Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E047F270B89F11EDB9FF83EDF1222468.roa
File: E047F270B89F11EDB9FF83EDF1222468.roa (raw, json)
Hash identifier: hg0St0U23tTafIWqu05trtVAyHeYmn70jcFTG7dDOuI=
Subject key identifier: E9:CB:CA:C1:11:07:4F:85:DE:E0:99:B7:8E:FA:4E:9B:79:1B:B0:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E047F270B89F11EDB9FF83EDF1222468.roa
Signing time: Thu 02 Mar 2023 02:13:52 +0000
ROA not before: Thu 02 Mar 2023 02:13:49 +0000
ROA not after: Sat 10 Feb 2024 02:13:49 +0000
asID: 133199
IP address blocks: 45.207.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7386 (0x1cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:13:49 2023 GMT
Not After : Feb 10 02:13:49 2024 GMT
Subject: CN=64000660-4851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:fc:77:75:f1:6e:5f:10:2d:8c:a5:d8:fd:
13:e6:15:68:1d:c9:8e:b4:d4:dc:03:3b:ad:cc:2e:
bf:e4:ad:63:4e:46:6c:35:5c:6b:10:3e:ac:56:98:
cf:d7:c8:3b:67:6f:f7:15:77:27:83:09:af:8f:9f:
30:4b:7b:cf:d7:5d:ab:5a:81:64:06:c2:f4:11:f0:
05:59:ac:2d:7d:c5:4c:23:39:63:40:91:9b:fa:cf:
d7:91:74:e1:0e:6c:11:3e:eb:f9:43:99:44:b6:d7:
4d:87:e0:55:9b:c4:dd:ad:59:a2:85:ae:4c:f1:49:
94:38:76:91:f6:8b:bb:53:67:5e:76:e0:b0:c1:86:
7c:93:e1:31:84:78:c2:80:37:b4:c6:e6:f0:de:7d:
2b:ba:4a:39:f5:1e:b2:05:f9:df:a2:ec:20:f7:be:
b1:0d:47:f4:22:1c:6a:4a:3d:b7:a7:b1:49:48:2c:
dc:dc:ea:fd:ee:2d:1e:9c:46:3e:3c:ba:89:d9:ca:
10:7f:99:b8:27:b2:b6:3d:b0:69:ff:46:b4:44:2c:
56:9e:fc:11:88:fa:6b:51:b0:c4:74:25:de:b7:46:
39:16:0e:78:f0:5f:cc:da:b9:e1:80:10:fe:2b:7b:
ca:b7:b6:09:cb:1b:0b:62:1f:17:5e:64:53:08:9b:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:CA:C1:11:07:4F:85:DE:E0:99:B7:8E:FA:4E:9B:79:1B:B0:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E047F270B89F11EDB9FF83EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c0:fd:58:46:68:7a:00:6f:0f:b4:87:b3:1c:0d:53:e3:de:
b9:a3:93:37:d1:d7:3b:4d:2a:8b:3c:c8:26:cc:52:2d:04:54:
c6:40:d9:5b:80:2a:32:1f:1a:6c:dc:67:d2:8f:2c:5c:0a:09:
f1:d7:47:82:da:99:be:04:25:20:92:b3:7b:db:e0:4a:42:5f:
27:11:24:81:bc:c1:40:fb:63:10:3d:7e:bf:26:0c:8e:5b:9a:
6e:fc:14:c3:ac:29:34:ae:e4:f2:cc:12:5f:0a:82:54:69:ad:
ad:4d:54:69:41:aa:34:8e:5f:5d:09:33:7e:af:e4:87:54:c7:
1b:a3:2f:d6:91:e5:f7:ca:88:d3:53:5b:27:19:57:91:74:16:
85:c7:ea:7a:8a:20:aa:69:6e:81:b9:0f:5b:c7:a2:69:de:a4:
37:7d:96:cd:8f:ff:76:63:4b:0a:28:06:ea:90:08:93:02:f1:
79:c3:6d:2b:2e:9e:ef:9b:23:6c:c9:b1:83:f3:1e:c5:e0:f9:
36:22:17:20:db:fb:71:de:48:93:75:75:d3:b9:f0:40:12:e9:
ae:8c:5d:e3:bf:3b:18:aa:b2:e3:8b:79:39:23:53:2b:77:21:
d4:88:7f:06:54:69:e9:e7:cc:e7:2d:6c:04:15:1a:fb:2f:60:
c2:51:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:06:15 2025 by rpki-client