Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AB3E26DA1311EFA470D0BD762E951A.roa
File: D4AB3E26DA1311EFA470D0BD762E951A.roa (raw, json)
Hash identifier: bbX8Aj3IBpCEcMXyO3jiHgfZvmT+FiHK8wG19PV8uRY=
Subject key identifier: 8B:59:EE:B1:23:45:BF:04:D4:68:D2:57:60:5C:2E:EE:4C:BA:B4:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AB3E26DA1311EFA470D0BD762E951A.roa
Signing time: Fri 24 Jan 2025 05:26:58 +0000
ROA not before: Fri 24 Jan 2025 05:26:54 +0000
ROA not after: Sat 01 Mar 2025 05:26:54 +0000
asID: 49505
IP address blocks: 154.205.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82900 (0x143d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 05:26:54 2025 GMT
Not After : Mar 1 05:26:54 2025 GMT
Subject: CN=679324a2-2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:15:bf:24:6f:c2:c9:3f:43:04:80:d4:52:
ce:b2:35:1a:1e:3b:8f:41:a9:c0:7e:01:09:98:05:
00:e3:cf:b0:aa:a9:3d:7d:d3:2d:e2:50:4d:5b:d4:
b5:fc:ea:07:60:00:cb:e1:d4:1e:68:c4:e4:91:81:
7d:7e:88:d6:01:3c:7d:9a:bc:d5:f3:64:ff:ab:98:
59:83:92:fc:eb:3b:b0:e2:52:b7:f4:59:57:54:11:
08:90:21:45:c9:8d:92:2a:12:8c:0e:16:f5:64:cc:
46:a2:8a:7d:98:75:69:7a:fd:1f:bf:1d:cf:2f:c0:
da:d2:84:23:6e:6d:7f:b8:c4:52:ed:d2:06:cc:57:
17:a9:c7:78:63:9b:81:c1:e7:1a:7a:22:3e:8f:ae:
4e:c5:5b:4b:e7:77:cc:9b:3c:ca:19:9c:45:47:0a:
91:a9:9c:87:b3:64:f9:a4:af:dc:0c:6a:4d:02:e8:
90:d4:0f:2d:3d:73:63:79:7b:4b:d1:b5:95:98:7a:
50:73:69:cb:d1:d0:1b:87:ee:9e:70:2f:d3:9c:62:
18:be:02:a7:12:b5:93:24:09:55:bf:4b:70:f3:9c:
c5:37:d5:9b:68:03:8f:e3:12:60:45:92:f9:8d:d0:
41:db:e7:87:e5:a9:be:29:96:7e:19:41:54:3b:9a:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:59:EE:B1:23:45:BF:04:D4:68:D2:57:60:5C:2E:EE:4C:BA:B4:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AB3E26DA1311EFA470D0BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
59:86:36:33:18:fe:ef:54:51:13:e1:18:9f:d5:1b:0c:2f:d1:
7e:c9:8d:c8:8d:c6:ce:a2:0d:01:34:f3:4f:27:dc:e4:70:33:
7a:6b:3e:ba:ee:7d:6d:47:20:6d:60:ee:da:f1:4f:7f:57:b0:
58:e7:2b:2b:19:a1:77:3d:ab:d5:d8:5d:0a:03:3e:6a:27:2f:
fc:38:19:e8:b4:fe:e2:92:df:16:ee:2f:fa:f3:1a:7c:aa:f5:
05:25:a0:f0:b9:3d:32:35:22:c6:6b:29:f1:a2:dd:be:2b:24:
01:f6:2c:5d:71:f0:46:24:97:b4:e0:3f:95:f4:63:50:56:b4:
bd:69:ac:85:a8:7f:d0:15:a8:89:0a:97:0a:86:23:71:b7:1d:
3f:be:5a:ee:81:77:f4:ba:9b:6e:5c:c0:65:d2:80:5e:f1:41:
e2:25:a8:e7:55:2c:30:ef:46:61:df:b2:ba:c2:56:66:98:d3:
31:6b:ad:c0:73:93:1e:72:98:a3:78:c0:e7:84:fe:9f:29:6b:
eb:5f:f6:38:72:6d:85:f2:42:f0:63:d0:51:e3:9c:36:f8:ab:
49:51:05:b3:21:a7:d3:95:8a:3f:f4:d0:0a:a4:3a:c9:c3:e0:
2b:05:19:54:da:97:d5:ef:97:2b:69:5e:04:74:1f:eb:59:b2:
a5:e2:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:52 2025 by rpki-client