Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8E03F0DC0511EF905E695B762E951A.roa
File: 3C8E03F0DC0511EF905E695B762E951A.roa (raw, json)
Hash identifier: LeRFXsP0TrMnNCRcohDn5tn4WA0Un2K98MiRIZsaJNE=
Subject key identifier: C9:D5:AE:23:2D:B2:5C:85:F5:99:BE:FC:BB:9F:2B:CB:07:45:5D:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8E03F0DC0511EF905E695B762E951A.roa
Signing time: Sun 26 Jan 2025 16:47:32 +0000
ROA not before: Sun 26 Jan 2025 16:47:28 +0000
ROA not after: Tue 01 Apr 2025 16:47:28 +0000
asID: 63139
IP address blocks: 154.94.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84730 (0x14afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:47:28 2025 GMT
Not After : Apr 1 16:47:28 2025 GMT
Subject: CN=67966724-564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:46:96:06:c1:3d:39:cb:3a:5b:49:6d:4d:
af:8f:07:aa:e3:e0:bd:79:5c:b9:69:9f:90:23:3c:
49:1b:87:31:9c:65:9c:60:95:2f:5c:70:f9:e1:a8:
1c:b3:a9:3d:5b:f6:47:1c:9d:c0:88:92:7c:15:e8:
9a:09:fa:b3:86:f0:91:63:98:61:9f:99:d5:92:45:
ea:53:c2:e8:17:24:b2:c0:c2:3a:af:6f:7f:a2:00:
1b:6f:82:28:ce:65:71:d9:97:f8:da:28:3b:c2:f9:
1b:7c:b7:df:71:e8:56:c5:b0:a5:4e:d6:b6:7e:fc:
ff:a1:54:29:da:d2:2a:44:7b:c2:74:48:bc:d3:9a:
89:e6:99:91:26:13:af:cf:d3:c2:44:49:74:46:cc:
e7:4f:8f:02:e3:9f:68:cb:3f:d8:12:e9:ae:ce:20:
7b:64:fd:44:d3:2c:f9:37:b8:85:8f:b8:0d:0e:e7:
cc:66:6c:b6:58:93:33:f7:f7:bf:1e:54:ea:0d:7e:
66:6a:8f:f4:94:e3:77:12:d2:11:92:a5:7d:80:90:
94:cf:18:48:b3:d0:b1:dc:00:d9:ea:02:3c:60:91:
ee:c1:e1:27:d2:98:af:90:f2:6a:5e:0c:5e:1e:5e:
26:40:af:85:09:5b:e8:eb:82:63:26:a8:6a:4f:bf:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:AE:23:2D:B2:5C:85:F5:99:BE:FC:BB:9F:2B:CB:07:45:5D:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8E03F0DC0511EF905E695B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:58:b7:94:8a:31:90:1e:30:67:c3:b3:cb:8e:08:1b:91:fe:
b9:79:33:e9:0c:a2:73:ac:28:5c:28:bc:b0:43:25:95:ff:f9:
21:92:1c:0c:0a:6f:58:2e:a4:81:fd:dd:3a:a3:65:2e:5d:d8:
14:45:58:cd:3d:5d:a5:06:29:e2:43:c6:14:58:4e:7a:5f:ab:
ce:27:7b:e9:55:93:ca:7a:1b:85:1f:1a:eb:ed:08:70:93:54:
d7:5e:38:e5:c9:40:02:36:81:d9:53:1a:65:4d:ea:8f:2c:67:
63:1b:db:fa:c9:05:25:11:59:c7:3c:6a:c2:cf:59:e0:8c:41:
1b:fd:6d:86:29:88:d2:08:2c:b3:4a:4f:4a:82:3c:9d:72:5e:
38:fb:7b:36:cb:82:5e:64:d6:76:a0:00:b4:88:1c:a8:cb:42:
79:64:2f:fe:b9:10:d7:d5:bb:64:3f:f7:36:ad:7f:dd:44:af:
89:6d:af:45:93:14:00:30:52:1b:6c:cf:cd:37:d9:4f:09:3a:
10:47:b9:a0:2c:21:c3:15:5d:60:8d:5f:80:04:37:ee:a5:c3:
d7:d7:6d:4d:7f:e7:b9:80:38:9d:f5:02:2e:de:d8:ce:58:2c:
f8:e6:61:cd:68:df:fe:10:e8:40:ec:de:bf:08:de:59:aa:59:
2f:fa:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:46 2025 by rpki-client