Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C201AA24DA0111EFBA7CB746762E951A.roa
File: C201AA24DA0111EFBA7CB746762E951A.roa (raw, json)
Hash identifier: AVUDRf00ErCmm1qXcSwuRnYt6bExRW+R08f/amg+EvY=
Subject key identifier: 90:CE:BD:86:34:66:73:6B:60:7D:51:F4:BE:F0:1B:39:72:07:51:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014382
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C201AA24DA0111EFBA7CB746762E951A.roa
Signing time: Fri 24 Jan 2025 03:17:36 +0000
ROA not before: Fri 24 Jan 2025 03:17:32 +0000
ROA not after: Sat 01 Mar 2025 03:17:32 +0000
asID: 49505
IP address blocks: 154.223.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82818 (0x14382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 03:17:32 2025 GMT
Not After : Mar 1 03:17:32 2025 GMT
Subject: CN=67930650-4a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:ae:e8:7c:bd:49:17:05:2a:8a:95:cf:cb:
3d:33:a8:76:60:aa:47:9e:70:b4:1d:9c:e7:56:15:
1d:cd:24:c4:e6:e6:0b:c8:c1:50:dc:78:f3:c8:3c:
af:d5:e4:05:9b:db:0c:ae:e4:65:29:15:bc:d4:ca:
56:9a:b1:d6:fa:ee:30:a7:2a:76:87:1d:63:d8:09:
9e:4c:36:1a:a0:40:14:d7:ec:e1:f5:37:5a:28:bd:
d1:dc:e5:28:42:53:4a:9e:ec:e1:46:d2:d8:2f:80:
24:ae:6e:b7:75:f5:61:27:44:f4:68:d1:21:82:74:
78:ef:78:48:59:34:15:f0:2e:07:48:93:23:35:91:
a0:87:a4:a1:45:1c:29:95:25:a4:0c:9f:63:70:65:
fa:52:b2:8c:d0:6a:24:db:8a:4e:6e:04:a8:11:96:
da:71:a4:ac:1b:70:6b:ff:60:75:ff:c6:59:ea:27:
3f:98:7d:16:9f:00:1f:7b:41:f8:4a:99:3c:c4:7e:
de:a8:78:3c:83:a5:03:65:d7:56:a8:9b:d8:30:43:
bd:52:39:c3:dc:b6:99:51:6a:26:77:fe:f5:24:1b:
8d:a4:b9:11:30:f6:f9:67:8e:71:9e:f9:0c:16:1e:
45:df:56:13:45:72:ac:59:03:23:20:c1:08:63:12:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:BD:86:34:66:73:6B:60:7D:51:F4:BE:F0:1B:39:72:07:51:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C201AA24DA0111EFBA7CB746762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.198.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5f:66:e6:5d:60:e2:93:37:97:6c:1d:99:60:68:4c:a6:60:
7f:a4:75:b0:34:a3:07:1f:f9:28:53:4c:85:4d:04:99:b5:81:
f2:a1:c5:51:10:ee:c4:3e:7f:93:db:a1:1a:8d:df:1a:2e:65:
44:70:f6:57:bb:19:79:4d:da:c9:f4:af:b5:32:72:bf:8f:15:
09:38:e1:34:5c:4d:2d:f3:d6:df:76:8a:52:76:31:01:69:7f:
75:3c:ab:2d:44:7e:db:c8:f2:fb:d6:83:4d:d4:23:de:00:a2:
c8:2a:35:08:3b:c9:9b:6d:9b:78:64:1b:ee:51:cd:5d:75:f7:
e0:8a:b2:77:ba:ea:90:9f:5b:f4:4b:d7:e5:f7:bd:2d:bf:1e:
72:34:12:ef:61:19:f4:53:1a:ca:d5:48:1e:3c:07:24:51:c9:
07:1c:0a:b1:1b:fa:21:bb:67:a5:13:8a:06:2f:c0:5b:c5:96:
99:53:a5:0a:d7:b0:1e:05:fc:f3:da:a8:1a:31:40:1e:81:8e:
74:e8:61:03:45:78:b7:5e:46:41:92:88:0f:e1:19:23:7f:c1:
2c:92:cb:f4:3f:f5:f4:89:49:79:9b:7b:15:f1:b5:23:d5:9e:
36:2f:30:3d:1a:e9:cf:25:60:ec:f2:a4:93:e4:ed:cc:83:a7:
b6:b9:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 18:05:32 2025 by rpki-client