Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BF9DF2DBD211EF80984384762E951A.roa
File: 10BF9DF2DBD211EF80984384762E951A.roa (raw, json)
Hash identifier: xQGYBpEI6sUE9GgI97Q1xBG2L3GZHl9jLwidKPB1qiw=
Subject key identifier: 96:7B:69:E0:B3:5F:6F:7F:63:92:A1:3C:9F:41:B2:97:64:83:4B:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BF9DF2DBD211EF80984384762E951A.roa
Signing time: Sun 26 Jan 2025 10:41:14 +0000
ROA not before: Sun 26 Jan 2025 10:41:10 +0000
ROA not after: Mon 03 Mar 2025 10:41:10 +0000
asID: 23470
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84599 (0x14a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 10:41:10 2025 GMT
Not After : Mar 3 10:41:10 2025 GMT
Subject: CN=6796114a-8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:17:c6:66:f0:f8:8f:5e:b9:91:f6:28:8e:
f5:18:28:33:a3:75:22:81:df:47:a5:58:54:3f:1e:
a9:c5:dd:52:69:8e:c2:73:73:19:17:1b:f6:43:47:
83:a9:15:fe:2d:86:e9:b5:3c:3a:52:7b:4d:12:da:
4b:b3:88:6e:31:5d:c0:ec:8a:d6:e8:ed:42:22:25:
9b:87:84:0b:df:c3:00:1a:1f:76:33:7a:5a:42:00:
68:9c:7a:b6:b5:a6:4a:a5:a7:0b:e4:b7:59:59:58:
7a:7b:e9:47:34:77:d7:29:1d:3f:92:ad:a7:94:7c:
4a:71:a1:aa:1b:bf:76:20:01:67:c1:2b:63:64:08:
16:b5:d3:8b:3a:a1:41:f9:6d:62:b6:5a:20:f5:8f:
c0:a1:40:5c:1f:2f:e1:ba:5c:0e:0a:85:d2:31:20:
e9:4c:a3:39:9a:6d:b7:ca:cd:5b:0d:b7:f9:04:1b:
6e:08:0b:2d:8d:c7:1d:e8:f0:56:4a:ad:02:99:02:
dc:2d:70:dd:b7:78:c3:d9:51:32:13:24:ce:70:5c:
68:17:b6:8b:61:97:3f:98:a2:56:eb:61:8d:5b:63:
4b:8b:58:4e:5f:ab:f6:1f:5a:ca:39:f5:73:f1:a6:
42:aa:4b:08:99:82:f7:49:e3:95:c0:d5:2d:cd:57:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:69:E0:B3:5F:6F:7F:63:92:A1:3C:9F:41:B2:97:64:83:4B:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BF9DF2DBD211EF80984384762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:17:dc:c6:0d:65:41:52:7a:ef:83:68:71:40:47:2e:04:be:
68:2d:ad:aa:2a:76:59:71:03:b6:c3:a1:d0:e0:6d:80:b7:59:
f0:77:e2:85:83:a4:fc:cb:df:13:04:f0:66:c6:20:45:8f:16:
54:93:6a:03:b5:cb:55:70:e0:4f:fb:dd:c6:55:75:4c:00:26:
b0:a3:f0:73:4f:bb:a9:b5:ad:2d:60:97:06:14:12:05:51:9d:
9c:f2:06:47:7b:84:20:20:74:a1:c6:82:ef:8e:94:51:d5:52:
47:9e:8e:08:49:d6:02:ad:49:2e:37:0a:ad:3f:2f:68:b4:0b:
97:5d:af:93:98:46:e6:44:8f:b2:27:9e:4c:02:13:f4:d2:3d:
6b:ba:28:0d:2e:56:e8:b8:ef:6a:d9:eb:9a:42:dd:30:54:22:
af:77:5d:6c:a5:91:02:0c:69:44:81:a3:5d:b6:d6:a6:f0:93:
d8:a9:e8:4f:e0:3f:f2:00:3e:1f:99:8f:29:c3:86:7b:06:43:
11:b6:6d:3b:14:7a:8b:fc:f9:97:bb:28:52:84:5d:66:37:b7:
3d:c2:4f:61:72:00:79:c6:83:26:7e:b0:ac:0f:43:9b:a0:9f:
f1:a3:ad:ff:47:a5:bb:1b:00:7c:4d:e8:58:af:f0:f0:24:4e:
01:d1:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:18:33 2025 by rpki-client