Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F39132D8D811EFADE90C6D762E951A.roa
File: 46F39132D8D811EFADE90C6D762E951A.roa (raw, json)
Hash identifier: OuPqLX4KrlKrV/kMM3NU5sluQM5ax1X6A7DmhPoTujQ=
Subject key identifier: 7D:7B:58:2F:A6:77:E3:D8:9F:FC:86:98:E0:CA:26:D9:5D:34:CF:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F39132D8D811EFADE90C6D762E951A.roa
Signing time: Wed 22 Jan 2025 15:48:09 +0000
ROA not before: Wed 22 Jan 2025 15:48:05 +0000
ROA not after: Tue 01 Apr 2025 15:48:05 +0000
asID: 138915
IP address blocks: 154.93.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81874 (0x13fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:48:05 2025 GMT
Not After : Apr 1 15:48:05 2025 GMT
Subject: CN=67911339-eecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:9e:13:39:2b:0a:a1:be:47:32:8c:dd:dc:
05:9f:fb:d3:41:d0:6f:d6:a4:d3:3e:dc:08:77:e8:
dc:3d:cc:26:c7:18:e5:6f:fa:0a:36:58:72:03:d9:
dd:72:94:d4:2a:72:7d:03:77:a6:73:30:fc:93:f9:
08:47:5f:2b:f0:34:e3:10:4d:27:6f:90:a6:39:e5:
c5:00:38:a7:8e:b4:17:b2:f2:9e:8e:a0:62:d8:d3:
4d:e8:f9:75:3a:28:d1:10:23:07:ec:e3:b9:a0:7f:
64:bd:3b:0c:12:b8:bc:38:3e:c4:b3:d4:a1:c8:f4:
ba:e8:85:02:62:27:b0:d9:70:9f:76:c9:9e:a4:67:
10:a1:c0:f8:ec:d8:78:36:fb:38:19:07:c8:0e:54:
c9:d0:b5:e7:a0:8f:1d:ca:b8:5f:7c:dd:80:13:b1:
c8:b8:73:c0:14:12:03:97:13:b0:47:6d:18:11:35:
0c:68:d9:ee:38:b2:69:46:21:b0:c4:cb:36:25:90:
57:ec:49:f4:7a:79:a8:9b:1f:7d:16:2a:2d:99:fb:
ad:af:70:22:29:cd:c0:cc:01:a0:ce:f7:21:e5:cc:
eb:f5:ee:44:9d:66:6d:10:36:bc:da:50:f0:78:bd:
15:3e:13:b6:b0:b3:92:b7:de:a0:bd:be:6b:52:83:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:58:2F:A6:77:E3:D8:9F:FC:86:98:E0:CA:26:D9:5D:34:CF:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F39132D8D811EFADE90C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.112.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cd:47:15:21:2f:1a:30:fb:b5:4a:32:9d:9c:49:a1:3b:eb:
72:5f:a1:96:4c:91:19:be:ad:58:e2:ad:ac:cc:bd:16:aa:cd:
3d:28:e4:c8:c1:42:9b:0b:9a:cb:25:9c:db:d6:02:57:4c:ac:
3f:ee:d5:5b:82:ed:61:ba:44:ae:f5:f8:4d:7d:9a:1f:b1:76:
f0:fd:2b:68:2e:28:0a:7a:6b:35:43:78:77:b5:8f:fa:a8:64:
77:9f:14:2c:63:8a:50:15:95:2d:a8:1a:13:43:8e:c8:55:83:
55:d0:2f:d6:8e:09:2b:7a:64:43:28:e2:56:7e:fd:b2:5f:1f:
af:2d:32:e6:48:5b:e1:e5:9c:77:8d:4c:7d:10:33:7a:e3:f2:
0a:ea:8a:6e:22:36:2b:00:9f:e1:af:35:c1:23:c5:04:ea:ec:
a4:0d:3e:0b:9c:51:d4:2f:ce:1e:fe:8a:04:eb:98:da:14:9e:
9c:46:3f:78:c4:df:b4:ab:12:74:22:1d:05:6f:09:a5:c0:73:
1f:23:7a:18:44:72:0d:5b:6d:85:f2:b1:b6:a4:75:25:06:8c:
28:6b:85:f8:6b:41:a9:88:ea:93:6e:28:65:e0:7f:51:c0:b2:
5b:89:c2:d4:12:56:db:db:b3:21:ca:e6:8a:e6:45:a1:cc:c9:
17:cd:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:15:00 2025 by rpki-client