Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D000EBCDA4711EF83408897762E951A.roa
File: 6D000EBCDA4711EF83408897762E951A.roa (raw, json)
Hash identifier: bja01/xmbio+eXb+hJouw4PRR1J9iN176RFo4JPqtQE=
Subject key identifier: F1:98:C7:F2:3E:23:EF:1A:BF:AC:F1:BC:EF:24:AB:DE:85:A8:3E:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D000EBCDA4711EF83408897762E951A.roa
Signing time: Fri 24 Jan 2025 11:36:18 +0000
ROA not before: Fri 24 Jan 2025 11:36:14 +0000
ROA not after: Wed 05 Mar 2025 11:36:14 +0000
asID: 49505
IP address blocks: 154.212.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83492 (0x14624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 11:36:14 2025 GMT
Not After : Mar 5 11:36:14 2025 GMT
Subject: CN=67937b32-2617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:df:0f:85:d4:18:10:0e:21:e6:1e:1f:d6:
43:df:41:64:21:3c:a3:de:71:3a:8f:5b:d6:4e:72:
c4:98:29:9a:d6:83:51:19:4c:26:a8:de:e2:9b:1c:
d9:63:0f:72:d8:2b:cf:0b:55:5d:c4:cc:73:c8:44:
4c:a2:5c:6e:75:23:d5:2b:9a:58:2b:41:1b:98:d7:
75:1e:7c:47:00:22:2b:41:eb:84:d4:53:9d:c8:61:
b5:31:57:38:33:a0:4b:7d:9c:69:b7:cf:33:98:ef:
7a:e4:21:17:de:b7:bf:e6:6a:b2:17:7a:6b:14:dd:
f7:af:87:fa:82:6f:cd:03:b2:49:65:7c:26:7f:61:
f6:d5:9b:6a:3f:94:5c:34:0c:5f:5d:5e:c6:06:fa:
96:79:cc:4b:e3:e7:e9:ff:7a:c2:c5:ad:62:e0:fb:
31:3d:b5:0b:ec:51:d9:67:51:8c:47:70:b4:20:75:
c3:c7:eb:70:c3:13:04:28:94:86:1d:59:48:77:ef:
ed:d4:d8:5d:00:8e:f4:c0:2c:f5:64:fe:26:e3:e6:
82:1f:9c:4c:54:02:8f:09:2a:fd:0f:ef:07:56:6f:
4e:92:29:b8:40:f0:82:d5:b4:8e:c2:48:68:5a:78:
31:48:08:bd:85:31:c3:7a:17:af:7a:02:6c:23:15:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:C7:F2:3E:23:EF:1A:BF:AC:F1:BC:EF:24:AB:DE:85:A8:3E:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D000EBCDA4711EF83408897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:02:ce:81:2c:ef:0d:4f:68:7e:24:ab:1f:da:26:2c:e6:dd:
1f:bf:34:9e:3a:35:89:98:ae:f1:55:83:b8:af:66:f9:c7:fd:
8b:2f:96:b0:13:8e:bb:02:c3:bf:4b:88:cd:cf:ef:22:82:f2:
40:fe:48:9d:8c:7b:78:60:89:8d:22:13:ad:ca:d5:18:20:0b:
86:35:70:73:b6:2f:30:8f:89:51:ac:fe:f7:c2:c7:ec:c6:c3:
2f:f5:6f:5f:f6:4a:7e:b6:9e:d1:a8:91:be:d5:d1:47:69:da:
57:33:cb:d2:b6:26:f6:fc:25:09:da:62:07:47:16:0f:da:81:
05:68:76:ff:66:2a:36:95:d1:7f:45:28:6b:e3:a1:22:12:19:
85:79:f3:d4:b6:94:81:67:10:ef:2a:ee:a8:b4:0f:ca:87:a5:
fc:11:72:e2:3f:bf:b4:8f:1c:31:03:2b:dd:a7:c5:19:5a:a8:
26:49:be:1f:e7:f7:88:ed:bf:69:ed:00:40:fe:85:67:31:61:
b2:17:4c:72:80:92:08:88:46:bc:f8:60:82:6a:ef:31:c7:e4:
04:21:ee:ad:d3:e5:a3:f5:79:70:cb:67:2a:97:e9:9d:c3:ab:
cb:08:5f:d2:e2:0f:63:94:55:e5:c5:7e:b0:8e:02:70:32:93:
c4:4c:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:40:17 2025 by rpki-client