Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1315B306B21B11EF9B26C0B0762E951A.roa
File: 1315B306B21B11EF9B26C0B0762E951A.roa (raw, json)
Hash identifier: RnoglSLkb+gKdHcEkr6z1+wXx9rQc+d8PiGVSaAKvlY=
Subject key identifier: C5:67:71:8A:B5:A1:7A:80:A5:65:1D:D7:C3:1B:C2:36:AD:F5:70:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1315B306B21B11EF9B26C0B0762E951A.roa
Signing time: Wed 04 Dec 2024 08:38:03 +0000
ROA not before: Wed 04 Dec 2024 08:37:59 +0000
ROA not after: Sat 01 Feb 2025 08:37:59 +0000
asID: 136907
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71652 (0x117e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 4 08:37:59 2024 GMT
Not After : Feb 1 08:37:59 2025 GMT
Subject: CN=675014ea-0b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:98:19:f9:7d:2c:10:07:f7:87:62:66:ef:
f6:c7:45:84:fa:ce:94:fa:23:12:ab:57:1a:a5:52:
d8:13:99:86:f8:33:ea:6b:d4:47:17:fd:99:18:ca:
11:cc:6d:37:fd:af:da:47:17:0b:a3:3a:77:c4:0f:
b8:66:20:4f:3e:e7:2b:15:a0:83:6c:80:d1:94:3e:
aa:bd:e9:ac:92:34:a5:d7:7f:ea:31:8a:1d:7f:56:
b2:a8:89:58:95:e9:4f:47:da:e8:7f:37:7f:c9:0c:
4e:a3:1d:c8:7a:c7:ac:5e:67:7a:23:2f:cc:d7:b6:
6b:05:00:46:3d:b8:5b:4a:50:13:ae:39:2b:b9:16:
f5:b1:c1:8a:59:23:d7:8d:a8:8e:01:2f:45:f8:d3:
1c:ef:9e:9b:ac:71:36:41:54:dd:a1:7f:18:8f:4e:
db:f0:be:94:1c:87:cc:7f:25:d6:ae:7a:32:30:41:
46:ac:66:f3:92:69:c4:62:36:0f:1d:13:c9:1f:ac:
be:aa:f0:89:c9:32:86:53:e3:87:72:12:71:e9:46:
7c:b0:62:60:de:11:81:50:f2:95:b3:89:24:a6:c3:
ab:a6:38:a5:08:8d:48:99:e0:e7:6e:85:f4:80:77:
72:50:8b:ef:28:38:3f:93:ee:58:48:49:70:a9:ea:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:71:8A:B5:A1:7A:80:A5:65:1D:D7:C3:1B:C2:36:AD:F5:70:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1315B306B21B11EF9B26C0B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
70:83:72:c7:15:96:22:da:74:14:fa:18:aa:8a:96:e6:4e:61:
da:ef:02:a5:44:d4:36:91:f4:fe:1c:c8:24:2b:f3:fd:2c:32:
05:f0:40:b3:a6:27:bd:1c:0f:09:df:a3:63:56:37:5d:13:24:
61:20:5e:b3:be:9e:22:a8:91:df:5e:6b:fa:0d:3b:9c:29:0e:
44:0f:9e:22:a8:78:4e:fa:d1:7a:77:33:cc:18:53:06:ca:d0:
6d:81:16:1f:5a:5a:85:2b:86:6c:7b:58:a3:c1:3e:4f:29:14:
b3:12:94:78:bd:51:aa:f6:73:c0:9d:d7:06:77:d0:7e:eb:06:
5f:a8:06:b8:0a:51:f9:9e:ea:2c:45:a3:83:c7:f9:07:77:97:
19:49:81:64:01:ec:4d:8a:a2:00:72:ba:92:b7:54:d3:3d:e7:
bf:ce:d9:1f:09:8e:77:27:98:02:35:35:61:92:26:ba:db:04:
4e:c6:95:b0:ee:71:88:22:04:81:c7:8e:ec:25:1d:86:8c:2a:
02:83:97:90:f7:d8:b0:3e:ff:bc:c3:1f:3c:de:01:b1:46:b5:
e3:b1:e1:5c:69:97:30:0f:3d:d1:1c:48:70:a2:a7:f7:99:ef:
2a:ab:68:a7:7a:d2:fb:1b:05:db:f0:23:01:5e:42:33:61:69:
67:42:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:36:09 2025 by rpki-client