Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AFAB0DA5511EF948A1077762E951A.roa
File: 1B9AFAB0DA5511EF948A1077762E951A.roa (raw, json)
Hash identifier: IX/zq1cvDRg/ZzuMmhiazjeirfFsFuywr6bK+Ic3p3U=
Subject key identifier: 1F:AE:5A:69:1D:77:8A:57:41:86:A3:3A:BA:DE:D1:10:42:67:83:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014751
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AFAB0DA5511EF948A1077762E951A.roa
Signing time: Fri 24 Jan 2025 13:14:14 +0000
ROA not before: Fri 24 Jan 2025 13:14:10 +0000
ROA not after: Sat 01 Mar 2025 13:14:10 +0000
asID: 49505
IP address blocks: 154.223.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83793 (0x14751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 13:14:10 2025 GMT
Not After : Mar 1 13:14:10 2025 GMT
Subject: CN=67939226-9068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:2b:9f:45:bf:77:3c:17:02:14:3b:0f:00:
a9:00:fa:e9:58:34:a5:28:c6:bf:63:91:60:d7:4c:
d4:09:7a:61:05:cf:c1:f5:bb:3a:43:49:99:81:a9:
54:32:b9:b8:d5:29:38:3e:a1:05:5b:82:07:bb:bd:
d7:6a:c2:33:c0:f8:5b:15:ff:26:75:3b:56:b3:9d:
37:d5:30:06:c5:36:1b:e9:55:53:ed:5b:ef:d0:8c:
d2:37:0a:2a:d1:b2:11:71:b0:f6:0e:30:0f:1d:f2:
85:60:55:4d:92:a1:fa:89:4a:28:e1:45:fc:a4:57:
4a:ef:62:82:1e:a5:2d:62:34:e5:b8:62:10:97:5f:
13:a9:d6:87:3a:c1:9f:d0:58:55:60:a9:8e:04:d0:
fe:2f:fe:08:07:a1:cc:e5:9f:02:76:8e:91:37:b6:
08:32:c9:94:e3:fa:71:a2:9b:57:16:01:df:55:7f:
bf:09:85:04:80:5d:23:0e:f8:92:e0:e3:67:fc:03:
f6:97:ca:83:46:63:4c:f8:51:6a:e4:c3:68:5c:fe:
63:63:f6:72:cc:4a:a7:9c:88:5c:f6:9f:29:3d:41:
33:d0:7d:8b:48:0a:25:2e:bd:17:7c:90:13:fa:e4:
7f:f5:19:b5:b6:61:3f:5c:bd:3b:6e:0a:f5:6c:0a:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:5A:69:1D:77:8A:57:41:86:A3:3A:BA:DE:D1:10:42:67:83:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AFAB0DA5511EF948A1077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:dd:7c:48:6f:c5:d9:ce:17:24:9c:97:0a:37:99:7f:bd:77:
8e:10:68:17:8d:74:84:e5:a1:d0:15:56:0d:13:3d:f5:ac:22:
63:b1:a3:d4:b7:78:fd:ef:eb:03:61:31:ba:cf:c7:44:c6:c8:
a9:cb:cb:ee:0d:f6:1c:52:d1:14:b3:65:e6:49:3b:f7:a9:23:
69:6c:f3:8e:9b:c3:de:43:b7:3d:cd:3e:be:ba:4a:28:a9:8c:
98:26:ee:43:e4:a6:62:7c:47:16:ba:47:a4:94:c2:31:0e:78:
2e:d7:53:dd:22:0c:0b:8e:65:6a:68:84:c5:ac:e0:c5:bd:bd:
2e:8b:d0:0d:e1:a5:a6:ab:38:39:fc:69:7a:5e:b3:2c:90:0d:
e2:a5:2c:62:44:8c:8d:74:95:d3:98:95:18:f3:e6:0e:f5:56:
e6:e3:67:14:5f:99:0a:7c:e6:ab:13:43:aa:24:b9:cc:15:c4:
ce:a3:ae:85:61:e8:f4:fc:9a:db:e6:bc:28:57:31:6a:75:6b:
6d:e0:89:df:f2:04:23:e8:53:d8:0d:ec:72:c0:dc:a8:db:91:
f5:8c:58:00:ec:5b:3e:b9:c4:89:40:39:97:62:db:b1:7e:92:
58:62:7e:d7:86:20:d4:00:97:5d:e2:e6:17:40:02:bb:b0:8d:
67:e9:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:49:13 2025 by rpki-client