Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960ED9AED8D111EFA9208BBD762E951A.roa
File: 960ED9AED8D111EFA9208BBD762E951A.roa (raw, json)
Hash identifier: LTim2Vhej/p++ycMvXINVv18zgBAv7EaZsBjx2pu8+Q=
Subject key identifier: 7D:C6:75:4C:A1:69:A7:B1:8D:70:C1:54:4F:A3:6A:86:75:08:57:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960ED9AED8D111EFA9208BBD762E951A.roa
Signing time: Wed 22 Jan 2025 15:00:15 +0000
ROA not before: Wed 22 Jan 2025 15:00:11 +0000
ROA not after: Tue 01 Apr 2025 15:00:11 +0000
asID: 138915
IP address blocks: 154.93.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81850 (0x13fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:00:11 2025 GMT
Not After : Apr 1 15:00:11 2025 GMT
Subject: CN=679107ff-da8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:61:02:70:24:fc:1e:0c:7f:99:74:11:a4:
36:0d:25:93:dd:a6:43:88:40:aa:f7:69:b5:49:84:
ef:7e:ae:56:5b:75:47:04:b3:45:56:28:08:a0:c4:
9e:d8:4d:81:34:92:1b:a3:18:5a:ad:de:b8:70:f0:
57:6c:b2:51:2b:05:a7:e7:5d:b9:bf:4a:92:0c:89:
2b:29:42:f0:92:b2:a5:f9:96:f2:50:f2:75:1a:78:
e4:19:71:e1:d9:90:4b:8b:e7:c7:d3:54:ce:36:94:
a9:1a:ff:b6:3a:ba:53:2e:c9:e9:31:26:6a:3b:ba:
2d:c1:96:3d:f8:2e:46:62:da:b3:dd:cc:26:f7:d2:
60:ab:88:a5:0b:33:d2:a1:ed:ea:80:75:50:0b:52:
62:43:76:6a:d8:d4:d3:aa:34:11:97:85:0b:8c:f7:
14:90:7f:cd:e6:59:2f:46:b3:9d:1e:4a:b3:97:4e:
dc:ea:fe:6f:19:af:3d:ac:c3:5e:be:d9:68:4e:0c:
b6:dd:50:ac:6d:c7:8c:92:8d:80:cc:2f:d4:09:3e:
3d:10:24:b2:32:e1:e4:a6:c2:70:21:e8:97:73:9b:
9f:f6:d9:13:58:40:91:09:6c:e2:39:a6:19:38:59:
15:fd:78:fb:c5:91:80:04:23:cd:bb:fb:5d:86:57:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:75:4C:A1:69:A7:B1:8D:70:C1:54:4F:A3:6A:86:75:08:57:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960ED9AED8D111EFA9208BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7f:24:83:ec:7c:1f:e2:c9:1b:27:8c:9e:75:e4:64:b1:35:
9e:1a:13:ee:26:e4:63:57:2e:f7:65:1b:94:9c:e2:a3:05:69:
ff:12:d7:e4:31:50:de:99:01:c8:77:38:37:40:ce:49:ab:fd:
7f:14:b4:68:f0:b4:d5:fc:aa:c3:95:88:44:52:3b:6c:c3:f8:
76:aa:0e:26:52:e6:ec:0c:9b:93:fa:e2:00:24:4e:4a:63:10:
1d:6b:e7:8f:51:e5:aa:e8:02:a8:41:af:e1:cd:93:0e:98:b0:
09:cd:58:ff:a4:6d:69:6b:56:de:85:3e:0d:c9:bf:76:41:ef:
95:e1:cc:54:ec:76:91:d9:72:c7:72:2a:09:73:e2:7d:6f:32:
31:d8:2c:cd:ca:b9:04:22:97:3f:c8:3d:6b:dd:a9:2d:d8:ad:
65:15:9e:d5:68:50:08:10:ae:f1:6b:5e:f5:35:67:e4:b1:83:
ae:c0:29:9d:eb:0c:61:fd:10:50:28:55:24:8b:76:85:66:37:
73:2d:d0:ef:cc:fd:c2:2a:29:be:f7:52:49:c2:0c:09:28:02:
95:01:eb:14:32:54:de:a9:3c:01:de:11:b4:5d:30:9d:82:99:
e8:e0:8a:2f:46:20:3d:45:da:6b:c9:e0:54:4a:4b:91:e5:e5:
1d:44:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:27:49 2025 by rpki-client