Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784B862CDA5411EFAB367872762E951A.roa
File: 784B862CDA5411EFAB367872762E951A.roa (raw, json)
Hash identifier: ZMdIu3FRIv0DRpxOXPY6aFFONZ5UYcE9maDYEEY5lU4=
Subject key identifier: BD:7A:69:01:83:60:6C:F4:2F:AF:86:E8:29:16:A2:62:4B:15:F2:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014744
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784B862CDA5411EFAB367872762E951A.roa
Signing time: Fri 24 Jan 2025 13:09:40 +0000
ROA not before: Fri 24 Jan 2025 13:09:36 +0000
ROA not after: Sat 01 Mar 2025 13:09:36 +0000
asID: 49505
IP address blocks: 154.223.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83780 (0x14744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 13:09:36 2025 GMT
Not After : Mar 1 13:09:36 2025 GMT
Subject: CN=67939114-be3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:e0:68:50:0d:66:af:ea:39:be:3d:97:2f:
63:98:8f:7f:2c:a7:46:24:07:22:b3:50:68:fa:cb:
04:6d:47:60:c3:63:db:c2:bf:9e:1b:87:f8:43:0f:
c9:60:1e:73:ae:93:55:1b:bd:ad:dc:43:92:d5:79:
cd:ea:8f:bd:e4:38:35:e5:f1:18:d4:d5:ff:d2:2d:
1c:4b:a4:37:fe:3b:ac:f4:c8:32:82:09:1b:a9:a4:
25:9a:b6:fb:cc:e8:90:a5:79:e9:f3:49:f0:ed:05:
96:92:6e:c3:39:61:cb:c5:d9:a7:04:8d:19:a2:b7:
85:ef:b1:68:c6:75:e9:b9:95:d1:20:a0:34:a8:e4:
ab:a7:29:8d:85:ed:76:d8:21:d2:64:dd:db:7d:45:
55:3f:76:24:6e:85:4d:41:66:c7:f5:6f:11:27:12:
86:b9:6f:23:57:e4:15:82:1b:e5:32:19:fb:0e:26:
f0:fc:d9:1b:2f:5f:5d:dd:22:a6:03:36:0f:c6:c4:
31:13:07:c7:7e:ba:24:8c:bd:a8:49:0f:53:7a:93:
4c:ec:27:af:f9:10:16:58:ed:31:e8:8c:40:42:f4:
4b:69:1a:1b:ae:c8:1e:14:b3:cb:d2:a3:78:91:dc:
03:6f:bf:6d:05:59:31:7a:09:47:c3:ef:99:ea:a1:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:69:01:83:60:6C:F4:2F:AF:86:E8:29:16:A2:62:4B:15:F2:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784B862CDA5411EFAB367872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.206.0/24
Signature Algorithm: sha256WithRSAEncryption
40:de:4e:38:c4:e2:30:65:0e:bc:99:6b:1f:ea:9a:90:e3:b9:
31:d3:95:92:67:6c:48:07:4b:e8:12:5f:07:6e:ac:68:d9:1e:
98:fc:fb:7e:28:31:66:f5:fb:0d:f0:46:cf:b2:b3:a9:9b:35:
3c:99:ee:95:7d:60:57:81:f0:71:15:de:c7:35:dc:72:91:58:
1e:9f:57:02:3b:3b:b7:30:90:8b:6c:32:36:d8:14:c5:87:56:
24:7d:26:62:f1:85:d6:a7:db:c4:03:0b:f6:00:4c:89:04:ee:
73:a7:6c:63:96:51:32:ee:4c:f8:41:3d:e1:3c:f6:1d:8b:9d:
5f:47:51:3a:68:17:90:02:9a:cf:48:f0:47:b7:bf:fa:1a:ee:
8a:1d:f7:40:c2:dc:4f:48:c8:09:f1:5f:46:06:16:69:b5:78:
8b:39:a8:9d:fe:5b:8d:51:47:c2:90:a2:2a:4e:1a:eb:18:32:
48:ca:9a:40:dd:35:fb:ff:2e:ab:b6:8d:47:a5:d5:1f:40:1a:
1d:e2:0c:40:33:02:58:28:95:a3:16:a8:28:fd:72:79:3a:cf:
4c:f6:ba:a2:5d:e8:54:54:71:b2:e8:0d:36:6e:84:a3:c2:aa:
99:5f:f9:78:29:59:32:21:bd:03:2c:e5:fa:aa:86:d0:e1:a1:
a8:0a:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:48:55 2025 by rpki-client