Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E39E064DC0E11EFAF644798762E951A.roa
File: 6E39E064DC0E11EFAF644798762E951A.roa (raw, json)
Hash identifier: Cs31jVAQRFxg/UoPYO3CVEcF3oFy4IeMFf/zEuQzKK8=
Subject key identifier: 92:1D:E2:25:F5:01:A0:39:67:BE:FE:51:D8:FA:C5:AD:05:B0:D4:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E39E064DC0E11EFAF644798762E951A.roa
Signing time: Sun 26 Jan 2025 17:53:21 +0000
ROA not before: Sun 26 Jan 2025 17:53:17 +0000
ROA not after: Tue 01 Apr 2025 17:53:17 +0000
asID: 63139
IP address blocks: 154.94.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84790 (0x14b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:53:17 2025 GMT
Not After : Apr 1 17:53:17 2025 GMT
Subject: CN=67967691-26a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:71:e4:34:2f:7f:c1:88:d2:90:27:ec:0a:
fd:4c:05:3e:3d:56:64:85:ef:36:43:25:a7:fb:d3:
42:8c:c5:9a:5e:dd:33:17:f4:e2:8a:a8:45:21:07:
7e:4c:ef:ca:b7:1e:14:0a:b0:b1:10:d0:08:65:92:
cb:c4:50:a7:89:e1:c2:00:8f:73:b8:77:09:e5:f3:
4c:c7:8e:54:1f:5b:80:a7:6e:a3:07:63:c1:ed:d7:
d7:c4:e7:c8:41:4a:d1:65:52:7e:4b:a4:8a:aa:7f:
b2:c2:a3:c0:f8:15:e9:fa:5b:1b:5b:0d:f0:89:b8:
89:c3:70:c3:cc:47:25:b7:8c:de:77:d3:a6:c0:2e:
55:72:83:b4:42:18:65:be:a7:50:fa:ac:be:89:fd:
8f:fa:f5:ed:f9:fd:64:da:a1:c0:54:ee:27:3e:8b:
3e:ab:0b:cb:20:b7:e6:27:a0:45:47:62:49:4d:6c:
8d:02:89:22:05:29:8c:cc:99:8f:cd:fe:f6:a5:bd:
36:5c:77:e5:e2:74:87:64:bb:cd:b7:f0:68:54:c7:
9f:a9:2e:7d:f7:f5:6a:2d:0a:19:af:e6:27:ea:7f:
e3:20:47:c3:ef:a9:1f:39:d2:34:a5:66:ca:1c:3c:
d3:b1:84:ce:97:54:9f:6a:7f:5f:a3:09:b7:1d:15:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1D:E2:25:F5:01:A0:39:67:BE:FE:51:D8:FA:C5:AD:05:B0:D4:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E39E064DC0E11EFAF644798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c4:2e:2d:2b:0f:03:ad:6d:e5:40:0b:76:5d:86:9b:a4:cf:
96:17:89:3f:45:60:c7:4f:b7:11:e9:fc:8f:fd:c9:22:2c:6c:
3a:d3:78:d7:65:6b:00:0e:91:aa:f4:89:ac:93:d5:13:5f:fe:
4a:d1:a2:16:04:4b:40:45:6f:02:bd:4a:0d:a3:60:df:e7:0f:
ac:3a:e9:86:6f:1b:39:3e:07:12:9a:da:9c:a6:ad:bb:df:b0:
18:1d:aa:51:67:2c:ad:bb:a9:58:94:94:51:17:5b:90:03:51:
35:81:46:c1:85:ba:68:42:85:e5:2a:b0:55:04:1a:7e:74:d6:
14:74:0d:51:78:e3:7f:77:83:90:3b:bf:39:33:95:82:10:10:
eb:be:8a:6f:e1:50:ea:20:84:79:7c:71:1a:e7:9f:91:dd:34:
c9:bc:f9:fe:1d:76:b1:cd:de:7f:74:e3:51:4b:7a:95:13:03:
15:a2:84:a1:f4:76:7e:8c:04:9e:85:4a:bd:f4:01:84:59:d3:
9e:a5:c9:33:28:50:b8:c9:a9:c9:64:6e:26:e1:d1:bd:03:fe:
f5:33:f2:ca:40:f5:cb:15:f4:3b:20:44:cc:7d:51:21:e0:c1:
18:b2:63:ac:08:83:a1:a3:b3:9e:14:08:f7:e2:6d:31:92:54:
44:2e:7c:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUs2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTc1MzE3WhcNMjUwNDAxMTc1MzE3WjAYMRYw
FAYDVQQDEw02Nzk2NzY5MS0yNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtf1x5DQvf8GI0pAn7Ar9TAU+PVZkhe82QyWn+9NCjMWaXt0zF/TiiqhF
IQd+TO/Ktx4UCrCxENAIZZLLxFCnieHCAI9zuHcJ5fNMx45UH1uAp26jB2PB7dfX
xOfIQUrRZVJ+S6SKqn+ywqPA+BXp+lsbWw3wibiJw3DDzEclt4zed9OmwC5VcoO0
QhhlvqdQ+qy+if2P+vXt+f1k2qHAVO4nPos+qwvLILfmJ6BFR2JJTWyNAokiBSmM
zJmPzf72pb02XHfl4nSHZLvNt/BoVMefqS599/VqLQoZr+Yn6n/jIEfD76kfOdI0
pWbKHDzTsYTOl1Sfan9fowm3HRWfnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJId
4iX1AaA5Z77+Udj6xa0FsNSXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RTM5RTA2NERDMEUxMUVGQUY2NDQ3OTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5VMA0GCSqGSIb3DQEB
CwUAA4IBAQAOxC4tKw8DrW3lQAt2XYabpM+WF4k/RWDHT7cR6fyP/ckiLGw603jX
ZWsADpGq9Imsk9UTX/5K0aIWBEtARW8CvUoNo2Df5w+sOumGbxs5PgcSmtqcpq27
37AYHapRZyytu6lYlJRRF1uQA1E1gUbBhbpoQoXlKrBVBBp+dNYUdA1ReON/d4OQ
O785M5WCEBDrvopv4VDqIIR5fHEa55+R3TTJvPn+HXaxzd5/dONRS3qVEwMVooSh
9HZ+jASehUq99AGEWdOepckzKFC4yanJZG4m4dG9A/71M/LKQPXLFfQ7IETMfVEh
4MEYsmOsCIOho7OeFAj34m0xklRELnxU
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:14 2025 by rpki-client