Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91080358DA5311EFB142C96D762E951A.roa
File: 91080358DA5311EFB142C96D762E951A.roa (raw, json)
Hash identifier: ldAmh5uGS5aK8BCbpSzaROPSJbgKbqD/blpDuW+H7aM=
Subject key identifier: 7B:67:0E:66:FC:9D:23:3C:54:98:47:80:0B:B3:65:18:B0:69:A3:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014738
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91080358DA5311EFB142C96D762E951A.roa
Signing time: Fri 24 Jan 2025 13:03:12 +0000
ROA not before: Fri 24 Jan 2025 13:03:08 +0000
ROA not after: Sat 01 Mar 2025 13:03:08 +0000
asID: 49505
IP address blocks: 154.223.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83768 (0x14738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 13:03:08 2025 GMT
Not After : Mar 1 13:03:08 2025 GMT
Subject: CN=67938f90-202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:1e:bf:cd:6e:cc:a0:f1:6e:fd:49:1b:7a:
02:a2:ed:48:ad:6f:64:36:c2:31:55:c0:a7:e0:c3:
4d:03:15:6a:54:0f:5d:d2:18:28:23:42:5d:5b:91:
14:09:1d:08:49:a0:48:ae:f6:d0:f6:39:c9:44:1d:
82:fb:4d:69:19:88:30:b5:bb:75:b6:db:cf:90:69:
d4:e8:18:42:68:04:90:47:a9:04:43:61:ea:a1:6f:
1b:27:5a:a1:0b:0b:e2:0b:50:1e:ce:0a:33:70:ff:
40:d6:b6:52:b1:79:2a:3d:6f:3a:f4:ab:27:6d:9b:
be:35:fe:01:dc:e1:a2:dc:7a:84:43:b1:37:52:2d:
22:ca:eb:33:ca:fa:60:d7:bf:ec:32:1b:27:70:6e:
e8:29:e4:32:4c:e9:19:46:19:f8:d4:03:ba:7d:02:
ed:b1:20:b8:e5:32:c2:bf:c4:17:25:12:dc:1b:de:
7e:f1:1c:77:8a:0b:1a:df:a3:15:67:bc:0d:7d:c3:
d0:12:54:bd:de:b6:1b:47:ee:19:31:2b:f6:d0:4a:
12:69:90:97:b9:fb:36:b2:d8:62:3e:cb:09:39:c9:
2c:36:ca:cd:94:2b:05:a4:19:0d:a3:89:c9:72:af:
95:73:30:b1:dd:b6:66:d7:0d:15:4d:5c:a7:8c:cc:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:67:0E:66:FC:9D:23:3C:54:98:47:80:0B:B3:65:18:B0:69:A3:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91080358DA5311EFB142C96D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:37:96:ca:88:9e:94:42:ab:68:ff:a9:71:7b:72:47:40:09:
73:50:93:75:da:e9:48:be:b7:72:75:a3:6e:bf:c4:61:31:0b:
2d:a9:43:e4:c5:34:43:af:5e:09:af:88:f6:24:ab:5f:db:4c:
91:3d:79:7d:82:dd:d9:f2:ae:ad:d2:b9:70:f6:ec:c5:c3:4e:
a6:93:91:bd:fb:b7:1c:1f:30:86:bf:a9:11:6c:1f:c2:83:38:
3f:ca:8b:e1:ed:4c:11:d6:78:65:47:f2:32:3c:08:ad:42:d2:
be:9f:36:48:d2:c3:8d:2a:09:d6:43:ac:82:92:66:4b:62:0e:
6b:19:1e:49:b2:6c:40:9a:ec:7c:95:f0:e0:50:7a:1a:47:5c:
f0:2a:bc:34:63:de:24:1d:95:8a:c3:65:f2:6c:40:4d:f8:20:
fe:85:fc:4e:b8:87:e0:96:f8:d3:02:80:a4:f7:07:4c:07:47:
13:14:43:9e:15:de:43:38:e4:02:8c:0b:fc:3d:bb:a8:a7:cc:
63:1e:3c:05:d1:b5:d0:55:ca:27:a5:26:91:9e:ef:72:64:50:
26:ce:d7:9d:2a:56:01:0c:bd:41:05:1c:7f:ae:43:58:2d:8b:
6a:6c:ef:69:48:57:a1:41:94:ed:76:c2:12:1e:c3:e6:93:df:
54:f6:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:52 2025 by rpki-client