Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7050EA01CFA11F08EED2ADBDAE4EC9C.roa
File: F7050EA01CFA11F08EED2ADBDAE4EC9C.roa (raw, json)
Hash identifier: pdJw9tnQT6oOjpyjaBs9OD3baCc6ZTQ8ICoQyOll1FQ=
Subject key identifier: 94:FE:D7:FC:8E:76:70:13:A5:A3:D0:28:50:CA:C9:1F:A5:21:54:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7050EA01CFA11F08EED2ADBDAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:47:46 +0000
ROA not before: Sat 19 Apr 2025 08:47:41 +0000
ROA not after: Mon 28 Apr 2025 08:47:41 +0000
asID: 141167
IP address blocks: 154.212.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96781 (0x17a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:47:41 2025 GMT
Not After : Apr 28 08:47:41 2025 GMT
Subject: CN=68036332-7931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:5b:18:81:7a:a4:e0:c1:e7:9f:fd:75:69:
7c:a4:aa:ac:5a:6d:9c:76:eb:1f:c1:75:da:66:43:
88:53:b3:e2:55:f9:68:5d:25:9b:2a:8e:e4:0d:fa:
d7:6f:51:90:73:02:07:26:60:07:6a:c6:06:91:25:
bb:ac:be:86:da:ad:8a:fb:a9:bd:09:94:1d:56:0e:
3e:2a:5f:f6:3c:db:f9:b7:aa:1b:3f:78:2d:21:0c:
95:68:df:68:61:f3:6b:92:87:c3:cf:10:76:02:03:
8e:5c:15:40:75:ed:85:be:75:75:8a:eb:37:5d:eb:
6c:97:bc:d6:45:8c:b2:57:45:07:7d:ee:10:69:f4:
93:f0:20:7e:0c:78:0d:b9:6e:26:35:d4:df:0b:b8:
be:94:83:2f:db:76:72:fa:9c:1d:af:e7:0b:07:b1:
b3:9f:a3:87:c1:2c:88:95:64:2f:c8:e9:e8:e3:e6:
07:b0:19:4b:a5:10:56:32:72:9f:55:9d:fd:1a:f8:
fa:eb:ae:65:14:2c:ea:8c:e8:1b:a1:f9:f8:79:ef:
bc:c9:f3:ac:2e:b4:91:55:1f:e0:c5:8a:cf:50:1d:
26:97:0d:b8:82:d4:66:32:40:fe:02:a9:38:d5:96:
b8:20:10:62:a9:67:26:e4:a2:24:29:ad:78:15:e5:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:D7:FC:8E:76:70:13:A5:A3:D0:28:50:CA:C9:1F:A5:21:54:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7050EA01CFA11F08EED2ADBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d4:5e:20:85:ac:78:98:0c:fe:76:1c:bc:e2:15:10:82:cb:
ff:04:88:35:04:d6:99:fc:12:a0:ea:43:15:1c:a9:44:01:e9:
ca:33:8b:71:a4:99:af:47:b3:ee:61:c9:2d:2e:aa:9b:e2:b1:
dc:b9:3a:aa:72:1a:26:02:07:23:93:ff:75:3b:41:47:6b:37:
0d:da:31:f3:d7:78:93:64:8d:e8:ee:a2:d3:81:89:e0:de:c7:
ac:1f:15:4b:0c:a8:e9:18:61:c1:3e:c8:fc:d3:b5:2e:ac:29:
1d:2f:f7:0a:ea:d2:fb:ed:56:bb:4b:8b:8d:c7:50:c2:74:6c:
1b:ce:83:25:e8:38:0c:98:df:33:64:6d:75:67:f3:37:b6:c8:
da:f5:4c:b5:07:eb:3c:14:b0:da:d2:14:f7:13:60:cb:68:d9:
d1:26:3c:6f:8e:a5:8c:e6:88:e5:ef:e0:f6:6e:6e:2d:0c:3c:
ca:96:32:36:a6:3f:3d:d7:c6:72:91:d9:94:e0:91:d9:5d:f8:
cf:c7:09:21:89:3d:cd:cd:0f:15:73:52:6f:61:a6:d0:3f:dd:
a1:8b:e4:79:d3:a8:6a:a9:25:cd:b0:89:71:db:6d:0b:38:03:
83:52:b7:fa:14:38:49:8a:d5:7a:c4:fd:b8:4d:5e:d9:8e:51:
00:07:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:58:06 2025 by rpki-client on console.sobornost.net