Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15650CCCDC0211EF9B829844762E951A.roa
File: 15650CCCDC0211EF9B829844762E951A.roa (raw, json)
Hash identifier: 0gRGNBH/5DGqCi3GDdY8u5ErrVv0VwSRKTG+fkob8IM=
Subject key identifier: 4B:30:A8:AA:FF:29:9C:B8:9D:8E:99:74:4E:7A:AA:7F:A8:18:B5:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15650CCCDC0211EF9B829844762E951A.roa
Signing time: Sun 26 Jan 2025 16:24:58 +0000
ROA not before: Sun 26 Jan 2025 16:24:54 +0000
ROA not after: Tue 01 Apr 2025 16:24:54 +0000
asID: 63139
IP address blocks: 154.94.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84710 (0x14ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:24:54 2025 GMT
Not After : Apr 1 16:24:54 2025 GMT
Subject: CN=679661da-ab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:0e:4d:c0:49:02:3e:15:2d:56:4d:3c:6b:
c5:c1:f0:eb:9e:97:75:b6:3c:75:69:52:fc:51:e6:
9a:07:2d:0e:a5:19:73:79:5b:38:f7:f4:48:ca:da:
c1:40:e8:bc:7e:9a:3c:b2:fd:ec:c2:77:f9:a4:b9:
c0:f3:c3:c2:34:09:a6:d2:af:f2:19:34:b4:2b:84:
8e:fe:6d:86:01:0b:61:50:c6:35:91:1c:fb:69:af:
02:35:6c:5c:72:e1:54:53:36:5f:40:54:47:18:a8:
79:52:ee:4a:71:6f:5a:23:6e:f6:75:13:69:fa:ed:
38:3f:72:24:b3:68:81:ff:7e:9e:61:41:31:df:9c:
f1:89:92:d3:13:a3:71:7a:61:f7:55:f9:97:a4:e5:
67:74:fc:f1:4c:46:77:f9:49:2a:1b:9a:e2:60:1f:
2d:7b:cc:85:8b:d6:91:5c:d6:d0:4c:c7:a7:e3:52:
f5:45:21:e7:56:18:1c:93:50:1f:d7:fd:c6:d2:36:
7a:b4:8e:0c:05:32:47:8f:21:be:bb:ab:b8:f0:62:
32:98:76:d4:14:8b:75:4a:67:6c:b8:8e:ae:3b:a5:
4f:52:75:fd:3d:66:92:14:f4:5f:5c:5e:3a:eb:68:
2b:2b:03:b6:58:4f:9a:d2:04:a1:17:20:b7:0c:31:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:A8:AA:FF:29:9C:B8:9D:8E:99:74:4E:7A:AA:7F:A8:18:B5:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15650CCCDC0211EF9B829844762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.75.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:32:8f:6e:19:ed:e7:28:e1:c9:e4:5d:49:50:55:bd:b7:d6:
f3:82:a9:8c:fd:13:81:05:b8:03:c8:36:e4:9a:bf:06:a9:ab:
fc:43:32:e1:3d:92:2f:4a:c5:c7:38:28:bb:05:4f:7a:ea:90:
ab:61:b4:66:9d:4a:82:ea:3e:21:f5:30:69:91:9b:4f:b4:be:
80:a0:d0:08:4b:9d:b5:0d:45:2c:96:e8:b6:68:de:97:83:b0:
4e:1b:14:f6:15:62:e8:25:d6:a0:29:d0:20:ba:bc:9c:52:60:
f9:15:c5:24:2e:f9:70:fe:e7:73:e8:9c:3c:9d:45:a8:e2:93:
64:44:76:f1:c6:17:1f:5d:d7:7b:fa:09:fd:16:0b:cc:69:bc:
1a:a4:ed:17:14:be:c6:30:0f:0c:a7:20:d7:1d:0d:ed:37:ab:
b5:ab:96:9e:8b:f6:c7:a1:a1:ca:df:11:c7:a4:18:75:85:cf:
5b:41:5e:72:42:35:da:66:52:4c:ba:c9:23:a5:3e:72:0f:3e:
63:d7:f7:5e:b5:78:70:b3:4a:1c:05:6d:25:39:1c:73:6e:ce:
e2:55:3a:f5:ab:db:72:e5:b6:51:66:f7:72:d8:c7:af:c9:42:
53:86:fd:63:f8:34:9a:8e:12:8c:1c:00:91:db:fa:26:a8:42:
2c:b2:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:40 2025 by rpki-client