Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE765B36DA5F11EF9FD9E6BC762E951A.roa
File: AE765B36DA5F11EF9FD9E6BC762E951A.roa (raw, json)
Hash identifier: 5WLCrUfd+ouppSwwXVsDO6ONOA3R3av0ynUPSotTDzU=
Subject key identifier: FF:6F:51:6D:31:F1:0C:38:2D:C5:53:DD:AC:92:C0:A4:20:88:1B:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014830
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE765B36DA5F11EF9FD9E6BC762E951A.roa
Signing time: Fri 24 Jan 2025 14:29:56 +0000
ROA not before: Fri 24 Jan 2025 14:29:52 +0000
ROA not after: Sat 01 Mar 2025 14:29:52 +0000
asID: 49505
IP address blocks: 154.205.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84016 (0x14830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:29:52 2025 GMT
Not After : Mar 1 14:29:52 2025 GMT
Subject: CN=6793a3e3-6fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:dc:8a:62:74:2f:1b:49:6a:c3:b7:0f:8a:
c5:0b:de:ba:e1:89:82:c7:86:05:2e:9e:81:fe:ae:
b6:a2:92:7e:2b:09:bb:0c:fd:a5:4c:01:6d:90:4c:
8f:e7:50:50:a2:bd:dc:c3:20:75:b9:02:3b:af:ec:
62:59:73:45:e8:2c:01:46:3e:18:54:0e:93:d4:79:
db:d9:de:c6:b7:61:61:5c:86:a8:5a:2f:46:0b:66:
b4:25:ff:dc:3d:1d:5e:3e:8e:32:e7:f3:61:58:93:
e2:ef:f2:bb:53:35:c9:63:2d:75:20:8c:3c:ef:29:
78:c3:9a:6c:ea:44:b6:17:8c:54:41:62:3a:49:be:
48:5c:6a:ad:f8:e5:0d:9d:22:dc:fd:46:1d:47:93:
a2:50:c4:dd:57:fe:e7:1e:24:8c:f9:5a:84:f5:de:
a9:7e:29:f9:4a:50:08:37:a1:08:4e:03:ae:43:87:
16:03:49:9b:6c:a8:3c:54:33:1a:e5:51:9c:83:bd:
59:d9:a4:25:1f:e5:eb:09:25:37:9c:7a:09:b0:36:
39:83:a3:4e:a1:64:78:e0:59:7a:c6:e7:01:61:e0:
59:70:28:c8:0d:f1:4e:99:f7:90:eb:dd:40:80:fe:
e4:f2:b7:83:d0:39:33:0c:8d:e9:a8:33:24:b7:ec:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:51:6D:31:F1:0C:38:2D:C5:53:DD:AC:92:C0:A4:20:88:1B:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE765B36DA5F11EF9FD9E6BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:38:09:d9:e3:ac:71:c5:91:f8:46:48:46:f7:c1:b4:a8:7b:
b3:2d:d8:87:99:23:b1:70:2a:eb:96:f5:72:b1:ba:de:5b:44:
01:eb:16:91:a0:6f:c9:d8:6b:74:ba:87:a4:b4:ac:f8:0a:38:
0f:a9:8d:b9:32:30:0e:c4:7a:d9:26:c4:27:1a:8e:1c:f0:9b:
21:c3:e8:bb:2a:c8:07:4a:5f:8d:91:5b:1d:c9:32:64:06:b0:
91:e2:c7:7c:2f:35:d3:17:26:3f:7a:46:97:65:4a:58:d0:8b:
5a:be:f5:62:9d:4d:a8:ef:c3:3b:fc:2f:3d:a1:e4:68:b6:1b:
69:1c:1d:9f:b6:19:24:c5:a7:84:67:f8:04:58:8d:cf:fd:85:
2d:10:04:71:30:ae:a5:8a:bc:84:b3:1a:74:66:1b:02:92:aa:
a1:a8:92:99:13:e1:38:09:df:c6:b4:78:d4:ad:e2:f2:75:0a:
b5:0d:59:55:1a:08:d7:86:6e:2f:ed:85:5e:6b:c9:3a:28:b1:
2c:18:80:6d:99:47:3f:7c:e7:74:14:e8:87:a0:c2:63:8d:e8:
60:50:4e:26:0d:9f:10:37:32:0c:6e:99:c3:fd:ce:12:c7:c9:
8c:8c:a8:aa:8f:97:21:3f:a5:f6:6b:4b:99:92:00:42:e5:14:
6d:f8:21:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUgwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQyOTUyWhcNMjUwMzAxMTQyOTUyWjAYMRYw
FAYDVQQDEw02NzkzYTNlMy02ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtCvcimJ0LxtJasO3D4rFC9664YmCx4YFLp6B/q62opJ+Kwm7DP2lTAFt
kEyP51BQor3cwyB1uQI7r+xiWXNF6CwBRj4YVA6T1Hnb2d7Gt2FhXIaoWi9GC2a0
Jf/cPR1ePo4y5/NhWJPi7/K7UzXJYy11IIw87yl4w5ps6kS2F4xUQWI6Sb5IXGqt
+OUNnSLc/UYdR5OiUMTdV/7nHiSM+VqE9d6pfin5SlAIN6EITgOuQ4cWA0mbbKg8
VDMa5VGcg71Z2aQlH+XrCSU3nHoJsDY5g6NOoWR44Fl6xucBYeBZcCjIDfFOmfeQ
691AgP7k8reD0DkzDI3pqDMkt+x92wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP9v
UW0x8Qw4LcVT3aySwKQgiBv6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRTc2NUIzNkRBNUYxMUVGOUZEOUU2QkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms31MA0GCSqGSIb3DQEB
CwUAA4IBAQAtOAnZ46xxxZH4RkhG98G0qHuzLdiHmSOxcCrrlvVysbreW0QB6xaR
oG/J2Gt0uoektKz4CjgPqY25MjAOxHrZJsQnGo4c8Jshw+i7KsgHSl+NkVsdyTJk
BrCR4sd8LzXTFyY/ekaXZUpY0ItavvVinU2o78M7/C89oeRothtpHB2fthkkxaeE
Z/gEWI3P/YUtEARxMK6liryEsxp0ZhsCkqqhqJKZE+E4Cd/GtHjUreLydQq1DVlV
GgjXhm4v7YVea8k6KLEsGIBtmUc/fOd0FOiHoMJjjehgUE4mDZ8QNzIMbpnD/c4S
x8mMjKiqj5chP6X2a0uZkgBC5RRt+CGl
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:41 2025 by rpki-client