Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D18EDAD8CF11EF87A135AF762E951A.roa
File: 21D18EDAD8CF11EF87A135AF762E951A.roa (raw, json)
Hash identifier: gZjUV/2ahJNdXcIT3KG02PJi68OkPU85UDbaOWxgZxk=
Subject key identifier: A3:41:96:0D:4A:C3:A0:57:30:E9:AF:71:49:52:15:34:D7:DD:D6:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D18EDAD8CF11EF87A135AF762E951A.roa
Signing time: Wed 22 Jan 2025 14:42:41 +0000
ROA not before: Wed 22 Jan 2025 14:42:37 +0000
ROA not after: Tue 01 Apr 2025 14:42:37 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81838 (0x13fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:42:37 2025 GMT
Not After : Apr 1 14:42:37 2025 GMT
Subject: CN=679103e1-0480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:63:ea:17:66:f7:82:db:f1:ca:3c:c6:01:
3a:13:dd:a1:d9:d7:fb:8f:0e:75:d9:49:63:4a:d2:
e5:bd:ad:19:f9:8c:51:3b:55:7e:8f:d6:9f:06:a2:
9b:45:a6:42:66:7c:b8:7e:b9:43:80:a5:fa:ca:84:
a7:f5:df:00:73:ef:f2:19:e1:06:9e:a2:3f:62:4c:
04:20:fd:c7:c7:d6:44:9b:f5:41:c4:48:10:7f:ef:
eb:11:88:ee:7d:8f:69:6e:04:f2:7a:a0:dd:3a:16:
35:c8:d8:3a:56:ce:af:2d:39:6d:02:e2:e6:5b:5c:
51:7d:ab:c6:93:4e:9f:11:34:3b:45:2d:53:24:50:
06:e4:77:72:55:7f:6f:2a:22:10:42:1b:11:54:23:
a9:48:c1:e9:65:cf:50:1f:c3:14:05:bd:13:2e:17:
fd:32:63:24:8a:23:07:f5:c6:58:86:f5:5c:a0:5b:
16:9e:02:d2:2d:a6:9d:85:01:6d:84:6f:88:62:fc:
63:22:e7:f3:46:6f:61:8c:6e:28:2a:da:c8:bb:3d:
d4:7e:80:2d:e9:8a:e3:e6:fa:a4:c2:ce:46:d2:9d:
91:d0:44:01:94:65:cb:01:75:50:5e:d7:0d:fe:36:
ae:3f:c5:fc:c1:6a:e6:fb:33:9c:61:c6:94:eb:6b:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:96:0D:4A:C3:A0:57:30:E9:AF:71:49:52:15:34:D7:DD:D6:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D18EDAD8CF11EF87A135AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
75:28:e4:ae:ad:a9:d9:13:e9:04:fd:8f:3a:b6:92:7b:78:ab:
44:90:74:0b:cf:be:e0:fb:0b:74:d6:ff:1d:11:84:87:24:42:
de:fa:ca:8b:86:70:d5:17:90:ae:44:61:08:1d:be:47:43:1f:
21:c7:0d:8e:2b:85:2f:21:44:c8:19:84:aa:ed:2b:82:70:a9:
22:93:18:93:18:1c:60:f7:c3:13:80:55:64:26:3c:d6:16:c0:
8f:da:8c:55:dc:98:47:13:6c:b4:e2:0b:30:8a:13:40:46:e1:
79:b7:bd:73:f9:c6:7b:0a:eb:a0:e4:61:0b:de:b7:1b:5a:0a:
ff:87:3d:3c:8a:13:4f:d8:78:38:8c:28:b3:68:25:26:ea:b0:
41:c0:23:a3:29:bd:0d:a6:b2:62:5d:c5:aa:5d:97:4e:53:a0:
04:1b:dd:ec:e6:19:66:69:e7:48:65:cf:34:24:81:1f:b2:e4:
ea:90:b9:a9:2d:b7:4d:c0:15:0e:7f:d3:fe:5a:09:1e:d9:9d:
2a:0e:26:7b:ce:09:40:6b:05:b2:66:ed:0d:cd:37:cb:b1:29:
54:22:e9:7d:aa:e2:ce:17:fd:6d:3a:1f:16:59:f6:6b:4e:0f:
17:84:79:08:23:88:30:bc:bb:30:d1:71:a7:32:b8:93:ea:57:
c1:90:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:24:55 2025 by rpki-client