Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DA80972DA6211EFAF3AFD4E762E951A.roa
File: 0DA80972DA6211EFAF3AFD4E762E951A.roa (raw, json)
Hash identifier: P+OwJl+jet2KScrc4ePKDF8OQ7aAk1QqI2ojkC31xZU=
Subject key identifier: 86:39:38:1A:BF:57:46:4E:44:60:08:14:A4:E8:E8:66:15:7B:06:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014861
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DA80972DA6211EFAF3AFD4E762E951A.roa
Signing time: Fri 24 Jan 2025 14:46:54 +0000
ROA not before: Fri 24 Jan 2025 14:46:51 +0000
ROA not after: Wed 05 Mar 2025 14:46:51 +0000
asID: 49505
IP address blocks: 154.209.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84065 (0x14861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:46:51 2025 GMT
Not After : Mar 5 14:46:51 2025 GMT
Subject: CN=6793a7de-e47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:bc:a0:ab:ec:31:f7:86:85:c0:6b:2c:20:
94:55:de:fe:4b:5c:d8:d8:44:8e:f4:87:0d:d1:d9:
35:34:45:76:c2:16:f1:ea:2a:06:3c:19:5a:35:e5:
1e:86:49:20:fe:08:f9:f1:90:a2:67:35:ea:9c:0a:
a3:61:83:90:6a:1e:f9:c1:cb:be:fb:49:07:5f:20:
33:0a:fc:f4:6e:96:2e:29:03:83:82:6e:ad:ee:66:
ac:10:8f:75:91:41:b5:b6:0f:e0:a5:2a:fb:80:17:
f5:01:3e:b7:f2:6d:c4:31:6f:1f:3e:89:da:9f:6e:
0a:04:af:6c:f2:dc:20:2b:8f:89:b1:92:4e:c6:cc:
6a:37:4c:f6:f4:4e:41:68:a6:bb:3a:76:df:e2:42:
44:d9:3c:2e:90:61:9e:ce:1f:dc:cf:eb:ad:87:ee:
f1:97:74:3e:f4:73:94:2d:76:10:e0:b8:0e:c5:fe:
38:1d:38:84:34:5e:60:36:ed:8e:74:92:30:88:99:
e0:b0:15:ca:c1:fc:80:c1:b1:b1:96:95:4b:fe:49:
43:e3:51:b5:93:f4:b6:1d:a9:5b:96:a8:c5:ed:59:
21:f7:84:cd:b5:62:8c:f2:74:eb:cc:6f:a9:34:f3:
f8:b5:1a:80:e0:a4:47:ce:22:48:46:b1:1b:b1:c3:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:38:1A:BF:57:46:4E:44:60:08:14:A4:E8:E8:66:15:7B:06:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DA80972DA6211EFAF3AFD4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.209.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:c3:28:b0:e9:02:1e:1b:c4:4c:07:03:89:93:1b:af:cd:e8:
5e:f8:0b:ea:56:66:c9:a4:7e:f4:4a:b8:e2:a6:55:0e:93:fa:
b0:04:b1:82:a0:4f:e2:9e:22:17:80:9f:04:12:a5:59:77:c2:
ef:22:c5:ac:be:60:90:2d:ab:33:e5:46:d9:c9:d4:9c:03:a8:
26:09:d3:ae:95:3d:44:b5:d6:18:c4:8a:5d:79:2f:e7:5d:da:
1a:79:2a:e2:3c:4e:62:82:96:d0:6f:26:a9:40:2e:2e:80:76:
67:89:b7:aa:82:77:26:b7:f2:88:c0:62:b6:dc:c0:60:c8:e0:
10:e4:57:76:2f:2d:a0:e1:c1:34:b7:f9:80:12:1a:49:2b:32:
77:b1:59:d6:3e:52:ea:6d:c1:42:87:48:e9:5f:74:15:71:7e:
34:3d:c7:55:08:55:7d:ff:ad:c6:c7:ea:4d:3a:0e:e5:c2:f7:
a7:b0:d0:86:90:05:76:48:fc:10:87:fa:89:14:d9:c4:c3:fd:
4a:21:4f:2c:ec:a6:e5:85:00:e0:31:39:68:6a:bc:0d:b1:8f:
05:ff:56:0a:ad:87:90:4f:48:f0:50:10:b9:cf:f6:fc:b4:f5:
a7:a0:49:b9:4a:ba:42:07:2a:ab:21:6c:1f:dd:cc:f1:c8:6b:
b7:d4:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:23 2025 by rpki-client