Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C2D39CDA5F11EF80C92ABF762E951A.roa
File: F6C2D39CDA5F11EF80C92ABF762E951A.roa (raw, json)
Hash identifier: YSdpFZ7h1p/2nkFYzPxLgIuSAHV/EkYxoCfFM7eZoBc=
Subject key identifier: 35:67:40:29:34:13:14:4E:94:03:F3:43:1F:28:62:FA:54:79:E2:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014836
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C2D39CDA5F11EF80C92ABF762E951A.roa
Signing time: Fri 24 Jan 2025 14:31:57 +0000
ROA not before: Fri 24 Jan 2025 14:31:53 +0000
ROA not after: Sat 01 Mar 2025 14:31:53 +0000
asID: 49505
IP address blocks: 154.205.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84022 (0x14836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:31:53 2025 GMT
Not After : Mar 1 14:31:53 2025 GMT
Subject: CN=6793a45d-f31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:05:9a:82:82:91:b0:99:71:de:51:e7:48:
f0:1c:a9:33:2f:9b:85:19:7c:86:ea:ce:16:cb:62:
e8:4b:9d:4b:12:17:9c:71:aa:90:44:26:a6:69:d9:
94:e9:11:2f:cd:02:d2:a8:f7:ea:ea:84:f0:3b:8e:
3b:e1:18:68:4e:b3:b4:5a:f6:54:1f:c2:d6:54:6d:
79:ab:5e:15:33:ab:31:4e:49:45:c7:c1:a5:7a:5f:
17:44:e4:b5:93:f7:cf:3d:50:05:1a:84:4d:1e:e3:
60:20:ca:f6:30:be:02:d8:54:be:f9:47:67:e2:67:
3e:81:4b:40:b7:8a:ab:7b:9a:60:9d:05:33:6f:c0:
9d:6b:f4:d4:b6:c8:27:0e:66:b7:a6:e4:f9:62:20:
ee:f2:1d:7c:d5:88:05:5d:a6:ce:2b:17:80:b2:89:
1f:db:f3:91:76:e0:26:e6:b6:ee:26:3c:b2:47:c2:
35:19:e0:c2:f5:63:d2:c0:9c:14:27:bf:8d:20:d5:
35:2d:f6:da:9e:d6:58:4d:8f:0b:f1:b0:9e:39:e6:
c4:80:ce:d0:46:41:17:57:e7:90:21:02:0b:78:ef:
f8:40:2d:23:54:08:e5:af:d1:a6:cd:c4:26:97:53:
52:8f:5b:77:8a:f3:2a:15:1a:4e:2f:99:d1:c0:e1:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:40:29:34:13:14:4E:94:03:F3:43:1F:28:62:FA:54:79:E2:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C2D39CDA5F11EF80C92ABF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.246.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d2:18:e7:d4:96:92:b3:fc:d3:78:5d:fc:c0:39:e3:e6:95:
28:b8:5e:02:3d:e9:06:28:e6:4a:e3:8a:f9:49:9f:76:89:62:
18:06:45:7d:02:33:52:35:27:b8:0b:78:d5:54:cb:3a:89:6d:
22:45:f7:95:a6:d6:e8:2e:7e:09:f5:d4:35:a2:e2:d1:6c:11:
57:bb:98:08:81:88:c7:6e:eb:63:3d:a0:58:f8:52:7c:25:56:
78:0d:01:e7:5d:4c:f6:90:bf:e4:54:7b:96:45:71:22:a5:d1:
f2:c4:d8:d9:04:92:dc:7f:a6:81:e4:9b:9f:e0:fc:c3:12:2f:
a7:0c:40:d2:df:ff:45:55:21:b2:98:3a:b4:32:27:60:57:bf:
e1:2e:36:d9:3b:3d:aa:78:11:31:63:39:27:6c:c1:69:92:61:
87:7b:62:66:d1:af:d7:83:d5:71:c0:3e:61:fb:d3:c2:87:b7:
9a:bb:11:f2:dc:12:2b:d8:bd:01:31:21:f7:18:be:45:f0:dc:
41:25:3c:83:c9:56:f6:06:d1:f4:89:e3:a1:d4:51:9b:46:3e:
c8:8d:f4:6b:69:6f:35:34:9d:8f:95:6b:79:55:98:ba:97:4d:
d6:fb:f9:5c:3d:b3:e5:71:66:4b:1b:58:59:3d:45:55:c0:c5:
27:fb:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:46 2025 by rpki-client