Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5CA0E62D8C311EF8C11FB65762E951A.roa
File: F5CA0E62D8C311EF8C11FB65762E951A.roa (raw, json)
Hash identifier: rAkDtRI9uDTudRlBRYco/5dFFHTrwXMFdKbJOlK37ts=
Subject key identifier: 26:A0:6E:B0:E6:AA:DC:B2:D2:2E:55:8B:6B:1D:17:12:BE:6B:FA:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5CA0E62D8C311EF8C11FB65762E951A.roa
Signing time: Wed 22 Jan 2025 13:22:43 +0000
ROA not before: Wed 22 Jan 2025 13:22:38 +0000
ROA not after: Tue 01 Apr 2025 13:22:38 +0000
asID: 63139
IP address blocks: 154.93.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81786 (0x13f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:22:38 2025 GMT
Not After : Apr 1 13:22:38 2025 GMT
Subject: CN=6790f122-44fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f9:29:98:6f:8a:ab:34:c4:c4:25:d8:f4:cd:
a7:59:f8:15:c1:52:eb:ab:f2:64:62:e8:2b:46:1b:
7e:99:0b:4f:d8:87:64:e6:a0:4a:5b:ec:fc:03:8b:
f1:d2:ca:a2:f5:c9:52:0b:95:7a:91:d7:d8:a8:41:
6d:88:86:04:44:34:a0:88:8f:cf:6e:b7:ee:da:17:
ea:54:a1:1a:e2:10:9b:f2:d4:8a:d3:65:91:52:a7:
a0:a3:fb:60:9f:b9:0c:b3:22:b0:88:d5:f1:b3:1c:
e6:fb:c1:f7:93:da:87:a9:83:1b:96:a2:c7:36:6d:
75:1e:35:78:e1:53:d7:24:a2:da:e8:24:29:55:0b:
3b:d2:1d:6a:fd:ad:dc:06:dc:13:81:40:6b:f5:8f:
5c:69:0e:b9:13:e6:e4:f4:d6:ff:25:39:24:f5:18:
ce:76:1e:64:cf:f6:bb:c3:8f:ec:9e:4f:4d:fe:47:
d5:53:6a:f1:5f:05:bd:74:d4:41:b0:44:d3:f2:01:
e0:a0:22:17:0b:e6:d2:99:54:05:e2:bd:29:65:4b:
ce:6c:ee:de:55:b1:20:bb:75:64:10:c3:48:9b:e8:
55:5e:24:18:fe:d7:05:e1:f8:f3:c2:b3:75:b7:33:
8e:b0:cf:01:39:05:7a:a7:fd:e9:fe:24:79:b4:78:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:6E:B0:E6:AA:DC:B2:D2:2E:55:8B:6B:1D:17:12:BE:6B:FA:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5CA0E62D8C311EF8C11FB65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.81.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:ad:cf:19:e0:43:cb:11:a8:0d:11:bf:25:bf:b9:b3:e4:
88:2c:2c:78:25:4b:6c:06:57:b2:8b:27:11:90:e8:33:19:c9:
8f:58:87:a8:77:90:31:eb:b4:bf:57:8e:a8:31:f7:f6:de:86:
57:f8:cc:24:39:da:aa:58:58:a5:7f:aa:96:05:4d:27:83:ed:
62:e3:cb:23:b4:f7:b4:f1:55:d9:d2:65:1f:62:3e:bf:5e:43:
cc:c4:9e:23:91:79:af:a9:11:a8:83:24:7f:e4:1b:2c:ca:d9:
87:7c:3a:b3:25:70:20:e5:da:76:6a:d6:6a:32:b0:09:db:64:
64:5e:d4:f0:9f:fa:5c:37:88:b6:a6:1f:e3:73:ba:1b:6b:25:
e8:4a:0a:86:02:95:04:8a:dd:2a:ea:8c:6d:11:00:ed:bd:5a:
4a:48:50:3d:55:da:bd:bf:ad:99:a1:92:41:fd:49:86:f2:17:
4d:b9:86:71:66:14:2d:d6:77:7e:09:75:ab:4a:8e:29:f7:a6:
e5:28:e7:3d:18:c7:63:9a:91:c2:e9:b3:4e:f9:14:32:3c:03:
65:50:bf:9e:dc:0b:92:d5:18:c4:31:85:b9:07:7b:26:25:07:
0e:a2:02:35:80:61:17:41:f5:bc:32:ed:12:96:53:c6:91:3f:
66:3e:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:46 2025 by rpki-client