Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80152CEDAF911EFBB769A55762E951A.roa
File: B80152CEDAF911EFBB769A55762E951A.roa (raw, json)
Hash identifier: iccC7wJR/q2iu7tUsZB3CTGYw2g/IMEaBNcAGl3i/I4=
Subject key identifier: 3D:ED:98:09:74:90:C0:79:6A:71:0B:F9:A4:C9:0F:9F:B3:AE:72:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01490B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80152CEDAF911EFBB769A55762E951A.roa
Signing time: Sat 25 Jan 2025 08:52:34 +0000
ROA not before: Sat 25 Jan 2025 08:52:30 +0000
ROA not after: Sun 30 Mar 2025 08:52:30 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84235 (0x1490b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:52:30 2025 GMT
Not After : Mar 30 08:52:30 2025 GMT
Subject: CN=6794a652-7a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:78:9d:be:9f:42:4e:4a:8f:58:82:77:f1:
41:93:a8:88:b7:d8:65:bc:e1:70:f5:5a:8c:98:19:
ef:16:82:93:44:50:e4:f2:89:98:37:ae:2b:d7:a9:
7c:c9:eb:ac:c0:ec:71:ee:4e:95:71:46:d0:53:cf:
59:8c:55:d9:21:01:23:d9:94:63:1e:e0:1c:e0:9b:
14:5a:b9:b2:48:d0:69:f4:fc:4e:14:71:d1:9e:b3:
f2:06:bb:82:69:72:16:62:70:29:b8:d0:b9:2a:72:
bb:62:4a:d5:14:61:2a:77:ad:8e:87:d4:0b:42:c5:
49:06:97:dd:ce:fa:63:f7:1d:5b:69:65:06:89:0a:
b3:c5:53:00:89:9f:7d:09:01:53:ae:9c:95:83:4d:
ee:22:dd:d8:43:48:b6:52:1b:09:9b:16:55:6d:d5:
09:af:8a:fa:6d:0a:2e:49:d0:27:0b:04:71:62:c3:
e6:eb:9d:f6:ec:35:e9:2c:39:97:2a:1d:40:7f:71:
44:a7:f4:49:ed:8c:4e:6f:1b:12:3f:ad:ee:d8:f1:
9f:c6:bc:c3:4d:57:62:c6:0e:2d:ff:62:9d:1f:15:
13:74:12:a5:50:56:41:da:c8:a3:25:3e:02:15:ff:
34:c0:e5:5d:4e:4c:05:f5:94:05:b2:f8:6a:0f:15:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:98:09:74:90:C0:79:6A:71:0B:F9:A4:C9:0F:9F:B3:AE:72:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80152CEDAF911EFBB769A55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6f:03:97:c9:08:71:6a:2e:ef:7b:a5:fc:c6:20:be:16:9e:
1e:ee:07:9c:6d:c1:f1:e4:7a:e2:1a:d9:00:8c:25:1d:df:a7:
ed:e6:1c:d4:3e:26:6d:34:26:75:06:76:52:ba:31:58:a3:63:
55:2d:07:36:ff:34:3a:63:d0:13:72:3d:b9:08:74:39:24:c4:
bb:34:4f:c4:44:5c:f2:a5:e7:6c:65:d3:31:5a:06:12:c5:01:
66:dd:c8:79:b2:c5:b3:67:a4:7a:fc:4f:80:fb:ad:95:f4:8b:
3b:ea:3d:6d:5d:fd:d8:38:2e:76:4e:2c:90:2a:c1:7c:93:38:
69:3d:23:09:45:89:cc:51:5b:dd:1b:7b:ee:63:6c:f0:0a:d3:
2e:24:6f:7b:c9:22:a8:1b:1d:ed:0f:ed:b0:13:72:3a:4e:8b:
bd:1a:68:d3:ff:0a:69:7f:5d:84:a1:c5:ea:72:43:e1:c9:86:
20:a1:af:27:e7:ff:c0:d0:a7:d0:3f:8a:e1:f3:e4:88:f4:e4:
f9:1b:33:ed:cc:60:c3:a5:d4:36:f0:ec:2b:bb:c3:f5:77:e6:
ce:51:9f:8c:41:19:cc:24:3c:28:79:50:78:a3:cc:25:4e:bf:
60:d1:a1:cf:0e:73:fe:7e:40:42:63:4d:86:ef:b4:94:5b:eb:
36:97:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:43 2025 by rpki-client