Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274429A6D8D211EFAC912843762E951A.roa
File: 274429A6D8D211EFAC912843762E951A.roa (raw, json)
Hash identifier: BcopS7ajQHY+6v2biiCLhnzim8a8647EIz1uO3kpBbQ=
Subject key identifier: A7:32:E2:2D:91:FD:DD:C5:59:C3:F5:EC:43:E0:8E:BC:43:BF:8B:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274429A6D8D211EFAC912843762E951A.roa
Signing time: Wed 22 Jan 2025 15:04:18 +0000
ROA not before: Wed 22 Jan 2025 15:04:15 +0000
ROA not after: Tue 01 Apr 2025 15:04:15 +0000
asID: 138915
IP address blocks: 154.93.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81852 (0x13fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:04:15 2025 GMT
Not After : Apr 1 15:04:15 2025 GMT
Subject: CN=679108f2-0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:aa:c2:15:01:d3:e1:e6:5e:0b:0d:a1:1a:
69:81:28:1c:ba:1b:18:87:f8:2d:8a:41:fd:0e:5f:
d2:d0:0f:1a:40:2e:ce:f6:64:45:7c:cc:e5:6f:11:
82:76:dc:c6:f3:43:1c:6a:36:e1:c6:b1:dd:2a:bf:
4b:d5:12:cc:89:0f:21:d4:ae:68:6d:9a:b3:91:f2:
f5:ca:f8:6a:89:fb:21:ad:79:bf:f9:47:a3:7e:f7:
a3:ea:5d:b0:44:89:5c:5d:5a:2a:09:5e:31:83:a8:
2d:d6:bd:d5:96:1d:36:43:d2:d1:52:a0:f8:03:79:
9d:2a:30:b7:1c:d9:7c:6a:35:76:0c:a8:5b:c3:5c:
54:e3:04:b1:88:27:2d:82:ca:45:36:02:8f:a1:bd:
49:a0:e9:09:99:8c:83:8d:23:73:e9:2d:67:7e:5f:
84:f3:9d:ff:71:a5:66:88:7d:9f:49:5b:46:41:e5:
b1:bf:1b:19:c9:04:1b:4c:74:59:5b:2e:44:6b:96:
7a:c6:b6:04:2b:97:81:6e:15:14:9b:3a:e8:bb:a1:
8a:a2:01:90:3b:58:de:1f:ab:14:96:90:36:5e:8c:
5c:62:3a:93:32:77:aa:3f:5b:f9:9d:e5:9b:e3:4e:
b1:7e:01:39:fd:96:1d:9b:16:b2:e0:35:c3:4b:aa:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:E2:2D:91:FD:DD:C5:59:C3:F5:EC:43:E0:8E:BC:43:BF:8B:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274429A6D8D211EFAC912843762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:32:78:af:cb:f7:c4:69:2e:61:03:55:70:5a:ad:e7:34:ce:
f7:a1:3c:ae:6b:ba:32:c3:14:b5:f8:b6:94:1e:90:8b:d3:c7:
15:c5:19:c9:cf:be:4d:ad:cc:dc:4c:f5:e1:d9:84:29:a0:51:
9a:43:95:0b:6b:42:7f:d8:b8:17:9b:2c:25:5b:96:32:20:a6:
93:cc:d9:d9:a0:3f:be:9a:cf:bf:34:74:08:ce:e5:75:59:ea:
41:33:d8:65:41:5f:be:d0:8f:5d:55:00:5c:68:7e:63:66:01:
6a:f1:5c:c3:a0:ed:2c:5e:8d:79:75:b6:a9:30:55:12:08:17:
26:07:f1:f6:45:a2:b5:25:41:97:d0:46:3f:18:03:11:09:ff:
cd:70:f3:d8:ee:62:21:ed:66:4c:17:ba:f6:86:c8:bc:92:69:
20:af:7e:4e:ad:4e:6c:4b:af:17:bb:18:2e:82:2c:c1:b1:30:
bb:10:36:06:0e:74:69:bc:85:94:e4:18:39:23:31:0d:aa:99:
06:25:ea:74:89:61:d4:ad:be:2e:ec:a3:d9:ec:71:5f:2a:1c:
11:9a:23:23:87:bf:33:c5:3c:40:a7:67:40:ea:2c:c4:16:6a:
79:2e:bb:3b:dd:95:1a:29:38:cf:65:b8:91:48:87:51:78:47:
a8:36:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:14 2025 by rpki-client