Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725B0E169B7211EF9629E94C762E951A.roa
File: 725B0E169B7211EF9629E94C762E951A.roa (raw, json)
Hash identifier: H5Eukqt8vM6CShuKar3cLgPG9VbZl/ybPzzC/C074bg=
Subject key identifier: 42:F6:09:7B:7D:66:90:07:6C:32:B9:46:48:4E:CD:EF:7D:84:C2:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725B0E169B7211EF9629E94C762E951A.roa
Signing time: Tue 05 Nov 2024 12:35:32 +0000
ROA not before: Tue 05 Nov 2024 12:35:28 +0000
ROA not after: Mon 13 Jan 2025 12:35:28 +0000
asID: 7018
IP address blocks: 154.202.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67529 (0x107c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 5 12:35:28 2024 GMT
Not After : Jan 13 12:35:28 2025 GMT
Subject: CN=672a1114-f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:14:46:8a:65:f0:a3:83:b7:49:3e:72:17:
c5:d4:16:43:39:bc:2b:c4:a4:7b:6f:9f:1a:17:b4:
67:ba:28:a9:67:c5:df:fd:78:5a:4f:e9:c0:1a:d3:
4f:ad:0b:f2:09:88:41:06:9e:57:38:65:7c:9b:73:
20:29:ea:35:b2:45:ea:e7:68:d7:95:64:0d:e5:fd:
da:87:36:70:6f:00:a8:fe:46:a7:15:10:b6:b8:61:
7a:a1:8a:9f:76:d4:4e:eb:1c:c5:eb:bc:de:cf:5d:
58:ef:58:91:63:a0:20:03:59:06:f7:6d:53:24:2f:
1b:cf:25:a9:bc:5d:a6:92:28:e0:08:e0:c0:92:a8:
5a:bf:22:26:53:e6:b1:43:98:fe:f3:1d:26:7c:74:
ca:67:08:3a:07:65:d4:08:0a:51:dd:8c:da:81:e9:
00:13:15:3a:26:ae:9b:88:34:0a:4f:ba:fe:1b:d7:
10:58:40:79:85:b4:38:c7:78:52:43:b3:bc:24:88:
eb:6e:17:aa:d9:94:29:cd:36:f2:76:30:6a:f9:8b:
18:e8:a6:92:9d:d6:86:5e:4a:af:8f:82:d1:11:cb:
81:ae:ee:a1:0f:d1:a0:b2:cb:11:1f:20:72:b1:80:
28:ca:6e:8b:40:c1:e5:c9:f9:bc:a9:28:41:f0:59:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:09:7B:7D:66:90:07:6C:32:B9:46:48:4E:CD:EF:7D:84:C2:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725B0E169B7211EF9629E94C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.12.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a7:90:ee:f1:a7:06:e7:d7:77:f5:00:1e:4b:2e:1d:60:d3:
16:e0:18:77:d7:63:3c:0c:a8:78:1d:47:58:e3:83:ab:0c:cb:
db:ca:92:78:dc:55:eb:06:22:66:5e:3d:13:da:14:3b:ae:61:
f7:3d:50:23:06:9f:ce:fc:50:98:66:5f:3a:28:5e:40:a9:1e:
ed:53:56:ea:32:e6:7c:a7:4d:0b:82:79:c3:31:75:ce:c5:03:
82:06:f3:9d:77:2f:ed:76:31:25:f6:9e:5a:3f:98:66:ec:0e:
48:97:87:41:a5:7f:9b:b2:3d:52:53:93:52:8a:b0:2b:bd:4b:
9f:f5:3a:4c:c7:7a:bb:96:00:71:34:48:f7:9e:f6:70:79:d1:
e8:6a:4c:f0:ea:af:2b:fd:bc:f6:7b:f2:dd:98:7b:22:c9:28:
e4:21:b8:7b:47:2e:5f:57:a3:d4:76:5b:61:ea:d0:d7:6b:2f:
2d:33:b9:d2:18:b9:9c:dc:ea:c8:f3:5a:62:24:a8:7f:22:28:
74:73:28:83:f4:11:9f:56:aa:79:f8:c1:d2:58:f1:1e:49:d1:
a7:68:31:73:26:59:39:ff:9f:1f:72:de:99:49:fa:73:a3:c5:
b8:67:af:73:d9:4f:f8:9c:32:a9:6d:bf:33:ef:ce:29:f3:ac:
fe:13:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:58 2025 by rpki-client