Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B24738DAFA11EFBDC30756762E951A.roa
File: 07B24738DAFA11EFBDC30756762E951A.roa (raw, json)
Hash identifier: cRBwgiwwNoxqg08dJavq3yBHWB5yGWwhqM8kJFSm0k8=
Subject key identifier: 3E:AE:72:A4:1C:62:FE:A9:87:06:2B:D2:E7:FF:AB:9F:50:A7:D6:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01490D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B24738DAFA11EFBDC30756762E951A.roa
Signing time: Sat 25 Jan 2025 08:54:48 +0000
ROA not before: Sat 25 Jan 2025 08:54:44 +0000
ROA not after: Sun 30 Mar 2025 08:54:44 +0000
asID: 63139
IP address blocks: 154.94.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84237 (0x1490d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:54:44 2025 GMT
Not After : Mar 30 08:54:44 2025 GMT
Subject: CN=6794a6d8-1258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:11:c4:9c:81:b1:54:76:76:6a:93:57:7c:
ca:02:8f:4a:15:93:8d:47:da:0f:db:f3:c3:53:ca:
9e:46:d1:0b:02:da:20:5e:04:14:03:67:d3:4b:bb:
62:b3:8e:7b:78:c7:00:e3:f2:91:20:e6:2c:39:5e:
5b:47:31:b9:34:5a:49:a6:7f:8c:dc:ad:00:fa:fa:
1a:2e:7e:79:b9:92:86:2e:e1:87:66:de:37:dc:bb:
2f:de:8b:eb:84:1f:b1:4c:62:53:c1:7b:15:f9:cd:
7f:34:01:9a:04:e1:94:8b:27:11:9a:82:c9:c6:0f:
71:a3:a6:b1:ad:11:37:3e:47:bf:b1:9a:53:97:e1:
dd:4f:1f:a0:cf:7c:e4:0c:56:9b:30:b2:28:3b:63:
b0:92:7f:87:46:ba:e6:f9:91:df:43:6d:a7:02:f1:
ff:25:7c:2a:17:42:39:c9:ca:56:ad:99:99:bb:e4:
cf:02:4d:17:55:13:37:0b:98:75:6e:1d:5d:0b:bf:
39:fb:72:03:f6:3e:9f:58:aa:c1:b6:73:83:9f:e7:
b2:90:6b:97:09:13:b9:07:50:cc:99:de:b0:05:2e:
32:31:0c:37:3f:2d:59:d1:97:5c:bd:b6:82:5f:f5:
6a:c7:41:70:14:37:cf:d5:10:70:7b:7a:8e:86:dd:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:72:A4:1C:62:FE:A9:87:06:2B:D2:E7:FF:AB:9F:50:A7:D6:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B24738DAFA11EFBDC30756762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.113.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b6:cf:ee:ac:c1:a1:80:75:09:14:89:89:8c:60:e4:fb:47:
ec:ed:7f:4e:f3:b4:51:e6:0d:2a:1a:69:be:85:79:39:6f:fc:
6e:4e:0b:b9:6b:26:19:2e:ae:d7:ce:3c:58:2f:71:10:53:ed:
9c:9f:a4:db:74:89:a9:9b:46:7c:d6:96:cd:d1:b7:ca:8a:1e:
1c:37:29:a4:de:8b:81:c1:a0:f8:57:ed:28:fb:60:11:20:ee:
cb:84:be:8e:5b:0f:0d:8b:14:c6:54:d7:e6:71:fc:23:b8:1b:
a3:2e:56:f3:bc:c6:6b:c5:7f:10:43:79:89:55:31:b7:d5:c7:
fc:6d:33:d5:b0:4a:c4:4f:3a:d6:fa:ba:58:06:d4:8a:b1:72:
11:c4:4f:a1:5c:70:e5:f4:a0:e0:f6:bb:f1:57:dc:53:3d:66:
ee:f9:67:38:16:92:b9:93:1e:23:42:69:82:e1:8e:2e:64:bc:
6b:00:f6:1a:81:08:75:6c:19:68:70:0a:f4:22:92:c4:c8:46:
ef:25:33:1b:8a:8e:5f:32:62:8b:67:1a:07:7d:20:3b:a8:98:
90:89:e4:30:3c:a1:c9:3b:21:49:9a:f0:f2:87:87:dd:ca:eb:
5e:a5:c0:b2:f3:51:63:54:f6:d0:d9:e3:bd:b6:46:49:50:b7:
b1:eb:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:00:31 2025 by rpki-client