Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB6118AF4F411EF89426AAC762E951A.roa
File: 1EB6118AF4F411EF89426AAC762E951A.roa (raw, json)
Hash identifier: WDb8peNknwQARFkTCyW7CmQ7p4BwASEU4hz5idTChig=
Subject key identifier: 90:E9:8D:C2:FC:03:73:20:6B:CB:16:8F:75:69:91:8D:40:3B:AC:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB6118AF4F411EF89426AAC762E951A.roa
Signing time: Thu 27 Feb 2025 10:18:00 +0000
ROA not before: Thu 27 Feb 2025 10:17:56 +0000
ROA not after: Sat 29 Mar 2025 10:17:56 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92069 (0x167a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 10:17:56 2025 GMT
Not After : Mar 29 10:17:56 2025 GMT
Subject: CN=67c03bd7-2e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:c4:1e:3b:8d:05:be:2d:6f:ba:9c:01:6c:
44:03:7b:b4:73:20:2f:56:b6:71:02:c8:95:d1:1d:
2b:e5:1e:e9:ef:4b:0b:18:42:ef:44:76:46:6f:c3:
32:c9:e1:53:89:84:91:66:5f:5e:cf:9e:ab:fd:b8:
0f:50:9e:b9:94:71:dc:61:e9:63:39:17:3c:e3:2e:
50:c6:b0:f1:e0:0d:25:b9:d2:96:c0:13:9a:ae:cb:
77:41:71:cb:e6:40:ca:61:02:90:d4:bf:7d:d1:14:
a2:3a:b2:4f:4a:52:73:25:a5:1d:e3:5d:e2:6e:01:
2d:cf:1c:a2:cc:27:8d:5e:06:24:e3:80:19:f6:f0:
f9:82:20:ec:cb:61:db:81:99:62:5e:63:a7:25:40:
db:e3:2b:b0:1c:29:e6:42:1c:f2:91:fb:15:f7:d7:
f6:89:90:e7:23:0a:23:6e:3b:99:0c:34:a2:a9:11:
1d:0c:e1:ac:3e:07:a1:4a:f9:5f:4f:fd:b2:45:f0:
b6:8a:42:0f:f8:c2:af:4a:03:d4:0a:66:1e:02:68:
e6:d9:56:50:9d:17:49:a5:c2:b1:9a:5b:15:87:fe:
64:5d:22:ba:2e:ab:ec:2f:be:d4:ca:c9:a7:04:5e:
db:4d:09:44:3c:fd:95:53:46:b6:6a:1c:96:c1:64:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:8D:C2:FC:03:73:20:6B:CB:16:8F:75:69:91:8D:40:3B:AC:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB6118AF4F411EF89426AAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4d:eb:d8:ec:0b:d7:61:3f:d4:66:7f:08:9a:20:d9:6b:34:
b5:7c:d5:15:b2:b8:49:81:4e:e9:e7:18:9a:1f:a1:67:ff:1e:
ce:a7:14:b6:33:13:07:81:99:cf:b7:af:6b:2e:6f:d1:05:fb:
3f:68:6e:87:b6:94:97:5a:0b:52:c5:82:05:9f:49:1e:4c:02:
2e:3f:28:94:69:15:09:95:00:3f:3b:f7:a2:34:a3:b4:98:b9:
71:f3:11:48:cd:ac:25:67:fa:71:b8:ac:eb:00:c1:99:1c:28:
2f:97:92:be:6d:bd:97:f3:4f:e4:94:f6:1a:6a:4b:7a:2a:60:
dd:e9:92:6a:c9:12:5a:35:d7:9d:d3:bb:77:d3:af:b6:82:5d:
96:c1:36:c9:8c:b3:41:08:52:04:ec:bb:55:bb:4d:ef:e8:a4:
2d:6b:0b:bb:4a:b4:22:85:76:1a:1f:3e:a1:ec:60:b5:c0:15:
cd:0e:db:76:57:86:83:c8:b0:5d:6a:c6:6e:4c:aa:b3:87:a4:
3f:54:5c:3f:70:60:30:ba:ad:d8:ec:fa:44:c3:f3:79:3c:78:
d8:b8:5a:d0:3e:1a:e4:04:65:09:fb:a3:e6:5d:a5:d8:df:e7:
20:d6:50:4c:7d:03:63:73:39:11:53:4b:4f:59:b3:a9:3d:e3:
12:02:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:15 2025 by rpki-client