Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19C08EADC0B11EFA3219C86762E951A.roa
File: F19C08EADC0B11EFA3219C86762E951A.roa (raw, json)
Hash identifier: cuvNc2dmk3076K/XkUhAhqbX/mBkCJteGhQVG+fkEC0=
Subject key identifier: 6F:0B:EA:D1:E5:2F:BA:C2:05:37:75:F1:3D:DF:DE:E7:B6:27:E5:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19C08EADC0B11EFA3219C86762E951A.roa
Signing time: Sun 26 Jan 2025 17:35:33 +0000
ROA not before: Sun 26 Jan 2025 17:35:29 +0000
ROA not after: Tue 01 Apr 2025 17:35:29 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84774 (0x14b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:35:29 2025 GMT
Not After : Apr 1 17:35:29 2025 GMT
Subject: CN=67967265-8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:94:c0:3e:93:9a:f8:b0:a2:86:f7:50:ce:
76:e9:1b:4b:b8:20:66:52:4e:81:78:48:1b:18:96:
ed:11:16:85:81:a1:04:af:ce:e7:0b:fc:01:c3:66:
62:11:af:ab:ab:b1:03:ff:fa:74:09:03:3e:58:7c:
86:a0:c9:88:f3:87:32:dd:60:8c:e8:b5:eb:f7:59:
3c:a9:87:48:a3:ac:30:ff:a0:88:2b:12:5b:4f:9d:
a2:21:43:66:26:95:cf:38:b7:cd:f6:a7:25:be:c7:
b8:fd:8c:eb:63:1c:39:7b:d3:36:91:a5:77:87:71:
59:74:df:3c:6b:c3:85:23:d8:62:6c:61:65:d9:96:
14:88:d3:7f:f0:e1:e1:6a:2d:85:f5:6c:14:dc:23:
49:47:0c:5d:be:42:44:89:0a:0f:1e:f2:67:fe:ee:
32:7f:7d:d0:65:b7:77:3b:62:ce:69:a6:38:b2:91:
80:d4:9f:8f:28:f6:81:d2:94:99:7e:e7:96:e7:cd:
4d:e6:37:55:cf:c0:a4:d6:17:58:eb:ba:a9:3b:f8:
e2:12:c6:8c:bd:55:c4:7c:f6:52:cd:77:96:14:47:
4e:bf:e3:d8:6d:f2:46:b2:99:18:34:c8:30:6e:9f:
bf:f1:c0:37:63:21:00:8a:d3:66:c2:f1:3b:28:d9:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:EA:D1:E5:2F:BA:C2:05:37:75:F1:3D:DF:DE:E7:B6:27:E5:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19C08EADC0B11EFA3219C86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bf:90:a5:40:67:34:e6:c0:12:c1:29:29:58:33:2b:99:0d:
6a:6f:74:45:41:86:68:27:41:4c:f5:38:ac:e0:f9:c5:87:69:
93:49:a0:31:30:b2:cb:e1:67:6d:f6:46:7b:62:e0:2a:01:aa:
f8:34:f6:3e:df:2d:f2:81:98:f9:9a:a7:2f:24:2a:fd:da:b5:
2b:30:51:68:2c:34:e4:e2:de:fe:9f:ad:56:48:45:3b:71:bd:
1e:86:1e:f8:e4:d9:43:19:49:67:ee:9a:df:3b:d2:17:86:86:
01:54:16:d8:da:bf:85:dd:f9:7a:f8:f0:e0:96:ec:44:85:b8:
a8:15:13:e0:91:fd:b0:36:77:9c:fb:ea:b3:8d:73:67:03:4f:
39:cb:b8:32:84:d6:e3:0b:c3:ae:b4:43:88:a7:53:92:c8:79:
8e:bf:ac:c1:bc:c9:c7:a2:54:9b:ea:c3:43:96:75:f1:81:37:
c1:88:ba:74:4b:d3:ce:00:35:b4:0c:a2:39:23:af:85:6b:f5:
7d:cc:66:1a:f4:81:3e:6d:42:82:17:55:f5:75:98:d5:34:30:
82:e4:14:47:38:e7:37:de:c6:6b:08:e9:7a:52:dc:67:bc:62:
76:d6:0b:bd:e5:fc:f6:0a:ee:15:5f:f3:11:f3:c2:08:90:39:
f3:aa:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:45 2025 by rpki-client