Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F148DE0ADA5211EF93F50B68762E951A.roa
File: F148DE0ADA5211EF93F50B68762E951A.roa (raw, json)
Hash identifier: 7yisC4QzHrlo8xQPYopUJnCGRoOMpfFNtOClDjtYxsM=
Subject key identifier: 92:77:4B:F8:90:44:5D:C3:AC:C9:EA:F7:D1:B5:0C:71:43:AE:93:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01472D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F148DE0ADA5211EF93F50B68762E951A.roa
Signing time: Fri 24 Jan 2025 12:58:44 +0000
ROA not before: Fri 24 Jan 2025 12:58:41 +0000
ROA not after: Sat 01 Mar 2025 12:58:41 +0000
asID: 49505
IP address blocks: 154.223.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83757 (0x1472d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 12:58:41 2025 GMT
Not After : Mar 1 12:58:41 2025 GMT
Subject: CN=67938e84-54d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:e9:64:a3:d6:66:b7:f4:fd:65:7b:0a:78:
95:85:86:0e:f6:46:a0:29:c2:a8:3c:18:c2:5e:5b:
94:20:27:44:6d:a2:be:93:3a:eb:94:67:c7:f7:cc:
08:4e:80:5b:30:0e:85:2e:c5:58:72:38:1e:a9:c4:
ce:13:6c:30:d1:24:97:4c:3d:f6:7e:f2:fc:2c:40:
5f:bf:91:13:66:13:4c:17:6f:4d:53:49:99:ce:e5:
d7:41:d7:cb:6e:64:43:eb:17:d7:b7:62:a9:69:d5:
92:74:88:c5:cf:df:f0:46:3b:38:fe:af:c3:9a:5a:
27:fa:60:25:1a:dc:b1:64:f1:27:c2:d9:3c:79:d9:
cc:78:b1:8f:d3:f4:96:b1:2c:50:31:59:13:64:4a:
4c:d7:70:f5:56:d2:41:7a:16:f4:77:f3:58:f8:b5:
ea:cb:ec:08:14:f8:3c:54:94:0a:a6:02:e4:ca:6a:
48:66:b7:19:dc:a8:0e:40:61:97:02:58:08:8a:16:
ee:6f:91:fd:22:89:73:3f:93:43:2a:3e:25:89:69:
ef:ad:01:e4:7a:2e:02:07:55:eb:a0:ea:52:2e:02:
a9:6a:aa:d9:c0:13:de:e5:84:ce:8a:df:12:aa:c9:
00:0f:9d:e8:c6:a4:de:b0:87:14:9d:5e:17:44:86:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:77:4B:F8:90:44:5D:C3:AC:C9:EA:F7:D1:B5:0C:71:43:AE:93:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F148DE0ADA5211EF93F50B68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.201.0/24
Signature Algorithm: sha256WithRSAEncryption
48:50:21:65:a6:0e:84:5c:0b:35:f2:3c:29:69:b7:01:1d:73:
55:18:ac:d0:cc:6b:c7:56:0d:47:12:31:f4:03:75:44:17:d1:
78:de:02:ba:5a:6e:e7:ed:c9:57:79:a7:14:ce:a6:e6:7d:c8:
22:62:c2:f4:1a:c6:a0:f2:48:da:88:5d:9f:d8:2b:a1:cd:29:
77:97:48:e5:7a:68:3e:df:72:21:20:c5:9b:a1:34:14:18:ee:
15:7d:2c:2f:89:38:92:18:5f:9d:22:47:90:6c:46:2a:28:29:
f3:3e:a8:40:0f:be:57:3e:05:4b:ef:c1:7c:d7:71:f6:db:a4:
f8:bc:af:9d:2c:8d:1c:f4:48:c9:1a:65:44:3f:87:bf:6d:61:
cf:15:9f:26:c8:53:fa:49:bc:21:b4:35:f6:c3:31:9f:88:78:
ca:af:3e:70:63:2f:06:b8:38:5b:84:96:44:da:51:d3:f2:06:
b5:8c:5c:e6:16:96:7c:30:6d:03:be:3f:0e:78:a1:ea:65:4c:
e7:6a:48:e2:ec:d9:c6:16:91:44:67:4a:1d:7c:de:7b:36:04:
48:60:0a:5c:70:2b:d4:3f:4c:c5:a9:fa:10:79:77:05:db:24:
ca:fb:74:c3:b3:19:51:fe:a7:4e:6e:34:8b:b6:0b:98:78:bf:
fa:19:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:36 2025 by rpki-client