Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3EA05C272D11F0B1B59996DAE4EC9C.roa
File: 1F3EA05C272D11F0B1B59996DAE4EC9C.roa (raw, json)
Hash identifier: mu0uMpyBDun8DMmuT0qyCD6CxWAWxmyXtyRc8vm6yKw=
Subject key identifier: F6:AA:9D:CB:0E:3E:1F:01:09:1C:01:FB:B1:BC:95:DB:AC:F4:C3:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01514E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3EA05C272D11F0B1B59996DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:12:00 +0000
ROA not before: Fri 02 May 2025 08:11:55 +0000
ROA not after: Sun 11 May 2025 08:11:55 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86350 (0x1514e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:11:55 2025 GMT
Not After : May 11 08:11:55 2025 GMT
Subject: CN=68147e50-8748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:f2:63:5d:8a:f9:47:e8:15:61:d2:2b:98:
58:35:68:e7:e7:e4:c2:cb:1d:fe:57:7d:38:43:c7:
e5:8d:ab:3f:01:bf:7d:65:ac:7c:20:3b:95:ae:9d:
90:2e:74:ae:f5:a5:55:08:f4:3e:86:07:70:80:84:
96:91:17:11:b6:64:bd:ff:aa:19:b0:02:57:67:d0:
dc:fc:1d:c3:97:39:f9:ce:0c:2a:5e:da:12:ea:5d:
57:25:85:74:55:e0:c8:b1:df:03:cb:a4:97:66:4c:
9d:64:bd:54:f8:35:a3:dd:f7:c9:ae:6d:20:c7:27:
c3:42:09:d3:40:b8:a2:4f:e6:fa:c1:38:69:b4:2d:
cd:50:48:96:58:cb:96:31:91:f1:f5:cf:11:3c:b0:
03:0b:1e:0e:ef:e8:96:3d:d4:75:b5:1d:3f:68:0f:
0d:1d:e7:5d:af:14:62:8c:33:83:a3:17:be:a1:31:
ff:d3:fe:0c:d2:23:5e:93:f4:69:92:dd:3a:7f:78:
08:f3:61:15:54:e3:3d:98:81:a8:e3:4b:a2:1d:57:
a1:65:09:cb:77:b4:bc:cf:ec:ed:c6:ad:9d:2f:fb:
85:f2:76:fc:c8:a2:a3:66:ba:34:73:c4:a9:a3:da:
b2:0c:27:c6:33:86:71:38:c9:38:13:d7:14:28:9b:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:9D:CB:0E:3E:1F:01:09:1C:01:FB:B1:BC:95:DB:AC:F4:C3:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3EA05C272D11F0B1B59996DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:28:b4:6f:58:e9:03:d9:22:74:11:9c:74:f2:c0:0b:70:04:
4a:36:ae:75:a2:ad:43:3c:00:4c:20:de:ad:0a:50:b9:a7:63:
94:f5:5d:fb:c0:93:bd:ca:55:d0:6f:bf:75:bb:4b:e8:7e:b9:
c3:18:b7:2d:f4:a2:58:3d:5e:0b:35:8e:ae:6c:20:a5:e5:9e:
86:22:68:b7:f8:4c:82:21:ba:fe:ef:19:e7:33:0c:70:78:df:
d0:36:f1:b2:b9:a0:55:82:01:8c:fd:28:86:ce:7a:21:1f:29:
9a:ce:10:7f:6b:7b:19:ee:1d:66:fc:77:eb:36:21:0a:d4:aa:
41:e0:d9:28:d6:c1:80:b0:76:61:1f:06:8e:a2:54:d3:df:fb:
b8:94:05:27:8a:e2:44:ee:2a:e8:e1:69:34:7e:74:37:49:61:
20:3e:df:63:01:f2:d4:98:c4:2b:f0:bd:9c:f9:4f:00:7b:ac:
1f:32:03:28:6a:62:a3:43:3d:7b:bd:26:6e:f7:7d:88:4e:09:
d1:45:43:3a:8b:90:05:b8:c5:ef:8f:4b:08:b6:e6:42:1f:83:
a4:eb:46:69:6c:d7:42:e0:26:26:5d:81:b0:ed:2c:05:b9:6b:
11:f8:47:71:fa:09:b7:da:a5:eb:9c:49:23:9e:f7:7d:7a:c2:
38:66:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:45:12 2025 by rpki-client