Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938CB6E4F4F411EF835E2BAD762E951A.roa
File: 938CB6E4F4F411EF835E2BAD762E951A.roa (raw, json)
Hash identifier: yR7ngt9T31G+1iiDKYcWgTcQwUddck3fpU1NuRe4/YY=
Subject key identifier: 04:2A:DF:77:1C:57:A1:83:1A:93:6B:F4:C8:0E:82:BB:E6:92:3C:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938CB6E4F4F411EF835E2BAD762E951A.roa
Signing time: Thu 27 Feb 2025 10:21:16 +0000
ROA not before: Thu 27 Feb 2025 10:21:11 +0000
ROA not after: Sat 29 Mar 2025 10:21:11 +0000
asID: 147176
IP address blocks: 154.197.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92076 (0x167ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 10:21:11 2025 GMT
Not After : Mar 29 10:21:11 2025 GMT
Subject: CN=67c03c9c-a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:50:63:ce:6d:cd:bb:e2:52:aa:e1:ed:32:
75:63:fc:a3:30:be:fa:b3:fe:ad:f7:10:af:01:0e:
98:3f:b1:80:13:39:0b:7e:8d:a8:f2:88:9d:7f:45:
1c:3c:48:43:5b:c1:7e:f6:81:c5:cd:29:17:d2:be:
3c:da:28:ad:26:35:23:1c:cd:73:ad:ae:b3:fd:2e:
d5:ac:34:78:35:9d:ac:87:06:91:4b:cd:a4:29:90:
f4:00:c2:90:ce:9a:78:31:f7:63:89:df:e5:b9:e2:
6f:e4:36:ba:ce:54:7e:f4:f2:ad:e6:76:15:d7:b6:
24:40:5c:dc:f8:74:25:ae:a3:58:db:9e:b2:81:89:
bf:e1:b6:3d:1e:07:a9:4a:c7:ed:c0:9c:69:93:d0:
a7:d6:b0:75:9c:d0:99:40:79:12:8a:e5:f6:1f:5f:
87:85:59:70:4d:21:21:55:48:ad:3e:64:63:56:06:
12:8b:d0:40:ec:1e:ac:d4:c6:4e:b7:45:af:f1:a3:
f5:34:8e:76:f0:77:ca:7a:30:92:23:58:57:2d:a3:
ab:0f:c5:1c:a0:22:3e:27:c3:19:86:51:89:c3:95:
4c:b0:65:fd:6c:40:93:f1:d8:e4:78:0f:37:f2:45:
64:dc:9f:17:3d:a8:b7:4a:e7:f6:f8:6f:48:60:82:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:DF:77:1C:57:A1:83:1A:93:6B:F4:C8:0E:82:BB:E6:92:3C:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938CB6E4F4F411EF835E2BAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0b:05:a3:79:52:c8:c4:51:6e:d2:f9:63:c4:5a:35:f3:94:
d8:69:5d:64:a4:46:a8:a2:85:e8:d5:72:07:2b:15:ab:7d:54:
a5:53:c9:f1:21:e2:f3:59:78:28:f7:e8:f1:c5:7e:0e:28:e3:
a9:28:55:ab:f2:0e:94:8a:e7:8e:a3:65:fe:dd:99:7a:8a:16:
a2:3f:07:6b:f4:8c:70:c5:71:d2:7d:3e:4d:2c:22:0a:1f:55:
1c:7d:20:35:49:83:a8:07:7b:94:03:f8:ed:91:02:3a:7a:44:
73:37:96:a1:0a:7f:8a:b4:39:eb:7d:9b:1d:2e:c3:38:7c:3c:
14:7d:95:63:66:59:8b:83:74:e3:7e:13:34:e7:24:2c:b7:5e:
c1:77:0c:1d:68:df:13:33:4f:f4:01:8b:93:84:f4:52:42:48:
af:1b:a5:44:ed:c3:11:eb:4b:52:c9:36:29:3a:cb:fe:88:b8:
0f:26:d0:24:3e:1f:58:7e:cd:31:f1:27:ab:a3:e7:b5:fb:15:
7e:83:85:bb:8b:b5:0d:0c:4c:85:87:9f:f8:63:0c:05:a6:2f:
be:15:01:f0:00:64:b4:4f:cf:b3:cb:c9:c7:e8:25:1f:3c:7e:
e7:86:18:c0:4d:fa:89:c2:e0:8e:15:42:1a:ef:08:a6:d1:53:
e2:5a:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:21:54 2025 by rpki-client