Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6412ABED9FF11EF88FA27B5762E951A.roa
File: A6412ABED9FF11EF88FA27B5762E951A.roa (raw, json)
Hash identifier: kdFsufsl13xj1ysZLjjqMEm2FPMXdydBzy32yRGZeVQ=
Subject key identifier: 62:BF:72:7E:B5:CF:26:52:24:A5:D9:81:CC:D2:E4:F3:7E:E2:46:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01437A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6412ABED9FF11EF88FA27B5762E951A.roa
Signing time: Fri 24 Jan 2025 03:02:30 +0000
ROA not before: Fri 24 Jan 2025 03:02:26 +0000
ROA not after: Sat 01 Mar 2025 03:02:26 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82810 (0x1437a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 03:02:26 2025 GMT
Not After : Mar 1 03:02:26 2025 GMT
Subject: CN=679302c6-c000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:64:02:73:2f:09:dc:7c:4d:b1:ad:76:14:
53:7c:e8:ad:8c:65:1a:3f:42:2f:4d:a8:52:11:c5:
18:d7:11:cf:56:e3:e9:e7:38:dd:d0:72:5d:d4:e6:
45:09:ab:ed:24:cf:52:2c:03:98:0b:69:30:64:fe:
d2:65:85:9a:cb:9b:6c:60:90:42:0b:9a:41:0e:98:
b3:42:cb:80:58:3d:4f:0e:56:aa:87:a8:f7:77:26:
2e:d0:74:7f:82:e1:91:2b:d0:23:cd:ab:77:95:8f:
81:4b:0f:72:8a:2c:53:10:ca:02:e7:bf:37:c0:03:
9a:5b:8c:11:66:2c:17:01:52:e3:06:86:57:a1:6b:
7e:5a:cd:06:9a:58:04:bc:93:33:28:5c:2d:7c:0d:
d5:97:52:73:f2:6d:40:3d:1e:4c:02:4d:bc:91:b6:
17:e3:db:c1:5a:47:fd:ff:a0:f2:09:8c:b2:4e:7f:
34:62:21:d8:5d:23:13:4e:d1:0f:4f:27:a3:61:94:
1f:f3:d6:3e:de:06:a4:fd:82:19:20:8b:e1:e2:50:
01:40:6c:bb:b5:7e:6e:15:bc:34:42:4c:f0:81:3b:
fa:c7:e7:d9:d4:99:29:c3:dc:0b:39:2a:13:a2:7a:
46:bf:60:7f:64:a4:37:7b:97:2a:8b:c8:2a:26:1a:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:72:7E:B5:CF:26:52:24:A5:D9:81:CC:D2:E4:F3:7E:E2:46:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6412ABED9FF11EF88FA27B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b6:0b:22:2f:83:2e:21:fd:7a:ed:b3:53:b9:6c:45:2a:96:
87:a5:4c:ff:46:07:a6:a8:68:d8:61:bf:d6:47:26:82:c9:a1:
b1:0e:c9:4d:9a:6a:6f:3a:55:db:66:23:a5:ca:31:b0:fa:d2:
77:04:5f:c0:ce:a8:41:7b:27:15:c0:b4:c8:cf:57:26:ab:b9:
69:fb:88:c6:9c:5c:dd:03:b0:f4:7c:a3:6d:38:f1:d3:76:1c:
c8:b1:8e:f1:6a:52:f5:8a:4e:64:68:40:ac:8f:b3:08:e9:03:
03:5d:b6:30:a8:ce:bb:a9:96:26:38:47:da:c6:53:5f:2a:84:
bd:16:18:06:f9:c9:c8:f6:4b:e6:c0:ae:cf:c0:78:37:5f:1e:
f1:bc:26:34:73:be:f3:21:b8:36:ae:48:4f:c4:db:ff:38:2a:
c4:44:2d:b4:8a:2a:e3:60:ae:8a:08:02:0b:cb:57:fd:ef:33:
ec:9f:59:6c:b9:7a:b8:89:c9:6b:d8:51:92:59:6c:dd:7b:2c:
6d:17:a9:b3:53:40:59:3e:cb:40:2c:97:52:92:f0:ad:dc:cf:
2a:44:b4:f8:c0:bb:93:1b:b2:ed:e8:3e:7f:be:c1:5f:91:f5:
5f:eb:f0:ea:65:d2:ba:9e:e3:81:b4:8d:02:cc:7b:40:b0:8b:
6b:0a:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:41:31 2025 by rpki-client