Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E1B2FA6D1A11F0BF44E687DAE4EC9C.roa
File: 74E1B2FA6D1A11F0BF44E687DAE4EC9C.roa (raw, json)
Hash identifier: FdIX3epBiT9CPOHfw2jWHh11WVxLEHjrpR5SxxNc+sI=
Subject key identifier: C2:F4:A9:9C:39:86:85:51:C5:E7:A0:21:ED:61:5D:9E:6E:F2:1D:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01682C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E1B2FA6D1A11F0BF44E687DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:54:45 +0000
ROA not before: Wed 30 Jul 2025 07:54:40 +0000
ROA not after: Fri 08 Aug 2025 07:54:40 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92204 (0x1682c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 07:54:40 2025 GMT
Not After : Aug 8 07:54:40 2025 GMT
Subject: CN=6889cfc5-1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:07:4a:bb:79:cc:37:2d:85:ce:0c:31:cf:
7e:7a:8b:ca:29:db:80:f5:7c:42:e3:c4:0d:7f:db:
d6:89:80:11:7c:88:ce:71:3e:d7:3d:5a:1d:6e:b8:
87:53:52:c6:aa:8c:98:6c:00:28:50:9f:3b:b5:6c:
46:b8:a3:6c:f4:1f:84:77:82:ac:db:fb:80:1a:55:
7a:fa:0b:93:69:9e:a6:ec:bb:f1:22:c9:61:12:2e:
17:c9:2e:56:2c:d6:54:fe:88:7f:b9:7d:09:7b:bb:
4b:2b:d1:68:b4:b9:d5:88:14:2a:96:7a:50:6a:6e:
96:25:66:1a:c7:30:49:d5:ee:ef:f9:04:93:d2:91:
65:0e:de:60:da:cd:ab:da:11:2d:c3:e1:76:cb:ff:
89:50:63:ae:5a:6d:51:b4:85:64:97:22:94:ea:38:
03:f0:e0:7f:44:7e:c1:02:fa:7d:b8:f0:eb:8f:40:
65:4b:24:d3:bd:5e:a3:45:b2:a3:be:d5:1f:25:34:
07:3a:56:6b:27:c7:a2:89:e3:20:32:3a:a7:66:ea:
08:3d:3e:19:17:d6:5a:16:ed:fc:ab:ac:fe:aa:85:
89:e5:ae:ee:6d:76:b5:e0:a2:be:58:40:30:90:3f:
44:c6:4f:79:d5:b7:d6:eb:c6:7b:d5:3c:f6:75:c2:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:A9:9C:39:86:85:51:C5:E7:A0:21:ED:61:5D:9E:6E:F2:1D:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E1B2FA6D1A11F0BF44E687DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4c:e3:e9:c1:05:0c:63:25:f3:b4:55:9f:fe:b1:3b:16:8f:
1c:95:46:ab:23:ab:08:e7:5b:94:4e:21:67:4d:c2:21:d1:8b:
c2:40:5b:43:37:b9:74:46:52:09:ae:7e:bc:70:7a:c8:d8:5a:
ae:b1:5e:a1:28:72:1f:a7:4a:ab:24:b7:1d:90:b8:12:99:f1:
a7:5c:c8:e2:0a:e9:4b:6a:fb:90:03:c6:bf:a0:0e:f4:e9:18:
a6:7c:4c:0a:70:47:64:c8:e2:5d:b4:1a:04:07:a1:33:dd:b0:
3e:dd:71:b7:7e:a0:31:94:ff:ab:bd:7a:d3:ad:bc:e9:35:69:
eb:53:48:a9:78:03:9e:a1:63:9a:9e:0b:fa:70:a6:56:ef:89:
13:75:df:54:47:42:6b:93:25:58:6f:28:73:0f:a0:d6:fa:a1:
81:ca:60:c0:a3:41:e3:a3:3e:c3:16:dc:67:ec:6b:c4:1e:2b:
14:26:4f:91:31:b3:40:c9:c7:49:54:cf:aa:67:2b:da:5f:49:
c9:46:53:42:23:ab:8d:1c:45:f0:3a:2b:b2:31:b0:d5:2d:49:
47:a1:5f:a4:fe:bf:40:73:91:b4:26:d1:bf:50:44:64:3b:e7:
9e:97:75:fe:a5:55:41:ba:3d:c7:02:69:ec:bb:9d:86:e1:7a:
a2:30:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:06 2025 by rpki-client