Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5CE782DA0011EF8BD11ABB762E951A.roa
File: 9A5CE782DA0011EF8BD11ABB762E951A.roa (raw, json)
Hash identifier: d4JcihzmAfOw4c/9zAizAQj+cPwvu3THlIBLXgrSc20=
Subject key identifier: 00:30:62:24:6C:24:28:28:6A:99:38:05:55:1C:EC:BE:50:80:11:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01437E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5CE782DA0011EF8BD11ABB762E951A.roa
Signing time: Fri 24 Jan 2025 03:09:20 +0000
ROA not before: Fri 24 Jan 2025 03:09:15 +0000
ROA not after: Sat 01 Mar 2025 03:09:15 +0000
asID: 49505
IP address blocks: 154.223.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82814 (0x1437e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 03:09:15 2025 GMT
Not After : Mar 1 03:09:15 2025 GMT
Subject: CN=67930460-7e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:76:cc:78:2c:34:78:96:35:b1:48:d7:44:
f1:d2:d7:33:1e:c1:f5:7d:69:f3:c0:0e:7a:cd:4a:
86:da:cb:3c:19:35:f9:7d:a3:20:01:de:d3:45:77:
f7:c9:6c:a1:f2:a5:7f:ca:a4:01:4b:b3:28:0b:53:
1c:8d:49:46:78:3f:84:5c:3c:51:10:a9:c1:67:6b:
33:73:12:1a:39:44:84:f9:f4:41:0a:f5:a9:5a:f1:
d5:eb:d3:5a:f5:c7:02:a8:34:f7:f2:88:f5:e0:2a:
47:7f:cc:b8:fd:9d:55:20:9a:51:bb:be:71:94:2a:
1e:d1:7c:0b:6a:1e:02:af:9d:e1:4b:a3:bf:67:29:
c6:5f:6d:05:5e:f7:c8:ba:e4:76:c0:d5:a2:dd:73:
49:8a:fe:15:e1:c3:84:7d:17:f5:18:0d:bc:0e:6f:
22:14:b0:f2:d6:b3:9c:a8:57:3b:e4:e6:c5:d2:a0:
5d:ac:0a:18:90:e1:b6:07:85:5b:b7:f1:ad:21:5d:
61:da:27:be:cc:b7:c7:82:6e:33:58:0b:bf:13:11:
e9:2e:cf:a5:26:ae:03:d0:00:eb:93:f1:1d:91:d4:
a8:fe:c6:85:0b:b9:b1:be:e9:96:ba:83:47:6d:71:
fe:bb:6d:63:31:a9:ac:69:db:e9:9c:75:fd:4a:41:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:62:24:6C:24:28:28:6A:99:38:05:55:1C:EC:BE:50:80:11:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5CE782DA0011EF8BD11ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.206.0/24
Signature Algorithm: sha256WithRSAEncryption
39:74:42:bd:1e:a1:9a:fc:b8:97:10:2b:75:87:36:4a:bc:61:
4f:ca:44:10:18:f9:27:be:0b:fd:e3:cd:b3:bc:1b:17:4d:2a:
d0:c0:d5:04:63:db:5e:4e:61:52:12:44:89:de:7b:62:d5:85:
cb:ac:f2:e7:21:5b:74:87:63:49:4a:74:c5:b1:a7:cf:dc:20:
1f:83:ab:d6:53:4a:fe:56:6f:4b:8c:e4:56:96:2f:90:82:2a:
72:e9:bf:2e:68:f3:f3:9f:17:5f:43:7e:41:db:1c:59:1c:9c:
eb:11:46:52:33:4d:6d:86:2a:4f:d2:a1:f2:2f:93:61:59:68:
6f:23:08:33:9b:93:51:fa:54:9b:66:27:6e:91:cd:dc:07:e1:
1b:43:26:95:fa:8b:b5:40:01:03:5a:50:2e:0a:1a:0f:c1:ed:
7b:2b:bc:1c:b0:9a:a9:dd:96:e9:26:01:50:56:6f:ac:52:0f:
af:c7:85:58:df:bf:60:4c:21:74:b6:50:c2:24:55:b3:76:4f:
95:ce:3c:05:38:3d:19:c0:b1:02:21:a9:24:a9:fc:d9:63:1c:
4e:9f:73:9b:22:a0:1f:69:cd:30:7f:ea:ae:2f:68:a9:98:88:
04:05:94:f4:e0:d6:fa:c9:90:f0:6b:5b:c5:da:17:87:63:21:
b5:bf:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:43:27 2025 by rpki-client