Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72171D6D9FE11EF8CAA30AC762E951A.roa
File: C72171D6D9FE11EF8CAA30AC762E951A.roa (raw, json)
Hash identifier: rdj245MC33ysJFmQEU5y3rQiDINRqzEAcX7arjb13hs=
Subject key identifier: BE:5E:63:B3:10:A2:A6:74:1C:B9:8A:C9:F1:F9:2F:E5:E5:74:1D:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72171D6D9FE11EF8CAA30AC762E951A.roa
Signing time: Fri 24 Jan 2025 02:56:16 +0000
ROA not before: Fri 24 Jan 2025 02:56:12 +0000
ROA not after: Sat 01 Mar 2025 02:56:12 +0000
asID: 49505
IP address blocks: 154.223.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82806 (0x14376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 02:56:12 2025 GMT
Not After : Mar 1 02:56:12 2025 GMT
Subject: CN=67930150-0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:22:41:ec:58:df:a7:84:3b:ef:aa:c3:7f:
4c:42:9b:95:43:f3:c2:81:71:23:1f:44:07:7b:90:
70:65:ac:aa:37:7c:5b:c0:a8:42:0f:71:28:5f:6f:
1a:66:16:27:16:f4:52:f4:42:36:fc:2a:d9:e2:20:
2d:d7:b3:fe:28:9a:fb:0d:70:49:5b:1d:ab:fd:f1:
9e:e4:08:07:1f:a8:fe:30:1c:c7:e3:54:ce:05:18:
ea:89:cd:1c:78:78:2f:97:92:7a:5c:fa:78:41:16:
b4:58:c9:a6:8d:52:37:ad:93:26:a4:f1:8a:7b:eb:
b0:7f:89:c8:12:f2:50:41:c1:bf:14:45:f8:d2:e7:
a1:0e:4c:c6:07:28:13:97:04:da:6e:d2:bb:6c:93:
cb:89:16:da:4f:60:e1:41:e4:e7:3b:3e:94:ad:f0:
8d:20:c6:a4:94:b7:74:2f:01:73:a9:96:ee:c4:f5:
fe:4c:59:eb:9e:c9:ba:4e:f1:54:41:61:a9:6a:92:
43:b2:9c:d6:ab:d1:0e:6b:ae:12:74:3b:d4:9a:f7:
e8:9b:bb:22:ed:51:e1:cf:1a:dd:29:e0:82:bf:b4:
89:50:58:78:8b:94:62:53:16:1d:f2:cc:c2:38:8d:
b0:c2:4b:21:85:04:79:6d:84:41:ed:7b:43:bc:16:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:63:B3:10:A2:A6:74:1C:B9:8A:C9:F1:F9:2F:E5:E5:74:1D:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C72171D6D9FE11EF8CAA30AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.202.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e3:77:3c:40:bc:f2:00:3b:45:61:a6:90:c8:0c:75:3d:e6:
d7:9c:a2:00:fe:bf:e8:0f:e5:83:f4:53:4c:6b:63:13:c4:20:
c4:3f:8a:6d:a0:9d:a6:5b:60:e8:83:81:8d:cc:0f:c1:13:51:
48:aa:8b:7c:57:c7:03:98:18:a0:99:b4:14:56:2e:a7:b8:05:
0e:2d:98:9c:fa:7d:fc:71:69:1d:b6:37:6d:d1:c0:bb:27:80:
d0:29:a9:39:2c:0f:5e:97:8d:3b:91:3a:26:f8:ab:5e:97:d7:
97:08:da:75:b8:8e:b6:e0:43:a3:3b:50:1a:83:e3:47:6a:55:
94:b9:1f:55:14:57:6a:e6:91:c3:49:d0:2b:c4:28:a0:62:b7:
b3:c9:0d:de:02:44:60:0b:54:da:9d:6f:e4:b3:d6:40:a2:04:
8c:f6:23:67:38:4b:9f:aa:2d:7d:d6:54:66:3f:6d:e6:5e:9f:
f5:d1:13:96:f1:12:ab:f9:2e:ca:ca:58:69:a6:f4:50:08:4d:
f0:07:c1:ea:e2:75:5c:77:23:ae:47:67:15:11:95:a6:10:4a:
9c:25:75:f3:8c:50:f4:92:82:03:6d:0e:3a:13:32:ba:2e:6b:
c7:a0:4b:6d:c0:82:9b:a4:6a:7c:6b:f6:7f:b2:2e:a3:c2:c4:
61:b7:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:58 2025 by rpki-client