Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBB09AB89F11EDBBA0C9EDF1222468.roa
File: EBDBB09AB89F11EDBBA0C9EDF1222468.roa (raw, json)
Hash identifier: N64tFnCHROu8cKDyY3oPM4qvTSXXAN6Q5x470ISNY0w=
Subject key identifier: C7:E4:7A:15:04:93:55:AE:F2:38:43:13:C5:69:24:5C:A5:C3:DD:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1CDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBB09AB89F11EDBBA0C9EDF1222468.roa
Signing time: Thu 02 Mar 2023 02:14:12 +0000
ROA not before: Thu 02 Mar 2023 02:14:08 +0000
ROA not after: Sat 10 Feb 2024 02:14:08 +0000
asID: 133199
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7388 (0x1cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 02:14:08 2023 GMT
Not After : Feb 10 02:14:08 2024 GMT
Subject: CN=64000673-9806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:5e:89:9f:96:2d:c7:22:c8:4c:66:2d:da:
59:a8:19:83:8f:0f:00:78:bf:70:6b:ee:d4:01:b1:
35:ea:71:06:bf:16:f0:49:95:14:e0:15:2d:aa:4d:
c3:ab:7b:e0:f9:e8:06:c4:26:ca:d5:93:5d:cf:8b:
6d:8d:1b:13:f8:f7:5b:ab:98:6d:f3:2f:f2:a6:f8:
ff:d6:4e:fa:eb:d7:af:a1:f6:61:9f:56:3f:99:d6:
3f:16:ae:c6:e6:b9:e8:2a:b6:cd:49:03:10:56:8b:
ed:ee:f5:64:e8:5d:9d:7b:c6:9b:a4:78:aa:ab:c5:
33:11:c8:d8:f7:ba:5f:b9:af:ca:a6:59:03:d6:17:
30:fc:6c:d9:9e:13:eb:2d:72:fa:c1:17:2a:6f:e0:
88:76:8e:53:90:df:5f:a7:53:70:b8:24:53:ff:5e:
1e:78:e5:2e:91:e3:d6:4f:a7:09:ed:fa:19:ac:60:
7e:29:c1:a0:9e:54:26:c5:41:7a:3e:6f:53:1a:a8:
b9:1f:21:52:15:b6:fa:17:ce:7c:be:ce:29:42:e2:
e3:61:6b:67:31:35:dc:e9:7f:ee:09:e0:9d:a1:05:
44:39:a1:41:b5:62:ba:60:b7:5e:29:0c:81:13:c1:
c0:e7:11:5f:3e:43:54:8a:3a:d1:34:e9:f6:f9:be:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:7A:15:04:93:55:AE:F2:38:43:13:C5:69:24:5C:A5:C3:DD:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBB09AB89F11EDBBA0C9EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1b:56:be:68:53:6b:68:43:a8:2d:a2:3b:81:3a:28:7b:c6:
72:4d:ee:ba:4a:9d:81:de:63:01:50:45:99:b7:21:7d:9c:ac:
ee:4b:be:ea:f4:8f:30:c3:1d:70:fd:45:aa:d9:bd:9b:a8:d4:
8c:d8:06:ca:b6:a9:9a:32:01:e1:1f:18:d1:72:e9:97:08:01:
bd:99:4b:68:f5:97:6e:c2:20:fc:48:2e:31:2b:6a:44:cd:94:
8f:1d:cb:9f:aa:42:3d:5d:99:06:9b:60:f9:86:3e:73:a5:b5:
fe:42:cb:05:aa:01:be:2c:dd:e6:74:f4:98:27:3c:e3:62:9c:
39:67:d6:a4:ce:79:f8:52:69:b9:50:25:36:91:c8:92:5c:81:
a8:70:e0:99:dc:f9:90:3a:0d:34:8d:e9:b9:6b:4f:d9:d3:1e:
8b:27:ef:9e:7d:17:08:ea:62:96:23:1e:56:d2:e9:59:c4:4d:
67:02:98:70:1f:6a:d8:11:63:15:ac:2a:28:8d:73:72:e4:e3:
d5:c3:7f:41:8c:6b:36:77:7e:8e:93:4f:3d:1c:aa:47:c6:1e:
a4:6c:b2:5a:75:a8:0d:7e:38:cc:82:db:ff:f4:59:28:6a:b6:
73:4d:2f:b8:34:3b:f2:7b:19:b6:49:ab:2c:cd:5b:9e:0c:94:
22:d3:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:49 2025 by rpki-client