Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86B3656DAFB11EFBB969461762E951A.roa
File: B86B3656DAFB11EFBB969461762E951A.roa (raw, json)
Hash identifier: 64G9NogPs2t5sxT+0s09kX2RwapDbC7iKYJl/hzFd4g=
Subject key identifier: 1F:79:50:D7:41:DD:83:13:2D:A8:D7:52:D7:C9:67:61:55:C5:F3:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014917
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86B3656DAFB11EFBB969461762E951A.roa
Signing time: Sat 25 Jan 2025 09:06:54 +0000
ROA not before: Sat 25 Jan 2025 09:06:50 +0000
ROA not after: Sun 30 Mar 2025 09:06:50 +0000
asID: 63139
IP address blocks: 154.94.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84247 (0x14917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:06:50 2025 GMT
Not After : Mar 30 09:06:50 2025 GMT
Subject: CN=6794a9ae-a93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:7e:92:46:25:81:ec:67:ca:6a:33:fe:b2:
da:41:0c:31:34:a9:f8:74:05:bb:95:43:d4:e3:3c:
3b:22:72:1e:8c:f7:ea:07:07:fd:e0:93:1c:1c:af:
fb:53:fb:02:e1:d2:15:b4:40:39:0e:2c:22:58:21:
bc:58:c1:7b:7b:dc:0d:e6:77:a1:6c:54:78:6e:ae:
67:47:5a:9f:64:ea:91:71:5b:4c:74:2a:e5:74:a5:
1c:36:d0:ea:49:cf:8c:37:04:fe:a4:45:e1:41:14:
84:c0:92:46:da:ba:3b:da:20:91:3f:01:f7:98:d2:
db:32:68:a9:d6:d8:4d:d9:01:79:ad:07:d5:c0:5c:
37:94:38:e8:0a:02:53:ee:3a:0c:35:f5:0f:8e:84:
00:1e:6c:d5:7f:38:7f:e3:93:bc:1e:cb:52:b4:ab:
ff:84:48:f1:ff:88:3c:d0:ab:11:7d:71:d1:40:6f:
99:4e:fa:7b:09:db:ae:38:27:85:c7:69:ec:14:cb:
25:c7:37:8a:eb:d2:51:1c:2c:f6:a2:50:98:bc:66:
7c:74:37:a6:b8:f1:ff:f9:85:2c:47:5e:f9:99:2a:
ec:ed:a8:04:4f:c2:7b:65:47:79:c0:62:33:3d:f3:
43:4a:71:9d:90:60:ee:ef:d1:6d:08:c2:4e:4c:48:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:50:D7:41:DD:83:13:2D:A8:D7:52:D7:C9:67:61:55:C5:F3:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86B3656DAFB11EFBB969461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:74:dd:05:bb:c8:00:1d:ee:0f:3d:90:ce:e7:0d:24:74:94:
5d:b4:a0:6f:db:0e:3c:8f:79:20:89:5c:84:aa:dc:32:8e:8c:
0d:d1:ca:d9:63:42:46:3d:7f:bd:d5:ec:5c:a1:97:26:36:28:
a5:4e:a8:ef:fb:29:ed:be:0f:d0:c3:40:ca:46:91:b6:0a:21:
87:b1:9e:7e:9e:28:88:d0:c5:84:c0:c0:90:97:67:45:b2:8c:
86:35:54:8b:03:d1:02:ee:22:fd:58:01:81:20:cb:eb:8b:e8:
7c:dc:3d:22:99:ee:a1:90:b9:d7:76:04:07:01:4a:03:6b:bb:
6b:da:a2:c5:fa:b1:c9:3a:b3:4d:69:24:d4:fd:e7:ff:a4:72:
ba:b6:b0:6a:11:2d:27:a1:3b:01:c1:28:9d:8a:48:0a:41:af:
53:63:9e:24:60:fa:84:80:e3:d4:59:03:8f:f3:8f:f4:2c:e2:
96:f0:46:ea:75:47:e5:f9:ae:c6:f8:2e:5f:ef:f5:6e:22:51:
a1:2b:52:88:dd:3c:ec:46:78:7a:ac:7a:03:39:fc:14:c1:d3:
38:b4:be:cb:87:91:5a:30:06:34:79:6e:66:cb:a5:66:57:28:
df:09:98:c7:15:43:9a:7d:df:f0:2e:21:9b:57:d6:f6:41:6a:
d3:d1:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:35 2025 by rpki-client