Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419A6B12DA5311EF8F1DA169762E951A.roa
File: 419A6B12DA5311EF8F1DA169762E951A.roa (raw, json)
Hash identifier: Yfs55xU+TxGMbIlCSEDRH+WAO8xJq7lZORJsIS69iQI=
Subject key identifier: D4:D7:74:EF:8E:15:BD:78:C3:4B:29:65:C0:85:88:46:F7:9F:B6:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014733
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419A6B12DA5311EF8F1DA169762E951A.roa
Signing time: Fri 24 Jan 2025 13:00:59 +0000
ROA not before: Fri 24 Jan 2025 13:00:55 +0000
ROA not after: Sat 01 Mar 2025 13:00:55 +0000
asID: 49505
IP address blocks: 154.223.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83763 (0x14733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 13:00:55 2025 GMT
Not After : Mar 1 13:00:55 2025 GMT
Subject: CN=67938f0b-687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:54:98:5c:07:4a:e6:1e:fe:ca:2c:df:26:
65:ab:1d:3e:f6:1f:df:30:82:f1:bd:1b:7f:37:48:
92:09:6a:66:d2:81:03:91:e9:1e:41:f9:57:1c:e0:
4a:10:8e:d4:5b:37:b9:7f:d2:6b:43:a0:c7:aa:7e:
33:4e:cf:fc:70:9a:76:59:15:87:6d:48:6c:b6:1f:
cf:f9:f7:5e:39:3b:0e:41:27:ee:6c:5a:3c:cf:59:
ca:53:28:22:50:7b:11:7e:99:85:16:72:d6:1a:95:
af:9a:e8:75:5d:ab:ff:1a:87:3f:85:cc:3f:c0:2e:
fd:27:91:c4:12:71:78:c4:b3:7d:7d:e2:42:46:e2:
6a:3a:2a:d9:58:4f:06:65:13:29:fa:e7:43:0a:0c:
c0:d9:83:5c:c5:8b:e3:97:36:bb:2b:ff:df:00:3d:
9b:11:c1:61:05:5e:d9:aa:72:2e:69:11:fa:6c:80:
61:26:d9:c2:f1:2d:8b:95:a4:04:25:88:ad:29:12:
e4:fe:36:2f:7f:01:1f:0f:85:a6:af:1d:d6:e7:47:
ee:85:31:2b:4d:56:a7:fa:93:8d:b5:21:4c:73:d1:
76:f4:2a:2b:80:5f:9d:6a:31:91:ab:6d:12:d9:24:
9c:e5:e9:15:fb:b6:b5:e7:be:b6:b3:14:95:f2:1d:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D7:74:EF:8E:15:BD:78:C3:4B:29:65:C0:85:88:46:F7:9F:B6:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/419A6B12DA5311EF8F1DA169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.202.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a7:70:26:7a:f0:d5:fa:da:26:52:4f:a9:0e:88:7c:01:90:
64:84:a4:54:d3:26:4a:07:c2:6a:16:c9:f1:72:9c:44:4e:3f:
8d:6e:77:54:40:40:15:bc:e3:9e:34:11:41:cc:04:e7:13:6e:
0e:22:cf:61:d4:0e:ed:b4:60:5a:fe:cc:51:e0:9f:05:60:ec:
b9:05:2f:5a:48:20:cd:3e:4b:be:5d:99:f6:00:e1:76:75:7c:
f1:0b:da:0c:01:1f:fe:7a:0b:1c:44:5f:f9:02:b9:65:11:4c:
bd:12:dc:c4:bb:b8:86:20:62:fc:3d:7d:c6:e3:18:8f:2f:df:
ce:fd:83:aa:87:4c:ba:df:a5:8f:1e:9e:bb:2f:17:8f:0c:c3:
9c:b1:81:e9:e0:22:3b:d2:9d:52:50:6f:0f:5d:ce:47:67:ce:
6e:25:71:a5:d9:13:c3:35:a0:3f:24:58:e5:a1:dd:6c:ed:c5:
0c:03:42:5a:a6:61:78:85:26:37:35:66:e2:c6:cc:f6:c5:bd:
a5:9f:d6:26:1b:2a:71:11:a9:d5:3c:ff:a8:22:46:9c:a2:b1:
94:ac:df:d0:06:9e:a6:4f:b7:e4:d7:72:ff:68:5d:85:0a:14:
93:a4:37:76:0f:2a:26:9c:81:1b:18:36:ac:8a:34:0d:4a:6e:
35:12:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:45:53 2025 by rpki-client