Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC916308DA6411EF9CC99361762E951A.roa
File: DC916308DA6411EF9CC99361762E951A.roa (raw, json)
Hash identifier: 5S4ZpN//18KD/IFUyTt/K5DM0YbgWDnhHckW8GeimMA=
Subject key identifier: 01:D6:65:D1:46:A2:06:FE:64:A3:93:0C:2E:B6:BC:FA:9A:F0:58:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014896
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC916308DA6411EF9CC99361762E951A.roa
Signing time: Fri 24 Jan 2025 15:07:00 +0000
ROA not before: Fri 24 Jan 2025 15:06:57 +0000
ROA not after: Wed 05 Mar 2025 15:06:57 +0000
asID: 49505
IP address blocks: 154.209.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84118 (0x14896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 15:06:57 2025 GMT
Not After : Mar 5 15:06:57 2025 GMT
Subject: CN=6793ac94-6acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:04:77:fe:8a:55:c8:17:b5:72:28:1f:e1:
ef:4c:04:f4:f2:d0:7e:61:9c:ae:66:36:2a:86:83:
04:fe:e7:52:06:c6:10:ed:d6:5d:48:66:b6:22:ac:
77:dc:07:5c:4b:40:a2:84:fd:2d:bf:f9:ec:63:b9:
4f:b1:73:5d:fb:d2:71:c5:b2:8f:76:d8:10:51:08:
34:c7:d6:92:8e:b5:97:ff:bf:a5:4c:c0:19:9a:15:
b9:04:42:23:28:83:98:b2:6a:77:36:f7:10:b3:6f:
de:db:ff:6b:39:18:1f:6f:b6:9e:43:97:e5:57:e1:
11:f0:9d:db:42:0b:f5:3b:7a:01:a8:33:f9:7e:8a:
8a:88:b3:fa:ed:a2:59:18:98:47:ef:7a:de:50:2c:
61:c6:d4:d3:ab:fb:79:95:e8:66:de:07:20:5d:f8:
6d:0b:c4:56:f8:00:2b:58:c4:4c:2c:56:b7:d2:d1:
0e:da:97:97:ec:91:62:35:0e:fc:b1:8f:ba:78:ea:
a6:f8:1a:89:77:15:48:71:a3:04:a5:e6:b8:e8:73:
75:7e:a3:f9:cc:59:99:66:92:0a:2d:18:7c:dc:3c:
56:66:3f:be:c5:c5:17:38:5d:01:87:04:aa:ac:2a:
d4:9e:35:63:fc:5c:93:eb:12:93:5a:d9:83:69:11:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:65:D1:46:A2:06:FE:64:A3:93:0C:2E:B6:BC:FA:9A:F0:58:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC916308DA6411EF9CC99361762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bc:0c:19:6e:b1:a5:c1:41:89:10:1d:4c:89:35:6f:3a:5e:
79:44:f0:da:f1:57:22:97:e6:9a:01:b1:8b:2a:b8:43:2f:44:
db:9e:7f:10:ae:e1:e1:21:9f:61:f4:74:99:de:27:ba:5d:e4:
51:af:2b:52:37:06:a0:5f:4d:bd:ee:14:a8:b7:30:b8:aa:86:
29:a1:aa:0d:48:aa:d1:e6:6a:88:a4:c5:bb:c6:c0:aa:59:27:
b1:50:42:47:14:2f:8e:b5:e9:dd:e1:4e:74:a2:8e:01:b2:81:
31:e0:51:84:12:c1:86:69:25:54:22:1e:db:b4:a9:91:6c:e2:
ac:9a:c7:60:c3:0e:69:d7:86:ea:96:5b:80:80:3c:c3:cf:5e:
2d:57:4a:6e:7c:f0:6d:70:77:e0:ae:7c:39:b9:75:5f:8d:ad:
2e:13:38:46:4a:c8:1b:dc:32:47:01:5a:bf:5f:48:fd:22:90:
82:81:c5:b9:3d:c2:ee:45:d7:ae:5c:d0:ae:b3:00:a8:c0:ce:
4b:99:7a:f9:27:17:e2:c0:f2:7f:66:91:85:95:af:6f:22:9a:
bc:98:dc:44:01:3c:f5:bc:2d:99:ed:48:88:46:18:68:4f:db:
1c:fe:4c:bb:44:37:67:74:ce:98:b4:5e:3a:13:d8:bc:71:22:
48:5a:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:01 2025 by rpki-client