Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A044B4D8D211EF9037BD45762E951A.roa
File: 97A044B4D8D211EF9037BD45762E951A.roa (raw, json)
Hash identifier: A0JautF+G9hH9/Ge7WnFpHWI6xswlfZji/iNoi0Hqro=
Subject key identifier: 88:A8:FD:04:00:15:3C:1C:36:65:BF:CB:B3:C0:88:D1:69:BE:91:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A044B4D8D211EF9037BD45762E951A.roa
Signing time: Wed 22 Jan 2025 15:07:27 +0000
ROA not before: Wed 22 Jan 2025 15:07:23 +0000
ROA not after: Tue 01 Apr 2025 15:07:23 +0000
asID: 138915
IP address blocks: 154.93.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81854 (0x13fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:07:23 2025 GMT
Not After : Apr 1 15:07:23 2025 GMT
Subject: CN=679109af-74f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:5e:65:68:62:a8:a6:f9:42:41:4b:c8:a6:
68:45:41:ca:08:b9:38:7a:31:e3:63:df:5d:52:5a:
85:d8:33:fd:61:80:e2:24:8d:4f:af:b2:43:0e:e3:
9a:c8:9a:e5:47:0a:45:1f:59:8e:b1:17:cf:1f:43:
16:c0:8b:4b:43:16:14:ca:d2:63:6d:03:c8:71:5b:
ac:5c:64:98:01:b9:e4:5c:84:9b:ea:7b:53:e1:bc:
0d:8d:15:37:0e:d1:32:64:0e:a1:4c:dc:39:11:6e:
2d:7f:69:dc:85:a5:07:0b:46:bc:59:5e:09:2e:45:
85:06:09:01:f5:ad:b4:ac:66:88:48:21:9f:97:e6:
12:78:99:bf:21:26:03:a4:88:dc:c6:a4:f2:af:54:
ae:73:8f:6f:3f:55:a5:0d:ac:66:da:52:f0:f0:bc:
9d:09:60:58:e1:af:3b:7c:5a:db:ba:3f:91:82:53:
53:5e:98:c9:4d:a3:39:59:8d:d4:c7:da:bd:b8:60:
e8:bb:cd:82:75:b1:65:31:79:19:5f:10:4c:d6:81:
2f:ed:ab:f9:a7:c4:8b:a7:c1:e5:3f:e7:97:e1:f6:
ef:65:d5:25:8b:ac:8b:ff:24:09:27:e3:3e:f4:bc:
9e:5d:b0:06:21:bd:49:8b:0c:d9:03:32:46:ea:82:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:FD:04:00:15:3C:1C:36:65:BF:CB:B3:C0:88:D1:69:BE:91:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A044B4D8D211EF9037BD45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:05:a2:a1:13:be:57:bf:dd:d3:70:eb:8f:20:74:89:f3:
72:34:b8:5a:49:7b:30:1b:32:95:76:ac:da:44:ae:30:0e:0d:
31:c4:f5:8a:8d:2d:3e:47:a0:23:74:aa:dd:e2:d6:32:92:0a:
95:24:a2:61:ca:ef:9e:73:ee:3a:b5:16:64:4d:07:8e:b2:9f:
0f:75:66:8c:e8:11:5a:14:13:12:7b:2a:1e:69:f3:4d:b8:40:
e8:25:2f:95:2e:55:ce:67:e2:f2:6f:88:68:41:7a:12:26:62:
35:0e:7b:6e:c1:fb:88:ee:b0:ee:68:ed:da:d0:98:17:37:71:
8a:ec:ab:d4:24:b4:90:20:28:35:d7:f9:69:41:7a:d6:36:2a:
14:f9:47:26:14:eb:52:0e:46:dd:ac:ef:f9:fb:76:a3:32:83:
16:66:f3:29:d0:59:f2:69:f5:f9:4c:84:59:03:f2:40:b5:42:
f2:7e:96:bb:13:d5:01:60:19:08:08:5b:f1:a4:01:c6:9b:79:
80:3b:16:cf:49:b3:d2:b1:6c:db:32:98:0b:98:d1:b6:c9:36:
41:11:f2:8f:30:bb:e8:8d:2d:2c:e0:a4:9b:b9:8d:84:90:58:
77:eb:48:f6:95:fe:be:06:cb:40:87:b6:b7:d1:3f:5c:16:23:
c2:71:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:30:47 2025 by rpki-client