Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0603ABD6DAFD11EF96030D6A762E951A.roa
File: 0603ABD6DAFD11EF96030D6A762E951A.roa (raw, json)
Hash identifier: MGkYSY8z3dX/bu3T1wKVKk21OxIEa7prZyampeBhzEI=
Subject key identifier: 10:00:9D:A0:41:7A:87:B2:BC:CA:CF:E5:B9:87:C3:84:24:CD:01:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01491F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0603ABD6DAFD11EF96030D6A762E951A.roa
Signing time: Sat 25 Jan 2025 09:16:13 +0000
ROA not before: Sat 25 Jan 2025 09:16:10 +0000
ROA not after: Sun 30 Mar 2025 09:16:10 +0000
asID: 63139
IP address blocks: 154.94.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84255 (0x1491f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:16:10 2025 GMT
Not After : Mar 30 09:16:10 2025 GMT
Subject: CN=6794abdd-757f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:33:bc:f4:86:c6:13:80:8d:db:db:04:b9:
56:1f:58:2f:2b:42:2a:12:b4:93:f6:09:04:91:7e:
78:42:75:f5:9a:e6:43:6d:b8:43:22:31:50:46:02:
0e:bf:c2:dc:76:e1:ee:df:96:82:25:a1:df:24:73:
05:39:e7:06:38:6d:f0:73:5b:47:c2:d9:84:21:18:
04:b9:b5:c0:b0:b7:74:f3:d2:c9:e9:52:08:95:f0:
72:b3:60:5e:df:0f:32:36:ec:dd:21:e0:06:6c:0b:
e7:f7:c3:34:21:d1:80:ed:75:bd:d5:ac:99:0b:4c:
4a:e7:f1:45:b4:86:73:d0:4f:cc:c8:5b:1d:5d:61:
38:59:f1:d9:30:aa:f8:ae:c8:41:26:26:5d:f6:c0:
01:0b:70:c6:05:38:89:47:09:2e:00:bd:cb:73:68:
4a:f9:fe:c5:eb:db:f9:5d:17:fa:a8:49:f4:07:5e:
d1:8d:df:91:4c:1c:ea:84:72:9a:55:45:62:10:75:
dc:b0:62:ba:2f:96:64:ed:96:f8:51:1a:41:eb:12:
3e:f6:53:cd:ed:8c:31:c2:68:cd:eb:2f:e5:9a:d6:
53:92:8d:0a:88:58:7e:8e:c8:75:fb:0e:20:b3:78:
9f:9a:3d:76:e2:0b:17:59:5c:4a:8c:74:ab:f8:bb:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:9D:A0:41:7A:87:B2:BC:CA:CF:E5:B9:87:C3:84:24:CD:01:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0603ABD6DAFD11EF96030D6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.122.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e3:c3:b7:96:48:62:3f:5c:83:3b:b0:3a:a2:d3:87:20:83:
dc:6c:3a:0a:e6:5c:1a:2c:1c:1d:b9:fc:1e:71:47:4c:d4:e0:
64:02:f5:6b:40:52:80:1e:4e:a2:4a:bf:27:81:8d:d4:81:a7:
08:35:bd:0e:58:c8:12:c7:1d:f6:13:c6:f1:48:4a:ba:14:bd:
2d:a1:eb:1d:5d:d9:c5:9a:de:f3:06:93:09:d6:78:e6:2b:fc:
4d:8d:a3:94:36:26:81:76:7e:4f:f1:7a:83:27:cb:20:80:28:
8b:b9:cd:a6:73:91:0c:f4:17:af:8c:d9:74:bb:55:88:dc:f4:
1b:42:c1:07:4b:15:7f:66:1c:78:74:fd:a1:bf:b0:3f:f3:07:
be:a0:ba:a2:cd:bc:10:93:02:e5:91:2d:a1:fa:36:ef:c7:39:
3c:b5:a2:2e:c1:d9:ff:8a:48:a8:c8:46:79:c4:56:61:26:5f:
c9:5d:8e:47:3f:e7:95:87:d4:9f:24:55:b4:f6:c2:d4:2e:e9:
30:80:2e:ed:cc:68:6f:49:66:0b:b2:74:4d:cd:2c:6d:86:f2:
52:45:12:fc:d1:11:22:1a:17:e2:1c:e8:73:92:a2:6e:54:22:
a4:53:e1:94:51:15:f3:53:1d:53:91:3b:fd:b1:b2:5c:d6:45:
cd:cb:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:44 2025 by rpki-client