Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8DB2BC6B89D11ED856338E6F1222468.roa
File: D8DB2BC6B89D11ED856338E6F1222468.roa (raw, json)
Hash identifier: BVLeyBNVFS4sCBkmafsNIQgvtfkRWNe5CfFcjroR+lE=
Subject key identifier: 39:45:11:BB:35:C8:35:8B:D8:A5:DF:A1:84:38:F0:1E:EC:9A:AF:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8DB2BC6B89D11ED856338E6F1222468.roa
Signing time: Thu 02 Mar 2023 01:59:21 +0000
ROA not before: Thu 02 Mar 2023 01:59:17 +0000
ROA not after: Sat 10 Feb 2024 01:59:17 +0000
asID: 133199
IP address blocks: 45.207.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7342 (0x1cae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 01:59:17 2023 GMT
Not After : Feb 10 01:59:17 2024 GMT
Subject: CN=640002f8-58a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:5a:5e:bf:7a:55:d4:78:c7:20:2c:20:99:
d7:e9:b4:e8:b3:9d:49:d0:d8:50:60:5f:25:f9:0c:
fa:6a:b4:f4:f9:35:d1:5d:16:9b:a8:0a:b5:47:95:
39:6a:3a:33:1b:6f:67:a0:be:86:08:a3:f6:13:37:
f5:fe:ff:2c:0e:66:ae:35:16:44:61:2b:b5:f4:5c:
cd:72:10:95:9e:f0:26:4b:be:3e:ba:5c:d5:5a:83:
47:8b:c8:07:e9:90:49:f1:4a:b2:e5:cd:f6:ad:cb:
ad:dc:3b:78:4c:1e:1d:d2:0d:76:fd:eb:11:4a:47:
35:1a:ef:17:9c:dc:28:bf:d3:58:3c:ca:84:71:f3:
b8:2e:c9:9d:35:0d:46:86:11:66:65:4f:c5:06:41:
66:17:67:bb:56:77:37:36:e7:e2:f0:d3:1d:16:39:
eb:32:5b:7f:8a:2d:14:d0:f7:b8:21:ae:46:dd:1b:
5e:1e:6c:8d:13:c3:84:3a:d8:23:4e:6e:e9:25:86:
30:06:22:83:1b:97:a8:2b:68:98:22:e4:4f:0d:ef:
b3:8c:ae:bb:9f:e5:d6:53:aa:2e:88:40:e1:ab:19:
a6:af:be:82:3b:19:bf:56:2d:fc:f0:f1:4f:5c:8a:
16:f8:02:b4:f7:4f:27:d5:52:89:2e:8c:8b:2e:b3:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:11:BB:35:C8:35:8B:D8:A5:DF:A1:84:38:F0:1E:EC:9A:AF:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8DB2BC6B89D11ED856338E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8d:df:43:f5:59:80:38:1a:d9:64:6c:9c:64:c8:9c:0b:2f:
03:bd:8e:49:00:a3:6b:df:68:c1:c2:d9:69:b7:ac:74:26:b0:
a8:e1:38:47:c6:6a:ee:70:84:ae:c4:02:74:42:96:c7:ff:91:
b7:f3:e4:34:1e:eb:d7:6f:66:bb:60:3c:c5:cd:a0:d5:5e:7e:
8e:a8:d1:bd:a5:88:d6:37:ac:99:d1:c1:5d:1a:8e:19:c6:19:
66:55:d5:6c:6b:ff:ef:fa:a2:4d:06:6f:98:02:2d:65:77:2a:
38:51:19:98:8c:df:76:54:7e:dd:bf:3b:63:ac:07:9b:ae:35:
85:54:89:78:b5:f1:d5:3c:0e:51:f4:92:78:32:16:95:ce:e5:
d3:e5:83:7f:5b:58:60:af:8b:04:7c:bf:f0:ae:c7:25:e6:da:
72:b6:22:51:2d:5b:94:81:df:45:d4:e6:dc:67:d2:5d:3a:cf:
fd:01:b2:57:a7:09:ad:bf:d1:a0:68:e8:86:5b:36:fe:e9:d2:
5d:f0:00:53:a1:19:9e:90:93:1d:d0:4e:e0:1c:24:55:f6:52:
b9:b4:2e:36:ba:ef:cc:39:9a:27:16:28:3a:12:14:52:d1:57:
d1:55:51:0e:e4:01:0a:e7:d7:79:5e:59:70:08:d5:71:20:be:
49:23:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:43:59 2025 by rpki-client