Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16415438DA0011EFB38291B6762E951A.roa
File: 16415438DA0011EFB38291B6762E951A.roa (raw, json)
Hash identifier: /If6o61RgWigUNQ5cM0IbYko0VGr2nOndggPeHTkEms=
Subject key identifier: 84:57:06:BF:06:40:D7:55:8E:4B:60:1E:C7:0C:E1:7E:A5:B4:8B:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01437C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16415438DA0011EFB38291B6762E951A.roa
Signing time: Fri 24 Jan 2025 03:05:38 +0000
ROA not before: Fri 24 Jan 2025 03:05:34 +0000
ROA not after: Sat 01 Mar 2025 03:05:34 +0000
asID: 49505
IP address blocks: 154.223.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82812 (0x1437c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 03:05:34 2025 GMT
Not After : Mar 1 03:05:34 2025 GMT
Subject: CN=67930382-3491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:76:f1:d0:d2:c8:c8:5d:e5:4f:09:04:7d:
38:44:a3:24:b1:93:8d:db:01:55:dc:74:4c:51:38:
4a:ce:05:f6:56:21:b2:f0:35:43:4b:8a:92:d1:4e:
cd:1e:6c:dd:3a:e9:20:c8:59:87:d6:e0:13:f8:78:
45:03:c2:e8:27:ba:7d:f0:d6:6d:e1:3f:85:0c:df:
7e:ee:4d:71:e4:4d:84:11:e4:93:88:07:59:b9:16:
eb:70:1b:cb:3d:e0:ba:34:3e:eb:96:6d:25:52:27:
82:bb:1a:00:f8:d9:69:52:50:48:96:50:7b:5c:1f:
e7:63:6a:49:87:1e:74:69:b7:a3:ef:55:f2:b3:8f:
a1:d8:89:a7:da:e2:a8:10:ff:fe:cb:7e:a3:1d:86:
22:55:23:23:20:81:34:b4:9e:a3:53:c3:ac:ef:51:
94:4b:69:38:6b:df:f7:b3:53:58:50:d8:65:60:1d:
a2:0b:c6:00:ab:5d:b3:34:27:ac:b7:83:31:a8:16:
67:d1:e4:e0:e4:a4:71:b2:90:b9:66:40:95:0f:5f:
b8:b1:5a:72:45:35:e0:b4:4d:0a:b8:b8:f6:5f:bd:
62:dd:30:60:31:c7:a8:2e:91:55:56:12:86:33:41:
d6:59:f3:65:5e:5d:f1:31:cd:30:91:c9:92:61:50:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:06:BF:06:40:D7:55:8E:4B:60:1E:C7:0C:E1:7E:A5:B4:8B:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16415438DA0011EFB38291B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4c:2c:f2:46:3e:7e:23:4c:0a:ac:c3:51:19:17:d1:ff:56:
59:3f:0d:5f:7a:38:c3:ed:a4:7a:41:ee:6f:dc:8c:a4:46:a7:
f2:ed:7b:56:22:78:c4:fd:9a:0a:d2:39:56:f1:3d:ca:f9:31:
bc:d3:ad:30:8f:1e:84:b0:be:71:a7:d8:b9:61:ef:09:bd:f6:
c3:ec:56:d7:73:6a:9d:3e:95:6e:43:e5:fb:ff:df:d2:15:25:
e8:e5:ec:23:f8:92:86:d2:d4:42:33:bb:f7:36:1e:00:55:86:
23:e0:6f:3a:de:b2:7c:76:de:18:bb:ff:14:40:44:ed:cd:50:
20:f2:b7:c6:19:3c:7c:e9:92:d5:fc:a4:aa:50:18:b7:f0:19:
5b:59:db:80:d6:22:72:76:07:19:7a:15:62:ac:76:13:9b:3c:
20:53:e0:8c:65:e8:9f:ac:67:26:23:fd:ba:d7:09:bc:b4:ec:
79:bc:45:c2:90:9b:08:b6:dd:e5:e1:ca:fd:5f:96:92:d2:7e:
19:e9:8e:8b:af:c7:37:d1:6e:20:80:ff:f2:40:98:2e:f4:00:
0e:85:84:94:e3:42:1e:a1:2a:00:f4:d5:8c:fa:83:c8:9d:0c:
fd:17:51:e3:3f:3c:dc:fd:ff:c0:de:cd:97:21:1c:f5:91:77:
af:15:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:47:18 2025 by rpki-client