Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC657F6CAE011EFBB98B9A7762E951A.roa
File: BCC657F6CAE011EFBB98B9A7762E951A.roa (raw, json)
Hash identifier: 83uc/3s06AyQv8rCUTbhzlKdUcho94SnuQnOS54Tpeo=
Subject key identifier: 90:B6:E5:38:87:F8:00:B2:F1:BB:A7:B5:F8:72:39:E8:7F:66:00:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013569
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC657F6CAE011EFBB98B9A7762E951A.roa
Signing time: Sat 04 Jan 2025 21:13:26 +0000
ROA not before: Sun 05 Jan 2025 21:13:22 +0000
ROA not after: Thu 13 Feb 2025 21:13:22 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79209 (0x13569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 5 21:13:22 2025 GMT
Not After : Feb 13 21:13:22 2025 GMT
Subject: CN=6779a476-e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:1b:ab:a0:10:b1:ab:14:3e:73:b0:78:cc:
8e:ba:b6:69:15:ad:f9:6a:1f:85:58:4f:ed:09:2a:
37:7a:0c:73:14:af:ae:8d:f8:83:21:64:9b:6a:27:
31:81:2a:c2:98:52:12:4f:0b:d5:4d:08:e2:41:02:
46:9a:c5:08:4a:12:87:a7:88:68:04:af:55:8a:b6:
05:44:e8:6d:f3:a1:53:94:76:31:62:47:20:e3:5f:
03:27:07:26:a3:53:99:4d:2d:03:26:a9:9c:eb:6a:
ec:f3:2d:62:e7:a3:04:e4:2f:7b:e0:25:0a:96:ee:
b6:8d:88:02:02:f2:08:3d:92:11:35:7c:96:d7:7d:
dc:dd:d2:33:66:12:a0:8c:c9:5e:8c:a8:df:54:5e:
f0:3a:09:65:22:49:bf:01:87:43:cb:46:03:ec:10:
33:28:07:5a:59:01:51:cb:52:6b:f3:8e:3f:21:7e:
aa:08:21:08:44:60:32:fd:d5:6a:a7:e8:ab:34:17:
75:a4:9b:59:06:76:0b:f8:c1:33:c1:74:80:5c:db:
dd:5f:87:3f:ca:81:4c:ed:27:9d:01:bd:4c:85:66:
6c:60:6d:18:e2:d2:59:f7:e9:d5:ca:ec:2a:d2:ca:
5a:16:27:a0:0d:4e:60:51:95:a3:48:2a:32:2a:73:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:E5:38:87:F8:00:B2:F1:BB:A7:B5:F8:72:39:E8:7F:66:00:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC657F6CAE011EFBB98B9A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
43:66:20:f8:f8:a6:40:cd:2e:bd:47:2e:7d:0a:62:06:d4:fc:
06:05:d0:be:78:82:e4:fb:e9:a2:d5:fd:9b:90:e1:87:8d:c0:
6c:72:bb:1b:76:0d:6c:76:ee:e5:8e:9a:d3:45:f0:e0:1e:b3:
7b:1e:30:fc:bf:39:77:a7:96:fd:c3:fe:1f:56:06:b7:fc:aa:
00:eb:24:a0:b7:7b:86:9b:ce:89:42:10:bc:5a:90:a3:01:8e:
11:01:cd:be:b8:43:9d:5a:66:2a:ec:46:48:8c:ea:c4:49:ee:
93:df:88:5c:79:1d:89:23:74:27:bf:a2:1e:75:5a:5d:ce:25:
42:0e:01:65:05:7a:84:fd:08:97:39:97:e2:42:c6:8d:50:da:
b2:48:8f:41:8b:57:ca:42:18:0a:75:14:95:c8:1e:a0:9f:91:
41:ba:2a:f0:5a:67:c1:36:a4:b3:39:2f:39:40:9b:23:66:a4:
1a:df:3a:61:0b:8c:d2:f8:c2:5a:03:6d:e4:7d:87:6d:4e:4a:
92:48:e7:e3:e5:dc:1f:51:ec:e6:8b:08:c8:9c:60:74:92:f3:
23:9a:4f:39:3a:7d:d4:09:16:34:86:2d:74:ff:bd:5f:90:ec:
4a:1c:18:a1:79:d1:56:e6:6b:08:61:82:dd:93:dd:6b:97:fa:
b0:55:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:16:57 2025 by rpki-client