Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6CDBA8D8CE11EF8EDE86AB762E951A.roa
File: CB6CDBA8D8CE11EF8EDE86AB762E951A.roa (raw, json)
Hash identifier: IY300lWKqXRjD4CSbAQwdEvMhmS6zgJx9TRbMZEZ8EQ=
Subject key identifier: C0:C6:57:30:C6:4F:5C:AC:2A:67:E9:E5:BD:FD:47:64:07:AD:A1:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6CDBA8D8CE11EF8EDE86AB762E951A.roa
Signing time: Wed 22 Jan 2025 14:40:16 +0000
ROA not before: Wed 22 Jan 2025 14:40:12 +0000
ROA not after: Tue 01 Apr 2025 14:40:12 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81836 (0x13fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:40:12 2025 GMT
Not After : Apr 1 14:40:12 2025 GMT
Subject: CN=67910350-f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:2e:ee:ef:e9:30:47:74:6d:59:3f:cf:db:
6b:32:97:1a:42:08:ca:73:ac:53:8c:32:c3:21:65:
21:67:9f:fb:e0:87:3b:3f:66:37:85:04:da:bf:8e:
8e:64:da:39:67:23:75:02:9d:39:9d:d6:26:98:46:
95:40:47:32:a3:5e:7d:59:ae:83:15:b3:77:16:cf:
60:46:02:09:7e:84:04:2f:ab:ad:0c:5f:55:a3:40:
22:e4:f4:d6:fa:d9:58:f8:59:14:21:90:c4:9e:f8:
71:23:2f:8d:0c:4c:b8:bc:d8:9d:0a:06:95:7d:24:
11:9f:6c:fa:16:f3:3a:6c:d0:5d:2c:83:5a:9c:be:
5a:15:ea:7a:e8:34:e5:38:6f:a1:01:94:b6:05:32:
c9:a8:1c:c5:7e:f7:17:12:9a:a6:4f:25:ac:20:d7:
00:50:c5:e1:d7:df:5f:8b:06:d0:a0:a0:29:74:f6:
14:c0:b3:fe:0a:18:c7:e6:13:e5:de:b1:4c:ec:cb:
d9:d2:2e:a0:34:e9:12:aa:42:f9:d8:2c:a4:dd:66:
7b:08:29:d4:8a:19:8e:28:89:44:3f:4c:82:5a:16:
32:53:e9:59:6a:20:8f:37:61:36:3c:1d:eb:dd:e9:
c4:ca:f1:71:50:cd:8f:df:3c:1e:d6:fd:46:43:68:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:57:30:C6:4F:5C:AC:2A:67:E9:E5:BD:FD:47:64:07:AD:A1:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6CDBA8D8CE11EF8EDE86AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fb:6e:22:e8:98:25:87:37:59:27:ab:2f:14:18:c4:60:ef:
4e:81:b7:44:12:eb:e1:ff:fc:67:8b:a3:f1:31:4c:75:a9:60:
f4:2c:97:3b:f1:84:9a:45:4e:d9:20:88:54:d6:17:ab:61:56:
8d:9e:cb:64:23:10:88:cb:98:a6:73:84:4e:6a:f9:f5:70:5a:
dd:1b:31:4d:e8:4d:f5:be:26:17:39:94:90:fd:7b:a8:d6:93:
0c:62:93:8e:64:ce:d8:19:1a:ed:ba:0b:f2:08:87:e2:71:0d:
ba:80:01:4c:82:91:b8:3b:66:f9:7a:c9:bc:8b:e6:f9:2a:33:
f2:e8:5c:fc:51:c8:2f:d9:3c:f9:2d:55:d3:1c:8e:11:1e:55:
64:05:55:4d:d8:c4:fc:2e:43:0c:bd:61:3c:f7:aa:a5:11:f6:
6b:c7:5d:17:5c:a9:ec:d5:10:94:b7:00:83:e4:22:04:32:28:
76:ce:52:19:6d:90:c9:8a:2a:51:d8:d5:73:0a:84:c2:f0:24:
a1:c4:de:80:ff:ec:ad:3b:58:c4:5c:60:b2:0e:4f:c6:e6:bb:
c1:11:99:af:fa:00:e1:90:c6:ed:56:b6:d8:18:b1:11:0b:30:
e1:47:04:aa:1e:5e:a5:f4:2c:74:41:dd:54:da:10:c6:3c:be:
ae:65:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:58:24 2025 by rpki-client