Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BA2E1EF2D611EFA473829D762E951A.roa
File: F7BA2E1EF2D611EFA473829D762E951A.roa (raw, json)
Hash identifier: hUngxZ8mtot7ahX8SSUPSQAv4NQYzBuB73iP08VcPIE=
Subject key identifier: CD:73:A0:97:AF:5E:8F:FA:2A:DD:8E:20:85:F0:A7:FB:C1:79:D5:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BA2E1EF2D611EFA473829D762E951A.roa
Signing time: Mon 24 Feb 2025 17:44:17 +0000
ROA not before: Mon 24 Feb 2025 17:44:13 +0000
ROA not after: Sat 29 Mar 2025 17:44:13 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89240 (0x15c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 17:44:13 2025 GMT
Not After : Mar 29 17:44:13 2025 GMT
Subject: CN=67bcaff0-f9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:f7:7d:5b:c5:ee:f9:56:81:29:c5:f9:fc:
e6:b5:80:b9:6f:23:70:78:77:64:ce:bd:68:31:30:
c8:e3:69:cd:27:60:b8:48:a9:e8:97:e6:9d:b0:f3:
66:17:4f:67:05:bd:ae:2c:a5:be:73:03:e9:44:8f:
b9:e6:f1:ef:db:48:3f:7c:f2:ff:af:7e:e8:8f:0c:
0b:34:1f:e2:dc:4e:e2:d5:9b:0c:8c:7e:d5:a2:2f:
93:83:13:c1:4d:91:cb:e3:f5:39:2c:1e:95:ea:7a:
46:0b:d5:a5:7e:43:ea:0e:68:37:85:97:ae:b3:ea:
f6:7d:2a:9a:cf:70:db:7b:f5:35:23:b4:37:85:34:
69:71:2a:94:36:5c:93:d7:de:fa:44:29:6d:7a:86:
14:41:4e:a5:36:64:dc:9c:6b:8b:39:bf:1e:ff:be:
f6:0a:95:32:fd:0f:3e:ce:0d:58:57:a4:6d:7a:40:
ca:04:b4:53:35:6d:a7:74:4e:b3:90:1e:c1:a0:d9:
e3:df:ce:b2:42:b3:3a:d1:91:03:b4:56:2a:9c:c2:
0a:2f:da:98:74:9f:81:80:3c:58:a9:ff:90:6f:24:
ba:08:22:53:47:15:ce:20:bb:c0:01:29:f1:59:5c:
e0:d1:bd:bb:43:92:9f:57:4c:9d:00:8e:45:8c:49:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:A0:97:AF:5E:8F:FA:2A:DD:8E:20:85:F0:A7:FB:C1:79:D5:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BA2E1EF2D611EFA473829D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
01:63:18:7d:06:fb:61:30:05:a2:ee:e8:a1:9b:ad:3b:8a:bc:
96:42:ac:ff:85:47:06:03:46:4d:0f:13:ab:ed:b5:62:09:8d:
ec:83:d5:cb:25:37:61:ac:e4:1a:be:fb:6b:e0:d2:01:8f:c6:
93:4f:e1:b4:45:8d:8b:a6:0a:4d:1c:48:1e:05:e7:49:01:f2:
16:2e:ea:af:73:bf:6e:d4:b2:2d:f4:f8:a0:20:9f:cd:98:55:
65:e8:70:4f:d0:9b:bc:c2:de:38:dd:66:06:96:f4:3f:90:17:
3c:24:55:83:32:34:7e:31:40:d7:1d:2f:b4:40:22:74:8d:fe:
a0:90:32:03:20:4b:4d:fd:f6:c5:2a:06:ae:0a:18:d7:01:db:
41:df:22:6d:de:65:e9:ea:a8:3b:97:c0:2b:ef:2f:98:f8:2f:
35:7a:e7:9a:68:aa:65:ba:2a:2b:a7:0f:51:ff:03:50:79:98:
2d:73:e3:6a:15:51:24:56:e4:1e:a4:ae:da:74:b5:f4:ba:bb:
9f:31:83:69:7a:e4:85:03:8b:b3:ec:e3:bf:a4:c3:e2:8b:2d:
b3:9c:e7:a0:f9:2e:43:2c:ab:fb:3a:1b:9c:79:9b:69:45:02:
0b:47:d1:06:4f:b2:c8:82:48:29:92:7a:57:6b:c9:8e:e3:67:
25:42:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:44 2025 by rpki-client