Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FE924E273B11F0814D25F0DAE4EC9C.roa
File: 08FE924E273B11F0814D25F0DAE4EC9C.roa (raw, json)
Hash identifier: kQHlP5TCJdNv0HsbxyJcxCDBI96l2HcSWHVa95oQwT0=
Subject key identifier: D1:27:22:45:67:3B:E3:74:F8:F5:B9:95:57:E9:F1:BF:6C:58:D8:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015173
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FE924E273B11F0814D25F0DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:51:36 +0000
ROA not before: Fri 02 May 2025 09:51:31 +0000
ROA not after: Fri 09 May 2025 09:51:31 +0000
asID: 200373
IP address blocks: 45.201.10.0/23 maxlen: 24
45.202.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86387 (0x15173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 09:51:31 2025 GMT
Not After : May 9 09:51:31 2025 GMT
Subject: CN=681495a8-043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:1e:9b:49:0c:83:dd:16:27:82:88:ba:32:
57:8e:5a:36:af:c1:d5:1c:2e:ce:39:c2:fa:40:4a:
f9:f3:8b:c1:8c:d7:4c:28:da:38:ae:94:e4:cc:a2:
b1:dd:8b:91:b2:4d:a9:f6:c6:cd:37:34:94:52:79:
db:d5:55:e1:b4:85:33:6b:fc:79:35:e1:2c:39:68:
a7:db:25:d4:e6:2d:98:37:91:a5:13:41:dd:29:0f:
eb:9b:62:7f:51:10:71:ad:a4:f5:cb:50:6b:b3:cc:
43:71:ae:47:66:ea:b7:ad:9b:ab:df:56:fd:e4:54:
f6:c4:cc:05:06:65:fc:95:71:7e:bc:e9:e0:e7:08:
69:a6:5a:a3:28:68:c4:75:77:f5:dd:ca:89:09:7b:
56:d3:24:a3:7b:ae:ea:27:7c:d5:f8:a1:3c:bb:c2:
15:58:5c:af:92:a0:b6:6f:db:93:50:c8:4e:81:98:
74:7a:51:2b:8c:eb:64:76:47:e6:6e:df:16:02:53:
59:ec:01:92:e2:b2:42:51:0a:72:12:92:c4:09:6a:
b9:36:89:3b:64:78:0b:e2:7b:d7:23:2d:2e:75:86:
26:61:24:41:8c:94:a6:9c:c0:97:47:df:88:2c:43:
21:c3:85:cd:06:b7:7e:f7:4d:3d:88:04:c8:7b:07:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:22:45:67:3B:E3:74:F8:F5:B9:95:57:E9:F1:BF:6C:58:D8:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FE924E273B11F0814D25F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.202.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:8d:c9:51:a4:dc:a8:b6:4c:35:06:ec:c9:16:d0:5f:b9:64:
b4:f2:fa:4a:b6:d2:c1:b1:ec:57:9e:c0:a3:4a:e1:a3:c8:21:
51:a1:e5:af:40:96:2e:e0:a3:21:3e:42:f6:df:4a:2e:28:a5:
0e:35:a2:ea:47:90:2a:05:3f:c4:31:b9:f4:b1:eb:7c:a0:bd:
52:28:8b:ba:8e:bf:cf:08:c8:eb:2a:09:6e:06:f6:a7:76:04:
d2:55:43:47:ec:ac:d3:27:32:16:a8:2a:37:44:9e:cf:ae:03:
6e:b2:65:4d:7d:a7:f7:f4:3d:2e:fd:21:00:f2:31:2c:d0:17:
22:7c:5f:fc:50:a3:c7:78:77:21:6a:84:d1:2c:f7:e9:4f:3f:
10:c4:4b:11:a3:5d:3c:c6:89:74:68:11:77:e3:52:13:ad:2a:
aa:fe:85:e7:17:3b:ba:7f:45:ff:d4:63:32:6b:8b:8d:4a:8e:
8f:7f:f3:d8:16:bb:4b:02:6e:b6:76:c0:53:0f:c5:5d:74:d0:
36:56:08:ed:a4:98:5d:4d:95:2f:76:5b:ed:56:69:36:86:5d:
c9:27:1e:c1:0f:04:66:31:9c:0c:f7:e8:30:d8:f8:de:f3:31:
65:69:28:67:97:b2:ef:8e:71:42:b4:e0:47:b4:2e:9a:48:c6:
c6:46:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:51:40 2025 by rpki-client