Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F52D2D0DC0D11EF84D87291762E951A.roa
File: 7F52D2D0DC0D11EF84D87291762E951A.roa (raw, json)
Hash identifier: uuisA/eGH57ltaCM8VR7Q+RJPCwNYBlcyw/7FIhE9ec=
Subject key identifier: AB:E8:DC:91:FB:46:F1:63:2D:75:FD:6F:2F:12:2C:72:56:83:D2:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F52D2D0DC0D11EF84D87291762E951A.roa
Signing time: Sun 26 Jan 2025 17:46:40 +0000
ROA not before: Sun 26 Jan 2025 17:46:36 +0000
ROA not after: Tue 01 Apr 2025 17:46:36 +0000
asID: 63139
IP address blocks: 154.94.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84784 (0x14b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:46:36 2025 GMT
Not After : Apr 1 17:46:36 2025 GMT
Subject: CN=67967500-1a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:61:83:b4:76:de:32:9d:00:fb:78:e6:b6:
36:f8:f4:75:b7:df:25:5f:d6:39:88:7b:4e:31:01:
12:8d:2a:1d:d2:6f:7d:d1:8a:40:0b:29:ef:5e:a0:
eb:c1:f9:44:53:89:d0:ee:b7:59:92:49:3a:2e:5b:
51:23:fa:92:b1:ea:77:13:f6:47:d7:fe:49:a8:c7:
bb:ea:bd:66:87:6d:4d:99:3d:18:81:99:1d:cf:7b:
de:23:3a:34:a4:21:f0:5a:6c:e2:65:53:68:42:13:
c7:75:be:42:5a:09:94:9b:81:30:c5:db:4c:cf:01:
fe:65:3e:8d:b6:a0:a9:2a:71:18:72:4c:43:fd:1a:
2d:8e:a6:c6:8b:17:bd:be:65:36:fc:06:8b:c1:03:
f4:21:b3:42:a4:6d:17:3f:bd:49:2c:96:64:29:47:
4e:45:08:db:b3:d3:7b:3e:dc:88:3e:1f:33:c7:c2:
b9:51:5f:09:c3:d7:c1:d2:3f:07:15:b0:51:ec:1a:
92:3d:14:cf:9f:8b:ad:3c:07:10:df:99:96:c0:c1:
5f:f8:d7:6d:ce:e4:99:0c:d4:a4:20:34:e9:d8:94:
1b:15:ec:a8:51:56:92:2b:96:9c:a5:18:a8:67:9d:
b1:b5:09:51:c2:39:60:12:c4:43:54:fd:52:b3:c8:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E8:DC:91:FB:46:F1:63:2D:75:FD:6F:2F:12:2C:72:56:83:D2:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F52D2D0DC0D11EF84D87291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.82.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cc:5d:da:24:9c:79:2c:fc:09:32:34:ce:6a:7e:45:bb:0a:
bc:2e:b5:27:89:e3:4e:13:bb:ac:64:a2:5e:d3:fa:d8:eb:12:
b7:b9:19:b4:ae:64:e3:03:dc:00:c8:27:be:13:64:be:db:fc:
5f:90:29:9e:62:73:16:13:2d:54:9a:9d:6a:b0:6d:aa:d2:08:
c0:d1:34:08:07:98:84:b6:69:4e:66:69:31:ad:a8:c4:39:e2:
34:b2:b7:13:ee:7d:25:c8:2b:f7:b9:e2:b1:d3:9b:ef:94:7d:
32:9a:9f:e6:30:77:44:d5:a1:8a:9d:db:ab:1e:34:5b:c3:ed:
1d:3d:b2:41:e5:03:69:a4:67:73:a5:f2:3c:8c:c0:61:5c:77:
a8:09:3a:11:60:82:82:57:75:b3:2d:a0:4e:a5:9d:c8:4f:f3:
93:8f:86:55:4e:0d:55:68:48:b3:e6:5b:36:bb:55:21:57:9f:
1a:c2:6b:79:fe:87:7f:37:37:1e:53:b4:38:40:b5:c8:9f:5a:
d1:56:1e:17:4a:6f:59:e2:f7:5a:c6:81:9b:8a:e0:d0:e2:ee:
35:9f:70:70:a1:30:67:4c:8b:3f:40:40:7d:3c:9a:32:88:75:
1c:f2:eb:ee:8e:88:ab:d3:ce:56:7a:f7:10:e3:c7:dd:32:34:
4b:77:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:46 2025 by rpki-client