Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AA3B94D8D811EF8841576F762E951A.roa
File: D3AA3B94D8D811EF8841576F762E951A.roa (raw, json)
Hash identifier: 0lslvlfGgr8Mt+c+9h4dHND55PgtA/idgG2+HEJBm8M=
Subject key identifier: 4D:78:31:28:60:F9:65:CB:4C:76:75:E9:90:88:28:C8:37:55:E2:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AA3B94D8D811EF8841576F762E951A.roa
Signing time: Wed 22 Jan 2025 15:52:05 +0000
ROA not before: Wed 22 Jan 2025 15:52:01 +0000
ROA not after: Tue 01 Apr 2025 15:52:01 +0000
asID: 138915
IP address blocks: 154.93.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81878 (0x13fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:52:01 2025 GMT
Not After : Apr 1 15:52:01 2025 GMT
Subject: CN=67911425-23fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:58:7f:b3:14:cb:5b:da:3d:ef:78:61:c1:
4b:48:1b:26:dc:b2:09:08:5b:5c:77:25:79:bb:b8:
db:0d:8c:58:85:05:2f:2a:ec:21:f3:51:b7:93:82:
e8:b6:d9:8f:8c:1d:a8:6c:b5:94:6c:ce:e1:ec:25:
99:4f:9a:8d:cc:4f:65:d1:d9:22:fc:a3:ed:77:24:
35:71:84:9b:88:53:26:c9:43:84:a6:fd:85:64:55:
fc:5b:9a:c8:a2:ef:0c:5b:b4:e1:66:f2:a3:b6:a7:
26:c8:d1:7c:40:5e:ad:f5:b5:0f:8e:5d:ed:71:0c:
b8:cc:cb:49:e0:81:ff:c7:37:b5:ed:e3:8b:5e:ab:
2f:b7:9e:ae:32:18:72:1b:a8:39:2c:d4:5f:0c:ae:
05:71:81:f5:b7:93:6e:6e:10:33:87:84:36:73:43:
f6:dc:3a:83:77:38:55:0e:76:7c:ca:ba:04:30:49:
c8:dd:73:e7:89:28:e2:c7:76:9b:b4:e1:ed:8b:80:
35:04:bb:43:2d:a1:62:85:55:ad:bc:7a:b9:73:e4:
62:88:02:37:0d:86:c8:e6:33:4a:37:91:8a:5e:fc:
c0:e7:af:99:7d:11:c1:ed:1c:95:b1:c0:d2:78:5c:
9b:40:1f:ea:84:0a:38:31:e5:98:c0:eb:a7:63:91:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:31:28:60:F9:65:CB:4C:76:75:E9:90:88:28:C8:37:55:E2:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AA3B94D8D811EF8841576F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4e:6d:a7:ff:9b:78:38:56:2b:93:51:bd:b9:d8:24:c9:b0:
db:9a:d1:7c:e7:7e:9e:4a:7c:f1:dd:ac:3c:77:3c:a0:f9:df:
51:ff:cd:b1:46:bd:58:fd:f3:da:1e:ba:c1:ec:af:b6:6e:ed:
9c:bd:11:c2:56:5f:eb:d4:5d:e9:19:16:f7:da:32:6d:35:1a:
9f:5e:d8:0f:69:6b:81:da:c1:57:04:8c:90:56:14:6f:70:74:
9d:31:87:3d:0e:c4:46:6e:9c:a2:fb:92:0a:4c:21:6c:fd:97:
fb:c1:c6:a0:b4:44:67:15:f4:ff:e5:11:4b:f1:e0:0f:04:82:
bd:0d:91:96:4f:03:98:90:08:97:55:e8:a9:8f:28:cd:0d:a4:
7c:98:5f:a4:67:dc:2a:1b:3c:7f:98:7d:a1:f1:36:22:68:72:
b7:7f:93:96:62:33:3c:53:21:4e:a5:a1:8b:76:c8:e4:5f:b7:
86:03:f8:e2:e2:ca:96:cb:eb:49:12:4f:98:bc:ee:a4:79:29:
98:d1:19:7c:c1:09:23:e3:1e:b0:7b:b8:e7:5e:c1:6e:ba:37:
3d:53:da:4e:27:f2:35:67:31:93:1e:d3:67:6a:ea:6b:fe:af:
b1:59:ee:e1:64:7b:81:af:76:07:82:6a:20:11:18:65:7c:0b:
35:95:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:43 2025 by rpki-client