Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB2B77ADAF711EF9089EE43762E951A.roa
File: 4DB2B77ADAF711EF9089EE43762E951A.roa (raw, json)
Hash identifier: 7WuC8tfN7lt9ApSIEv1dSZSlRarQfxk7bHrihhPaBjw=
Subject key identifier: 98:AC:09:5D:0E:1D:AF:CA:3B:E5:82:3F:AC:78:45:D3:D9:0A:88:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB2B77ADAF711EF9089EE43762E951A.roa
Signing time: Sat 25 Jan 2025 08:35:17 +0000
ROA not before: Sat 25 Jan 2025 08:35:13 +0000
ROA not after: Sun 30 Mar 2025 08:35:13 +0000
asID: 63139
IP address blocks: 154.94.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84221 (0x148fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:35:13 2025 GMT
Not After : Mar 30 08:35:13 2025 GMT
Subject: CN=6794a245-af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:92:05:2f:7f:e5:9c:99:51:86:10:5d:24:7e:
8e:7c:5c:1b:51:de:f6:f4:bd:d4:c8:1e:56:64:64:
cd:af:19:76:80:d4:1f:cd:c6:c9:a6:c7:39:d5:c1:
cf:60:e9:1c:ee:79:a4:5d:d5:67:50:e6:95:c5:5b:
f8:e5:44:6a:6a:be:a2:5c:85:d7:20:20:d3:f7:69:
60:f1:50:fe:3e:f6:3e:d5:4b:5a:c1:15:ad:ee:3e:
63:eb:2b:d4:89:7c:e0:7a:d4:57:14:0d:67:58:e8:
ca:96:a3:e1:75:1d:e4:82:b5:94:e5:09:15:6e:53:
e0:9f:75:e3:f4:4f:ad:f4:4d:6b:9a:84:d2:e5:95:
75:a3:18:11:24:7d:92:46:e7:f2:9b:fb:13:e2:e3:
22:f8:82:46:8e:a5:07:be:f6:b8:4a:3f:f5:0d:e0:
42:14:07:94:79:c6:22:b8:ef:31:49:ba:58:78:b2:
16:85:c8:1e:7b:da:5c:a4:02:8d:62:9a:92:06:50:
c1:8b:ed:1c:69:1d:f5:bd:88:6b:dd:85:12:66:72:
4c:86:46:d8:8a:8a:3c:53:90:3b:33:d4:c7:e6:75:
5f:db:72:3a:08:0a:50:9f:18:26:cc:a5:9a:04:70:
26:72:0c:f6:20:12:16:45:b6:60:c8:1b:1d:0a:31:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:09:5D:0E:1D:AF:CA:3B:E5:82:3F:AC:78:45:D3:D9:0A:88:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB2B77ADAF711EF9089EE43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.105.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5e:2c:9a:c4:2b:c1:0d:df:a9:cf:dd:42:c4:dc:cf:d5:65:
9b:c5:1e:a9:60:79:e6:62:c1:1c:58:59:50:e5:c0:6c:54:f9:
29:cc:92:15:b1:11:2c:68:65:4d:07:85:0f:9a:59:94:42:77:
36:6b:f4:6a:cf:91:c9:23:86:58:44:bf:f8:95:8e:73:b5:4e:
5a:9d:d6:95:36:d4:39:49:1e:ad:ed:a9:10:e7:8d:58:39:b7:
a0:5d:1d:40:57:cb:44:1c:93:ca:b8:94:dd:95:63:68:5a:f4:
66:76:74:ea:d5:2c:92:02:05:38:69:18:aa:58:fa:ff:b7:26:
4f:c1:6b:0e:7b:f2:a7:58:16:38:9b:32:70:64:88:7e:e7:7f:
18:1e:22:a1:51:d8:04:1f:67:0d:a0:2f:92:57:72:5a:fa:50:
5b:d6:25:d0:1b:36:d9:9d:3b:82:b6:12:fc:b0:80:b5:cf:db:
de:39:66:62:50:a7:c4:15:5d:4a:be:4e:6c:7a:a5:6c:77:04:
b0:8a:9c:6f:a9:54:38:7a:7c:6d:cb:57:e6:d8:8b:f1:90:a7:
52:55:1a:73:eb:b7:bf:e3:80:be:40:b8:78:ff:a3:3e:16:e0:
09:1e:bf:46:02:4e:11:c3:ab:9b:c8:7a:7d:ca:f8:e3:35:85:
37:0a:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:56:55 2025 by rpki-client