Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D48FCEDA5F11EF949052BC762E951A.roa
File: 60D48FCEDA5F11EF949052BC762E951A.roa (raw, json)
Hash identifier: EGnFYETdGyWxhADG64lRGtV9BWlULCg1eoLMhlFlkKs=
Subject key identifier: 04:B1:51:FA:F9:FA:3A:91:0F:E9:9E:1C:04:2B:6D:67:10:7C:75:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014829
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D48FCEDA5F11EF949052BC762E951A.roa
Signing time: Fri 24 Jan 2025 14:27:45 +0000
ROA not before: Fri 24 Jan 2025 14:27:42 +0000
ROA not after: Sat 01 Mar 2025 14:27:42 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84009 (0x14829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:27:42 2025 GMT
Not After : Mar 1 14:27:42 2025 GMT
Subject: CN=6793a361-f595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:85:7b:b9:33:89:bf:af:43:61:b4:33:57:
8d:4d:23:37:04:8f:83:32:90:8c:d9:07:be:04:ef:
ec:53:2a:82:39:34:64:29:bd:18:50:bb:5b:70:eb:
3f:54:22:00:c0:37:8c:e3:9e:06:ed:97:4c:e0:35:
76:b5:a8:01:a0:2b:26:31:3e:64:21:c1:85:4f:c9:
59:4d:7b:52:ba:22:32:17:56:1b:c3:ec:02:3c:7c:
eb:b5:7b:14:d7:3f:f7:27:00:bb:e1:75:86:c9:20:
74:37:45:10:9b:cb:d3:de:e2:1e:1b:fc:73:f4:99:
d7:0c:08:79:0f:cf:99:ed:3d:d1:7b:10:7b:0a:39:
34:08:d9:51:5c:37:38:31:4e:25:db:6f:ae:ff:96:
dc:36:5a:04:c1:d5:d0:a3:f0:8a:07:8e:bc:79:d8:
2a:7e:57:77:64:bd:9f:b4:9f:5f:15:ba:8d:56:6b:
4b:7b:0b:04:78:dd:eb:6c:7a:f8:23:6e:bc:47:31:
02:53:de:5d:a5:04:34:35:70:dc:d4:5b:f1:d5:19:
71:04:59:9d:96:7e:03:c7:42:ec:46:5e:cf:9f:ca:
af:4e:cd:fc:de:78:24:c7:bc:f5:a3:f9:39:30:26:
31:d1:50:1e:21:3e:1e:9f:bc:3a:39:62:24:d4:4d:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:51:FA:F9:FA:3A:91:0F:E9:9E:1C:04:2B:6D:67:10:7C:75:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D48FCEDA5F11EF949052BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/24
Signature Algorithm: sha256WithRSAEncryption
79:07:e4:4c:8d:29:03:12:47:0e:35:99:9b:88:42:ae:dc:8d:
24:05:64:d2:10:a5:f1:31:39:a1:7e:ba:65:c4:59:10:6c:6d:
a9:f6:a1:46:87:b2:5c:a3:98:4f:40:a1:80:5c:c9:6c:69:bf:
9c:0f:39:53:84:28:ca:c3:8f:96:85:b0:e2:8a:44:9d:80:90:
3d:5e:f2:39:d7:03:58:5a:d9:a8:d0:80:da:e3:d5:48:ad:bf:
68:67:11:b9:c5:f5:21:f0:80:05:47:e8:6c:1b:b2:98:50:bb:
87:db:5e:08:57:b1:96:cd:1a:70:c3:ea:68:66:83:d8:af:03:
a9:f6:20:7b:fc:09:19:e1:3d:3f:5c:ac:3c:6f:42:f7:88:bb:
19:ab:d7:48:53:a0:7d:02:c6:5a:ac:59:6f:2c:49:ce:33:39:
9d:25:2e:d7:67:c9:e5:49:b9:10:2d:43:10:ff:d1:f2:65:31:
e6:1d:91:17:ec:dc:d4:b6:8c:ed:16:85:5f:3e:5c:23:a6:d5:
f7:c9:25:95:19:ed:13:2d:9b:21:d2:ed:8f:70:9b:fb:87:d2:
63:6f:37:91:8f:d8:b0:0d:88:49:63:1d:fd:9d:fc:d5:06:4f:
63:ed:3e:63:75:d5:e8:c4:75:d9:dd:1c:fc:d6:1d:6c:d2:37:
8b:88:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:01 2025 by rpki-client