Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD3D3DCDA5D11EF8DC450AF762E951A.roa
File: ACD3D3DCDA5D11EF8DC450AF762E951A.roa (raw, json)
Hash identifier: 783daN2ItZd4Dhgnq25vxa7aK8S4kqZ5facX/BjhPKU=
Subject key identifier: C1:11:18:45:FF:55:15:AC:58:3B:EC:9E:9B:65:B8:A4:0B:DE:F2:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014800
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD3D3DCDA5D11EF8DC450AF762E951A.roa
Signing time: Fri 24 Jan 2025 14:15:34 +0000
ROA not before: Fri 24 Jan 2025 14:15:30 +0000
ROA not after: Sat 01 Mar 2025 14:15:30 +0000
asID: 49505
IP address blocks: 154.223.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83968 (0x14800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:15:30 2025 GMT
Not After : Mar 1 14:15:30 2025 GMT
Subject: CN=6793a086-9416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:6f:10:dc:eb:43:fd:23:51:77:12:81:74:
cf:0f:dc:8b:b5:ab:9f:f6:f7:27:f0:6e:51:d2:d4:
51:25:48:79:e8:c1:06:16:b6:48:e3:5d:da:55:91:
15:bd:ef:a7:b2:b2:4d:27:d1:42:7e:54:0a:2f:b3:
2f:4f:f7:b7:4b:86:c5:15:a5:cd:2b:44:5e:ea:89:
6d:a7:1e:c5:fe:0b:e1:b7:8d:33:63:78:c7:1a:07:
f9:4b:46:df:e1:a2:a7:43:1f:cd:4b:8d:65:a4:d2:
1b:89:b3:66:94:eb:28:99:21:16:8d:05:8d:d0:b9:
01:42:36:d3:3c:9c:3b:d4:36:e3:35:25:b3:ba:9a:
b8:6e:b1:a8:a5:ab:6d:fa:5a:d6:cd:b5:cf:fc:96:
8c:1c:33:43:39:97:92:52:c9:36:90:80:89:5c:dc:
78:df:1e:11:5d:49:82:1c:74:78:73:bd:16:e4:f9:
fc:86:6d:8b:bf:64:4d:76:e5:35:ca:cf:59:80:7b:
3f:62:22:63:cf:93:97:34:0f:41:ac:98:69:67:76:
8f:c0:54:5b:f9:43:d9:d6:f5:8a:35:14:33:1e:2e:
16:1a:df:3a:23:63:fc:8b:e9:5c:ce:75:14:01:e8:
ec:cb:17:a5:6f:1e:dc:c9:87:4f:dd:43:6d:20:40:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:18:45:FF:55:15:AC:58:3B:EC:9E:9B:65:B8:A4:0B:DE:F2:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACD3D3DCDA5D11EF8DC450AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.200.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:09:bc:b8:56:b3:f7:07:0e:d4:2a:2b:76:79:61:f7:4e:d5:
8b:b3:d2:39:71:cc:40:df:d4:c3:26:d7:a9:a4:5f:79:fc:f9:
18:e2:38:99:99:39:58:57:29:17:b0:a7:ec:5b:9b:d7:a4:61:
69:07:50:73:5b:db:df:37:71:94:f3:00:de:9e:f1:9d:54:89:
35:0c:9c:d8:2c:49:60:2d:e8:48:ff:2b:4b:fe:25:9a:b2:6c:
bd:e3:0c:30:66:09:c3:ab:8c:5d:2f:43:15:2f:6c:98:26:0a:
63:14:b7:66:8f:c8:b8:b1:ac:ea:65:fc:38:f9:14:42:43:2c:
88:d4:1c:c9:d1:6b:9b:1f:18:67:dc:9d:43:00:90:82:82:e4:
e9:87:a4:e8:4a:f0:de:6b:52:9e:ca:88:cb:63:83:fe:9a:06:
cf:ba:cd:87:a9:80:06:6c:60:70:e6:a5:c4:77:b7:09:11:60:
76:b6:9d:e8:aa:45:c5:af:bf:ea:0d:c7:b2:96:84:5d:9a:8a:
55:6c:33:19:d1:cd:26:6a:1d:46:10:cd:03:20:93:88:59:e2:
ad:d6:d1:4a:c2:82:d3:11:bb:4a:4b:07:67:bc:2c:34:95:e9:
17:12:bc:77:3d:e8:de:74:76:8b:36:5a:c8:74:81:72:63:a5:
a8:85:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:50:01 2025 by rpki-client