Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2118FE2EF2BF11EFA38B927D762E951A.roa
File: 2118FE2EF2BF11EFA38B927D762E951A.roa (raw, json)
Hash identifier: t1+xO4p+z19upfihaDj64T73evtRAJxHji199R/zHPs=
Subject key identifier: 2B:42:BC:63:F2:37:8B:39:72:5C:1C:C6:49:4D:A9:EF:CE:B6:31:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2118FE2EF2BF11EFA38B927D762E951A.roa
Signing time: Mon 24 Feb 2025 14:53:38 +0000
ROA not before: Mon 24 Feb 2025 14:53:34 +0000
ROA not after: Sat 29 Mar 2025 14:53:34 +0000
asID: 203020
IP address blocks: 154.223.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89146 (0x15c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:53:34 2025 GMT
Not After : Mar 29 14:53:34 2025 GMT
Subject: CN=67bc87f2-e01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:1f:d2:2a:1f:11:e8:a2:bc:fc:b5:4a:8a:
2a:5d:1b:1c:c1:10:fe:9e:c7:42:50:fb:7d:b6:98:
ba:19:d2:8c:9f:5e:c6:cb:6d:3c:1a:21:2d:76:bf:
9d:f4:04:93:2d:03:cf:a5:b8:9c:47:5a:ab:9e:05:
a9:43:fd:d0:ec:34:88:98:4a:13:b1:05:c9:11:af:
cd:53:06:01:7f:4b:bc:c8:8f:ec:8a:b1:73:c7:bd:
3d:34:85:2b:f5:78:98:80:32:94:6a:45:35:45:56:
2b:ee:21:94:df:4a:a7:c8:92:e5:74:c6:da:25:a4:
d0:1b:01:6e:72:02:5b:82:60:02:58:2c:88:3a:d6:
80:92:96:a6:a7:79:09:f8:a1:45:d5:e2:96:3a:87:
f7:72:cd:f9:25:e6:b1:d2:cf:4e:73:d4:8a:63:33:
d8:09:83:b4:bb:65:a9:2e:ff:0c:d0:6b:fc:f7:e2:
46:2c:d5:5f:4c:1b:e1:0b:1c:1e:c4:e6:6b:ec:ab:
77:81:44:15:f3:19:f1:f6:d4:8a:ef:ad:88:2c:62:
fb:c2:62:c7:85:b0:41:66:aa:ce:40:0a:cb:e4:44:
e1:ff:11:3e:cc:b4:1f:21:7f:f9:c6:17:29:d6:91:
f8:89:19:c8:99:12:96:e6:88:fb:2b:8f:2d:3c:68:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:BC:63:F2:37:8B:39:72:5C:1C:C6:49:4D:A9:EF:CE:B6:31:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2118FE2EF2BF11EFA38B927D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:72:ed:26:30:33:58:d9:a3:a2:8d:10:1c:70:dc:b0:e5:b2:
7e:b6:28:49:ce:c5:f4:14:b5:ec:f7:ca:9d:1d:be:9a:28:60:
6d:6d:50:ca:96:d8:75:e5:eb:43:99:05:34:d0:58:11:fb:4d:
91:c1:98:15:43:91:2c:50:33:58:9e:0c:e6:f0:c3:f2:14:42:
f2:db:51:96:df:5c:92:a0:47:4a:e6:23:fb:a4:58:c6:4f:5f:
73:41:e8:35:2e:69:f4:13:24:d3:5c:f8:9d:a8:55:f2:12:37:
26:ad:d0:ed:08:2c:1b:b5:c3:1d:67:92:b6:89:02:20:34:ea:
bf:c1:1d:df:cd:e0:d1:3e:ef:bd:8f:f2:0a:16:52:10:fd:82:
50:30:b6:92:26:62:e2:d0:c1:00:d4:af:71:d5:65:85:9f:d2:
f3:11:b1:bd:0e:f3:dd:e8:c2:ee:47:1d:ae:7a:6a:d7:19:c2:
18:6f:a4:e1:e8:75:9d:87:8e:97:df:bf:fb:f5:90:b8:94:af:
a3:42:77:0c:79:d8:9f:56:3d:04:88:92:14:d1:9d:ca:b1:d5:
c5:5c:47:21:ce:ec:bc:55:ca:c7:31:ea:dd:d0:b3:9d:eb:9d:
14:7c:ee:e4:22:59:b3:29:c2:48:94:3c:a4:e0:cb:f4:0d:b5:
32:23:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:44 2025 by rpki-client