Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E915A408DC0411EFB2C6AA57762E951A.roa
File: E915A408DC0411EFB2C6AA57762E951A.roa (raw, json)
Hash identifier: mh4+h/hZGFjflZ1w58XEz5mWDan795CQz0zkRNHhCI4=
Subject key identifier: D0:8F:92:80:85:7A:74:B3:03:FD:07:36:9F:1F:1E:F9:BC:02:A6:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E915A408DC0411EFB2C6AA57762E951A.roa
Signing time: Sun 26 Jan 2025 16:45:12 +0000
ROA not before: Sun 26 Jan 2025 16:45:08 +0000
ROA not after: Tue 01 Apr 2025 16:45:08 +0000
asID: 63139
IP address blocks: 154.94.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84728 (0x14af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:45:08 2025 GMT
Not After : Apr 1 16:45:08 2025 GMT
Subject: CN=67966698-57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:50:83:5d:75:9c:f3:37:07:8f:04:b1:17:
8d:c5:fa:39:d8:78:0b:a7:2a:5e:04:5e:a5:b7:a7:
79:58:d6:74:cb:d6:40:d6:d9:1e:c4:b2:bf:9b:22:
ec:e0:2a:3e:d4:79:04:43:b3:12:70:bd:96:6b:4a:
e0:8b:b3:a3:c1:7e:a1:e9:9b:4a:dd:c9:e7:5c:df:
24:2f:80:77:5f:16:b7:b7:9d:e9:57:c5:1f:0d:91:
d9:55:b6:ff:e5:84:61:af:cc:c1:80:e8:0b:c6:d2:
9d:fa:e8:93:65:64:af:61:27:e5:65:e5:98:db:e8:
f6:73:47:b4:b5:f8:80:b6:77:33:ec:fb:13:38:77:
b4:7d:92:cb:08:ac:04:a0:1a:53:99:be:8f:bb:ed:
ca:f6:8e:a4:ec:16:a5:32:c3:68:d1:08:b9:bf:79:
a6:02:d4:c7:09:a2:a3:e8:ef:6b:fa:c3:e5:6c:bc:
c1:78:e8:58:30:18:66:78:06:db:a5:e5:af:49:19:
2d:e3:bf:a2:a9:f9:4c:2c:cc:c4:7e:4d:80:ae:8a:
93:e7:56:90:53:08:03:f7:ac:27:6d:8b:79:1f:7c:
0c:bc:b6:ac:69:eb:05:3f:ae:64:98:48:a3:a2:a6:
82:5f:71:98:ef:5a:d8:4c:1e:43:48:25:a8:5e:5c:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:92:80:85:7A:74:B3:03:FD:07:36:9F:1F:1E:F9:BC:02:A6:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E915A408DC0411EFB2C6AA57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5a:5b:e4:d4:1f:ce:a6:ca:5e:59:13:a4:55:98:44:3c:cc:
70:60:76:00:26:5a:f1:89:cd:be:f6:2f:f6:4a:a5:07:e8:74:
35:33:c9:41:c8:0b:61:24:52:7c:67:88:29:43:f2:ff:46:30:
81:86:ba:d4:4b:17:73:c8:10:de:f2:36:55:92:99:19:af:cf:
b7:3f:96:0d:4a:ad:d6:09:f0:c4:f0:66:29:92:98:78:fa:ec:
bf:d5:9f:24:49:f7:43:7d:86:53:79:ca:3b:e5:c1:da:7c:7a:
0e:a0:92:ed:04:55:38:2c:cb:90:ec:c7:03:8b:d9:0e:0c:39:
4b:34:75:b0:53:b0:00:d5:f7:5c:1d:a4:9c:66:01:8b:d5:c6:
15:1d:9c:b2:70:61:b7:44:08:2c:fb:ac:ea:35:bd:52:b8:db:
62:17:e6:97:10:a7:e7:dd:5d:c6:11:20:90:95:11:64:3b:ec:
29:71:f2:3b:3c:33:30:e6:36:53:77:eb:5e:59:d4:57:46:cc:
a7:e8:5a:08:1a:69:6b:c1:be:1e:33:79:7f:9b:e9:40:de:55:
31:a1:76:29:95:75:69:26:4f:15:34:f5:be:47:f5:5b:61:1f:
4b:18:4b:df:8d:13:fb:a5:37:50:cd:31:53:54:d2:ef:c4:cb:
da:7b:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:41 2025 by rpki-client