Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78987DA4DA6511EF930A1F66762E951A.roa
File: 78987DA4DA6511EF930A1F66762E951A.roa (raw, json)
Hash identifier: Eg0T/HjDlUKn8O8y60990kGxjy/o2QSmm83/9B9qF2s=
Subject key identifier: 83:8A:CE:D4:84:1D:6B:F3:8D:6A:8C:03:22:EB:D8:1A:27:F7:F4:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01489A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78987DA4DA6511EF930A1F66762E951A.roa
Signing time: Fri 24 Jan 2025 15:11:22 +0000
ROA not before: Fri 24 Jan 2025 15:11:18 +0000
ROA not after: Wed 05 Mar 2025 15:11:18 +0000
asID: 49505
IP address blocks: 154.209.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84122 (0x1489a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 15:11:18 2025 GMT
Not After : Mar 5 15:11:18 2025 GMT
Subject: CN=6793ad9a-bcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:fd:d3:f1:7b:1c:f4:35:1d:2c:35:7c:b7:
0a:80:6e:b1:0c:74:8d:70:08:b9:12:8c:4c:bd:ed:
0c:f9:42:27:77:f9:24:13:28:c9:b6:8c:b6:44:93:
10:eb:29:fe:59:08:4d:4a:6d:8c:af:06:ba:0b:75:
ab:7a:30:c8:9d:c0:ae:c3:e1:a8:ea:33:ba:39:57:
c3:e5:77:b4:7b:a5:a0:26:9e:99:2d:08:5b:d4:3c:
0a:59:b0:e8:b5:33:ed:35:12:90:3a:6f:00:22:db:
b2:9c:5e:69:da:56:e0:ce:31:76:3d:30:a5:95:9c:
91:b3:2d:29:b2:4d:7b:b0:6e:11:33:71:eb:8e:9e:
f1:5b:65:39:01:eb:2f:6f:bd:19:57:a0:28:b0:2e:
9c:80:fd:32:4b:20:96:56:15:49:2e:0c:1d:28:e4:
1d:8c:b9:fd:27:53:eb:36:77:ab:b9:48:86:25:46:
d2:36:ad:f0:3a:5e:28:c6:96:f0:2f:96:66:5d:1d:
5d:1e:7f:66:e8:e6:18:0e:b9:6c:23:4c:2c:db:5f:
57:a3:93:15:c8:9a:8c:2d:84:fa:1a:e2:a0:e7:31:
b5:bc:1e:74:71:ac:ae:c4:82:a6:9d:1a:43:73:33:
c3:f9:2b:d0:84:f4:7b:19:88:20:54:e9:63:76:9a:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:CE:D4:84:1D:6B:F3:8D:6A:8C:03:22:EB:D8:1A:27:F7:F4:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78987DA4DA6511EF930A1F66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
61:67:a9:63:b8:26:7f:ae:54:91:2c:9f:41:5a:2b:db:8d:21:
b8:49:18:5e:ad:ca:34:61:b1:7f:4e:b4:59:1b:b6:6c:f8:40:
ca:13:f4:3e:81:7e:77:b9:4c:85:95:ab:87:47:73:f1:24:9f:
4b:67:3c:ff:c2:ab:05:d4:a5:92:f8:3f:80:ab:fb:c6:60:1d:
10:1b:48:c7:43:8b:d4:1f:53:e0:e0:4b:ca:2e:b8:dc:4b:ed:
ba:f2:30:d2:14:af:23:dd:be:9c:36:cb:d7:db:26:78:b2:dc:
fe:a8:df:f3:e9:ff:0f:6b:fd:a8:a9:4d:b1:d5:e6:f8:44:94:
8d:95:d5:4d:45:03:c7:11:b9:ad:80:8b:06:d3:15:09:d3:f3:
c9:4d:11:a4:39:89:fa:6f:6d:93:4f:30:18:a4:e1:6c:23:66:
8e:b5:2a:5c:2d:d4:04:96:41:a0:98:5b:fb:56:84:c0:63:25:
32:8c:40:9f:26:36:73:04:8e:2c:bd:63:51:66:39:b4:99:18:
ab:ec:4e:6a:6d:52:49:58:df:01:0d:fb:27:f7:06:4d:9e:26:
ca:6d:77:61:a2:1d:1b:d3:22:41:5a:ce:f0:80:74:4e:a9:ef:
9f:2e:42:4b:22:6e:19:8a:6a:00:ca:51:31:86:75:d5:8d:56:
70:98:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:55:11 2025 by rpki-client