Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649CD96CDAF611EFBA0C28BD762E951A.roa
File: 649CD96CDAF611EFBA0C28BD762E951A.roa (raw, json)
Hash identifier: haYCUO/7K0eN76iJ3A57I9bOmCDTKo/+sLG33j7f4JU=
Subject key identifier: D8:94:D4:0B:E3:A3:66:3F:07:5F:D6:7F:CE:87:95:9B:20:2F:E0:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649CD96CDAF611EFBA0C28BD762E951A.roa
Signing time: Sat 25 Jan 2025 08:28:46 +0000
ROA not before: Sat 25 Jan 2025 08:28:42 +0000
ROA not after: Sun 30 Mar 2025 08:28:42 +0000
asID: 63139
IP address blocks: 154.94.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84215 (0x148f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:28:42 2025 GMT
Not After : Mar 30 08:28:42 2025 GMT
Subject: CN=6794a0be-e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:2b:4c:4c:6b:37:95:24:55:28:fb:3c:e0:
e6:0d:7d:4a:1f:bb:99:37:44:31:2c:35:3c:ac:d1:
32:5b:df:2a:e1:02:00:05:a8:a9:f9:31:60:e3:f4:
b3:35:ba:35:78:92:6a:49:3d:4f:9d:45:71:c7:94:
1d:dd:2b:27:97:81:49:d8:2a:ff:85:db:5d:ef:1e:
fa:c4:08:95:f9:c1:e8:81:49:93:58:46:51:1f:ec:
d5:a0:77:78:e2:48:61:20:86:e7:55:5e:40:2e:6a:
8e:2c:53:59:93:9e:3e:98:46:ca:9c:74:2b:32:6d:
0b:e3:33:24:b1:fa:01:ff:e5:7a:1f:b9:67:30:1d:
7c:89:af:d7:c5:c0:d1:f7:7d:95:5c:c0:75:33:87:
2c:9c:da:d8:48:3a:1b:69:6e:87:9e:f3:fb:a6:71:
b2:8b:39:96:7b:f1:2f:97:f4:99:5b:7d:0c:12:f8:
a1:2c:ba:f2:15:5b:27:33:2f:21:d0:81:24:f5:ed:
a4:1f:a4:42:5d:a6:83:c6:82:32:ce:c0:69:16:4b:
b1:55:f5:05:1a:99:9d:7c:ba:21:a9:50:6e:c8:fd:
ab:86:00:6f:e7:92:d9:75:71:c6:88:2d:a2:1b:74:
71:88:cf:3e:87:d8:01:4f:0d:77:91:bf:53:e2:4f:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:D4:0B:E3:A3:66:3F:07:5F:D6:7F:CE:87:95:9B:20:2F:E0:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649CD96CDAF611EFBA0C28BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:69:ba:39:b8:67:c1:44:64:cd:52:fc:3e:32:f1:20:e9:9f:
b3:ce:63:eb:31:7c:48:ae:b1:07:3b:7e:f5:74:52:b5:f3:29:
1b:92:a5:5b:0d:d5:ef:c4:8b:e1:2b:87:96:72:b8:6e:c4:8e:
5d:1e:a7:1a:0e:93:0b:1c:70:79:60:bb:93:dc:2f:87:ff:cd:
32:74:79:09:d4:bb:d1:ea:3b:cd:2f:07:1c:8d:00:da:01:32:
e1:c2:c5:1d:57:57:73:04:c8:ee:82:78:50:1a:f3:5b:72:dd:
63:cc:30:86:bf:ab:67:d9:6f:b8:6b:eb:1f:34:36:ab:00:94:
fa:41:48:fd:7c:29:ab:ad:df:8d:74:52:c6:a6:ac:83:64:7f:
11:69:44:86:55:7f:6c:36:52:50:3c:f3:a1:c9:e7:fd:dc:f5:
15:7b:c7:0a:60:81:0a:a5:cb:34:ec:bb:a8:45:c9:21:59:31:
11:08:f5:a9:20:70:0a:1c:80:b6:35:e7:e9:76:b1:1f:20:9d:
7c:0c:3f:22:15:2e:35:e9:c9:8a:78:9a:77:47:6c:e2:63:81:
4a:89:93:ef:c2:c1:a9:31:84:83:21:bb:9c:af:2c:47:7e:1a:
74:07:19:9a:ee:68:6e:07:ce:a5:95:65:8b:76:59:93:e1:50:
59:83:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:42 2025 by rpki-client