Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207DC268D8C211EF8094DD58762E951A.roa
File: 207DC268D8C211EF8094DD58762E951A.roa (raw, json)
Hash identifier: NUAPTSWkcBChZJBwtYMGIMUSnnGM/SM9jBfHUgBMeMY=
Subject key identifier: BD:AC:D5:D8:83:AD:09:A5:88:7D:13:CF:94:0F:00:DC:4A:E3:0F:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207DC268D8C211EF8094DD58762E951A.roa
Signing time: Wed 22 Jan 2025 13:09:35 +0000
ROA not before: Wed 22 Jan 2025 13:09:31 +0000
ROA not after: Tue 01 Apr 2025 13:09:31 +0000
asID: 138915
IP address blocks: 154.93.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81778 (0x13f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:09:31 2025 GMT
Not After : Apr 1 13:09:31 2025 GMT
Subject: CN=6790ee0f-064c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:a8:5f:66:76:87:90:d6:4e:0d:ce:da:de:
51:8c:2f:03:0e:47:9f:e1:96:4b:8c:01:36:4a:54:
6f:44:90:82:04:50:3d:fa:d4:7e:7f:b7:59:a3:8b:
71:77:1d:c9:96:8d:b1:2b:ab:31:0b:cf:7e:20:9a:
26:a0:ea:19:70:e7:10:3e:c8:93:5a:75:d3:cd:c3:
f8:e6:8d:d9:d4:c1:99:00:17:35:a7:dc:ba:c2:a7:
5d:d8:b6:0b:ab:a4:7f:5f:0f:e4:3e:45:c1:72:7f:
f5:52:2c:05:82:ff:96:5f:cc:87:5e:85:6f:2e:1c:
c9:f1:bb:6c:8a:21:24:98:4e:d9:eb:93:ee:9d:11:
1c:14:c0:cb:22:dd:dd:a3:58:28:7e:fe:e5:c3:1f:
6e:7f:85:47:11:f8:c0:65:7a:c6:c0:8a:c0:ac:5e:
46:05:27:7a:eb:c0:15:b7:d0:37:66:d3:3d:22:33:
e2:e2:83:80:7b:e8:c7:d9:e9:1f:bc:2a:58:ef:17:
d9:46:95:38:eb:7e:4e:d9:d8:23:da:6d:ac:40:2b:
69:2b:84:f4:1f:75:27:7b:fb:00:cd:ab:ce:ea:7e:
8f:d6:27:3c:6e:3f:d0:c5:55:54:ac:44:17:16:24:
5e:3d:c5:bb:84:da:5b:c0:6b:7a:87:be:77:b0:4c:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:D5:D8:83:AD:09:A5:88:7D:13:CF:94:0F:00:DC:4A:E3:0F:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207DC268D8C211EF8094DD58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fc:3e:c9:a0:f4:c3:35:02:4e:fd:97:8a:34:49:4f:dc:a1:
0e:ab:63:19:f7:06:47:ba:87:22:83:db:6c:9c:7c:a8:20:a2:
03:6f:a0:82:85:57:e8:cc:31:cd:f2:1e:fd:ff:ce:d4:4c:95:
31:aa:a3:19:ce:d7:e4:18:bd:3c:96:57:db:aa:47:03:c4:80:
25:f8:2a:55:8c:6a:3b:cd:5d:f1:d9:ae:e1:b6:85:db:14:75:
08:28:00:25:cc:7e:41:b6:62:b0:8f:fa:51:f9:de:92:ee:ae:
66:7e:e9:3a:c1:5f:6c:28:9b:c0:d1:21:b9:e3:33:01:f6:ec:
f4:de:0d:f7:cb:bd:39:4b:8e:a9:38:68:05:3f:2e:ad:12:6e:
e0:e5:4e:b3:b9:47:74:8e:93:44:32:75:3a:a8:29:74:b2:8a:
98:3b:ad:ba:c2:52:5a:8a:3e:d3:27:9c:8a:6c:b7:b7:e2:6c:
a5:aa:78:12:5c:a7:1e:76:36:1e:a4:8e:a5:5a:9a:61:00:dd:
ec:7e:84:3c:77:9b:07:1c:8c:2d:86:29:0d:84:d6:52:41:fe:
84:7f:b3:46:2f:20:41:b7:e3:92:b2:cc:a3:b5:f9:b1:45:f5:
ae:33:81:c8:6b:e3:27:c7:d0:a8:8e:0f:72:d9:55:58:85:e0:
92:72:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:55 2025 by rpki-client