Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA86AD0DA6211EF9D8CD955762E951A.roa
File: FCA86AD0DA6211EF9D8CD955762E951A.roa (raw, json)
Hash identifier: CKaYNlhNjFLnXHlqHxm1w62RfezSoBO4eAc0CiJq1cA=
Subject key identifier: 65:14:C2:A6:58:A9:36:36:79:55:0B:7C:62:F2:1F:79:F0:D8:07:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014875
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA86AD0DA6211EF9D8CD955762E951A.roa
Signing time: Fri 24 Jan 2025 14:53:35 +0000
ROA not before: Fri 24 Jan 2025 14:53:32 +0000
ROA not after: Wed 05 Mar 2025 14:53:32 +0000
asID: 49505
IP address blocks: 154.209.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84085 (0x14875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:53:32 2025 GMT
Not After : Mar 5 14:53:32 2025 GMT
Subject: CN=6793a96f-0e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:03:22:58:78:77:22:a4:d9:ed:25:02:1f:
79:3e:00:2e:e8:f8:4d:0d:51:c1:08:6c:95:de:ff:
2c:a8:62:8f:cf:ab:21:ba:83:b3:06:98:c5:02:20:
91:3d:0c:df:94:d0:79:d3:6d:01:7c:0b:d3:77:17:
50:90:07:af:cd:9b:19:3f:fd:2a:ce:ed:57:65:a5:
fd:d4:23:cf:12:4d:80:cd:f8:1b:71:e5:d0:40:78:
12:e8:91:5b:ad:70:65:59:be:90:c0:17:33:4c:60:
b7:e5:ff:40:26:2e:3e:f8:94:20:76:83:0d:a3:e8:
b5:f1:ab:40:be:e0:0d:3d:fb:26:2a:7e:0a:37:5e:
e3:d5:ff:ec:9e:63:d1:7f:40:6e:6a:0f:bb:27:52:
6a:68:96:92:cd:5f:b9:e4:c4:6d:c3:85:d5:e0:31:
a4:24:b9:b9:f3:17:36:8b:0d:30:93:56:91:eb:86:
de:94:58:4f:5c:4f:33:25:cb:40:0d:9f:b2:07:1d:
14:be:3b:c1:75:cc:21:23:1f:b8:47:58:ca:e2:39:
b6:ff:0a:4b:cf:66:3e:85:5a:95:e9:f9:b7:3d:64:
5c:9f:d5:0d:8c:33:9d:db:81:42:de:9f:bf:51:70:
6f:a1:ff:69:91:9e:21:65:d6:bd:a5:ca:fc:dd:a1:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:C2:A6:58:A9:36:36:79:55:0B:7C:62:F2:1F:79:F0:D8:07:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA86AD0DA6211EF9D8CD955762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.213.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a9:cc:9b:2d:91:12:cc:3b:e1:94:6c:e0:96:8f:60:79:90:
4a:c8:fa:c4:75:0d:79:c3:4d:05:53:c2:b2:ae:86:1a:51:df:
7d:1e:30:7c:66:f4:2c:78:7b:ff:72:8e:ef:33:6b:42:dc:15:
78:20:5c:c1:b9:01:a6:54:68:aa:46:24:bf:75:8b:02:9a:d1:
9e:07:31:29:39:58:d4:78:02:ce:8d:a6:ac:2e:5f:81:8f:54:
ae:fa:60:c9:d8:96:13:4b:4f:a8:27:64:19:7a:4b:f0:48:25:
16:7e:34:14:ad:1a:f0:e6:d9:37:1f:3b:0c:2f:c8:f8:4c:1b:
ff:fc:cd:9f:e0:d9:43:f4:e1:e1:42:85:d4:8f:88:bf:41:bf:
b4:41:2a:d3:d1:e9:2f:24:f0:4e:fa:b1:f1:25:92:18:40:4b:
c2:f0:e9:16:b6:f1:eb:73:d6:62:59:59:81:a1:d3:c7:ab:a4:
a4:3d:f1:ce:ab:a8:d0:c1:f8:16:e1:7b:51:83:ec:7b:d6:ba:
68:34:5a:39:ab:0e:6e:4c:7f:66:e8:f4:90:29:b8:20:19:aa:
98:69:4b:10:48:87:44:a9:76:42:ff:34:2e:8f:43:cd:92:b1:
85:4b:02:49:be:ef:f0:31:d3:1b:69:00:22:b3:e0:91:4d:13:
a9:14:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:08 2025 by rpki-client