Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6CE9C2D8C011EFAC90C04F762E951A.roa
File: CA6CE9C2D8C011EFAC90C04F762E951A.roa (raw, json)
Hash identifier: HswQKFnKgEuYkh5Bn4LL1VeqjpXkdqVmFQcqia6B8FU=
Subject key identifier: B1:52:10:E4:5F:40:CB:69:38:E7:93:DD:EA:49:14:1A:02:C6:15:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6CE9C2D8C011EFAC90C04F762E951A.roa
Signing time: Wed 22 Jan 2025 13:00:01 +0000
ROA not before: Wed 22 Jan 2025 12:59:58 +0000
ROA not after: Tue 01 Apr 2025 12:59:58 +0000
asID: 138915
IP address blocks: 154.93.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81772 (0x13f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 12:59:58 2025 GMT
Not After : Apr 1 12:59:58 2025 GMT
Subject: CN=6790ebd1-ada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:36:fe:76:9e:cb:b2:09:3b:2b:c4:cc:c8:
e4:e6:85:ef:cd:11:4d:97:b5:19:c4:91:fc:ef:f2:
d2:fe:d2:ca:0d:07:33:ba:9f:c2:80:09:79:05:c6:
a3:e4:25:66:92:d2:9c:a0:a4:cd:f7:3f:5a:f8:07:
50:0e:7c:bd:91:d3:fd:65:0f:5d:21:ad:89:29:26:
b0:9d:7d:48:d7:2d:01:ca:ed:e2:a4:9a:bb:63:f4:
8f:93:20:b4:78:63:5e:d0:04:5c:a3:ef:7d:1e:26:
a8:f4:75:bb:ad:a1:18:74:15:c1:09:d7:ff:b2:17:
7f:38:21:bb:dc:f4:c4:3c:b1:2c:34:00:bf:7e:6d:
49:89:4c:5e:51:17:d3:a8:8d:45:04:1c:44:0c:b1:
1c:57:09:c2:89:04:80:a1:53:1e:62:78:c7:d9:fc:
1a:04:0b:db:1c:a5:bf:f5:e5:52:92:e3:79:be:98:
bc:93:22:82:8e:2e:7c:ff:d7:69:69:e6:66:dc:32:
4a:1b:a1:29:29:78:ab:f7:90:01:0a:cc:6a:95:6d:
01:14:03:b9:36:0c:1c:32:a4:36:af:8e:cd:ac:92:
ca:fc:7e:76:11:a5:c2:90:d3:e6:fc:ea:1f:be:db:
0f:7c:89:38:c7:24:aa:82:f3:78:bf:e2:29:2e:14:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:10:E4:5F:40:CB:69:38:E7:93:DD:EA:49:14:1A:02:C6:15:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6CE9C2D8C011EFAC90C04F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:aa:1f:55:73:d5:c5:db:79:60:36:38:b7:50:02:27:56:e4:
58:4e:e7:b8:a5:82:30:57:69:e1:1f:7a:53:b1:75:9d:10:e7:
87:f4:fc:34:3e:78:9b:fc:bf:0b:8a:07:69:13:cf:c1:e4:dc:
d4:84:20:4a:d9:39:b1:a0:78:4a:03:99:b2:00:1b:f8:d8:50:
6f:67:d5:b3:01:da:24:e9:f0:f9:dc:fe:68:96:f6:e5:6d:dd:
e4:87:2f:15:ca:d8:f5:1a:8d:ce:4e:33:21:e8:92:16:89:33:
17:8c:91:cc:6e:c9:83:25:5b:3f:52:ac:ce:a1:4d:c0:21:bb:
1b:0b:96:60:74:c1:df:98:08:4f:e6:8e:a8:69:01:11:4b:40:
e6:62:3e:14:9e:a4:c8:20:01:1e:97:5a:8a:f0:0d:aa:28:f8:
44:da:c1:f5:6e:f7:02:e8:02:4b:f6:9f:f1:04:31:3f:45:d0:
52:8f:02:ff:4e:db:8e:b1:0c:61:4d:46:59:a6:61:b6:77:2a:
cf:24:8c:15:32:73:e4:bb:cc:aa:ba:15:6f:8d:9a:09:96:c3:
95:7b:fc:93:1f:f7:35:9b:34:d3:76:a2:e0:13:8c:6d:ff:7c:
44:76:6d:af:34:2f:d8:94:04:0b:bc:b7:8e:30:21:a8:13:5d:
68:70:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:11 2025 by rpki-client