Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B625430D8CD11EFBAA24CA4762E951A.roa
File: 8B625430D8CD11EFBAA24CA4762E951A.roa (raw, json)
Hash identifier: vSzqJEyVQQbk64nagDltIKHDP2KeWZVLrgsNVWCowbA=
Subject key identifier: 0F:D5:C2:B8:61:7A:42:83:D5:FD:2E:18:E9:D9:B9:5B:19:DF:88:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B625430D8CD11EFBAA24CA4762E951A.roa
Signing time: Wed 22 Jan 2025 14:31:19 +0000
ROA not before: Wed 22 Jan 2025 14:31:12 +0000
ROA not after: Tue 01 Apr 2025 14:31:12 +0000
asID: 63139
IP address blocks: 154.93.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81830 (0x13fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:31:12 2025 GMT
Not After : Apr 1 14:31:12 2025 GMT
Subject: CN=67910137-3818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:e2:fa:9b:ed:c0:41:5c:64:8b:e4:c3:6e:
46:70:bd:5c:dd:bb:5a:f5:ac:fa:2f:f7:c0:34:fd:
fa:a1:4c:dd:68:fd:01:7c:ad:0f:ca:98:15:c1:f5:
a3:57:10:72:81:9e:d2:85:b1:29:47:79:9a:c8:68:
5b:2e:fb:22:21:7f:48:ac:aa:2b:70:b2:98:35:99:
8c:ba:2d:b1:10:19:0c:8a:6e:69:48:3b:94:64:83:
2a:dd:54:a6:70:04:c6:4a:de:07:f4:3b:9d:d2:b4:
39:55:ad:49:3c:06:91:ee:bf:c1:c1:d2:4b:6f:44:
0b:eb:e6:a5:51:6f:f2:f7:27:9d:24:fe:bf:17:71:
d3:12:38:db:e3:a7:c3:67:1d:1c:eb:e6:6d:e9:19:
ce:65:d3:01:a0:d6:8a:82:14:17:b8:49:3c:74:78:
49:ee:9f:0d:df:72:e7:23:a7:07:0f:33:e1:b3:3d:
01:d3:7c:77:a4:3b:d1:5a:a4:71:44:58:d7:48:7e:
9b:94:84:fe:5b:ca:9e:c0:0d:b5:d3:65:79:c8:7c:
5c:eb:00:e0:b6:00:c6:7f:92:ec:d2:83:b2:99:f0:
53:db:c5:15:4b:18:75:90:c7:a3:7d:14:a5:c7:4d:
c5:bb:c9:a9:7d:cb:2b:42:b7:0d:f9:5b:89:52:8c:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:C2:B8:61:7A:42:83:D5:FD:2E:18:E9:D9:B9:5B:19:DF:88:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B625430D8CD11EFBAA24CA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:53:4a:a2:eb:56:6f:50:cd:f9:ee:ad:12:b3:da:88:33:01:
0d:f1:67:78:20:39:a1:64:cf:09:1e:cd:36:b9:16:99:4c:63:
9d:3e:1c:ca:89:ea:e3:ec:f6:75:ef:3d:4e:7e:27:fb:27:39:
de:3c:54:78:4a:09:52:eb:32:89:e8:43:ec:05:65:5e:2e:ac:
1c:b4:b3:8d:99:24:41:2b:28:3e:b1:c8:05:8b:e7:47:17:e2:
5b:0f:ab:1f:cd:1c:bf:6a:74:57:cd:f8:70:90:0e:b6:a5:f2:
d2:4d:dd:87:e8:a7:c8:59:c0:1f:c5:38:f2:89:8b:4c:ef:50:
62:87:7e:44:36:cf:68:20:2b:ef:78:10:8f:59:21:11:e3:2e:
01:0e:48:a6:af:53:93:8c:b8:da:ad:2a:1a:16:00:6b:d9:27:
69:b0:5e:e5:54:d6:70:47:76:5f:bd:9d:fd:01:cd:f9:3e:e1:
9b:65:b3:50:ad:5c:b4:4b:32:02:7c:e4:d7:92:d3:06:9c:8e:
b1:a9:68:23:78:81:81:ae:3e:e2:de:82:ca:57:64:fe:16:3b:
c0:f6:9c:a7:33:bf:e3:c9:77:f3:c2:19:b8:f8:23:e2:a6:60:
2a:6a:c2:f7:a5:b9:62:f1:a4:f0:76:a4:36:b6:82:82:0b:d1:
a2:18:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:45 2025 by rpki-client