:39:0e:f9:99:66:52:e7:
c2:b0:3b:92:89:c1:f4:c5:94:7b:e5:39:1a:08:19:
4f:87:70:c2:62:93:25:c3:d2:ec:b0:5e:0f:09:57:
43:d3:a0:f3:ac:55:2a:ad:f2:8c:59:e1:48:15:7a:
c0:39:30:9e:c5:56:a5:99:ad:f3:e1:51:f1:a1:29:
e8:74:43:37:62:26:3d:8f:51:9f:c1:3a:7d:9e:4b:
9f:bc:7c:a9:ef:d1:9a:c2:05:4f:2d:72:05:09:2b:
fc:8b:59:62:e0:48:5a:4b:11:2d:ca:af:16:c4:4e:
3b:c9:d0:de:22:b2:8c:a5:ed:9f:9c:db:51:21:24:
b8:d1:87:fa:b2:74:ac:e6:b6:13:7d:b6:46:2e:6d:
9e:0d:73:9e:98:58:68:cd:e6:c1:9f:f1:ba:25:23:
75:14:a7:30:f2:56:3b:4f:ca:bf:a7:eb:7e:ad:1b:
3f:e5:6e:19:10:bb:3a:20:88:96:b3:27:17:e2:cd:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:30:DD:CE:7A:8C:84:98:A4:7F:E6:6B:E4:9C:83:69:02:A0:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF81E4CAB89D11ED9CAA02E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:77:47:22:dd:8d:cc:c9:94:87:c7:d8:ca:99:48:98:c7:c1:
d2:51:70:ed:87:f5:6b:6d:d7:c9:ed:86:d4:69:d9:ba:1e:b6:
24:8d:ff:0f:ce:18:56:5f:64:c9:91:34:e0:d3:b8:44:be:7e:
66:f3:9a:e2:63:97:0d:a6:11:89:11:e2:38:5d:c1:7a:60:28:
06:95:63:48:31:db:15:8e:d3:03:7d:80:b0:b9:f4:75:24:42:
60:01:be:ad:29:5c:a4:cb:8a:7e:4b:33:74:5c:f2:52:38:4b:
63:98:e9:e6:c2:4b:56:0f:55:d8:fb:59:fb:14:cb:1c:c6:df:
61:14:26:18:db:03:1b:08:b8:ee:b9:ba:e5:6c:79:43:7b:99:
42:4d:c3:2e:80:73:25:9e:9a:c9:71:ee:02:c8:6d:0e:62:43:
77:0f:b8:d5:a5:0d:2a:96:f3:1a:95:42:c3:c7:04:dc:a2:fc:
dd:00:c1:8a:6a:19:37:ca:36:fe:5e:56:d8:93:5c:9d:b9:c8:
19:c0:3b:ff:26:65:14:e4:df:8c:8e:92:42:fc:ba:24:0c:b5:
84:66:eb:8e:e4:23:fd:9b:fa:51:7e:2a:7e:de:91:06:13:16:
1a:c1:38:63:64:36:eb:2f:6f:d7:0d:7a:96:14:1b:40:41:65:
71:da:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:11:46 2025 by rpki-client