Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D6124C8EB11EFA49EF9BE762E951A.roa
File: 815D6124C8EB11EFA49EF9BE762E951A.roa (raw, json)
Hash identifier: DMZ6dua/TspczUAViTa6/W5bozkJ1jOY+Ru8SmHUZf0=
Subject key identifier: 22:FC:04:3A:6F:3B:21:85:FF:71:21:8A:CF:94:BB:7E:75:A4:D6:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01325B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D6124C8EB11EFA49EF9BE762E951A.roa
Signing time: Thu 02 Jan 2025 09:25:28 +0000
ROA not before: Thu 02 Jan 2025 09:25:25 +0000
ROA not after: Mon 20 Jan 2025 09:25:25 +0000
asID: 138630
IP address blocks: 154.213.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78427 (0x1325b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:25:25 2025 GMT
Not After : Jan 20 09:25:25 2025 GMT
Subject: CN=67765b88-f669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:bb:e8:97:bd:40:00:38:46:bc:bd:f6:e1:
d5:6a:7b:45:83:6a:c3:b9:06:ee:f4:14:1d:c8:0b:
d1:da:69:87:16:0c:82:8f:3e:cb:80:81:a0:ad:0c:
12:ac:4b:5a:0e:20:fa:07:c7:c6:03:af:cc:c2:f4:
42:5a:80:89:19:79:d7:d2:ef:35:4b:d3:3c:fb:3f:
2f:f0:39:a0:8f:2e:dc:08:00:38:e0:a9:b0:0c:dc:
f2:2b:d2:f5:4a:e1:19:99:e0:a7:61:cd:d6:42:85:
4b:3a:f3:32:49:be:8f:9c:0f:0b:c3:95:75:75:70:
bd:b5:ee:a0:60:07:7f:61:53:a2:2c:10:84:13:b1:
86:5c:6a:10:4b:73:14:c6:50:a0:e2:86:03:ff:e9:
bd:ad:15:37:e0:50:e2:64:44:29:10:da:e0:d9:9e:
2c:3b:3a:f7:4b:9f:8d:cf:43:ee:77:49:59:d7:b4:
aa:a9:26:4a:8b:13:e4:bc:5c:33:0c:14:67:42:3c:
4e:f4:16:ec:08:a1:ed:84:6d:f0:46:a1:2d:21:58:
23:3e:46:bf:e7:8f:e2:24:ef:6a:03:6a:42:c5:45:
90:fc:cc:a7:68:d8:ef:f9:4c:9c:82:71:99:ff:7a:
8f:2b:e0:1f:d0:98:86:33:e2:41:17:73:6f:67:81:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FC:04:3A:6F:3B:21:85:FF:71:21:8A:CF:94:BB:7E:75:A4:D6:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815D6124C8EB11EFA49EF9BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.30.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:a1:ef:96:92:9a:42:db:79:38:28:89:30:b0:28:ab:2b:b2:
82:8a:53:ea:99:d5:a4:ec:8b:2a:d2:8f:e0:7c:d0:d3:ce:69:
8d:d0:81:3e:67:d7:4d:97:ea:58:e6:a8:03:86:a5:8e:ee:de:
e3:e5:6b:f5:59:12:50:0b:d4:95:a6:f6:61:d4:98:4b:2c:d9:
fa:26:c1:84:cb:7c:2c:d0:cf:0b:dd:04:6a:e6:47:1b:cd:14:
47:ab:3e:d6:ca:e2:96:fe:de:ee:8e:62:f6:31:c1:25:cb:f6:
dd:cd:1c:98:f2:f2:86:41:2a:75:de:0a:86:a9:21:20:cf:e5:
7e:5d:83:7c:f4:aa:e7:b9:ca:5a:fe:78:bb:93:56:49:0b:08:
a9:55:a9:75:84:51:11:81:dd:bc:51:4c:94:af:64:b7:6e:b0:
55:2a:34:71:41:c9:3c:44:9e:d1:7b:2f:17:fe:dc:eb:75:49:
de:a9:5d:d8:e2:4b:2a:15:28:3c:7e:56:62:c3:46:8d:50:92:
d1:c3:f9:2c:ab:fa:c4:47:10:07:88:a2:73:6b:b4:c9:0c:49:
ec:cd:f9:64:bd:63:2d:8a:11:a3:3c:69:6b:02:48:6e:0c:30:
1a:8e:c3:87:42:5a:2c:e1:44:11:19:24:8f:a0:89:fa:15:63:
e5:da:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 20 15:18:47 2025 by rpki-client on console.sobornost.net