Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025ECD0070611F099D0ACA5762E951A.roa
File: 5025ECD0070611F099D0ACA5762E951A.roa (raw, json)
Hash identifier: blc4zJ7nF58NHbpPnJG/DZw8G/R28IDtQbHYe5X9iew=
Subject key identifier: A7:FC:61:22:41:CE:2F:D5:C3:14:D6:1A:C1:C4:30:7E:6D:07:86:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017588
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025ECD0070611F099D0ACA5762E951A.roa
Signing time: Sat 22 Mar 2025 10:13:34 +0000
ROA not before: Sat 22 Mar 2025 10:13:31 +0000
ROA not after: Sun 30 Mar 2025 10:13:31 +0000
asID: 142403
IP address blocks: 154.209.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95624 (0x17588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 10:13:31 2025 GMT
Not After : Mar 30 10:13:31 2025 GMT
Subject: CN=67de8d4e-960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:0e:b7:f8:d1:50:3c:aa:41:8c:a3:be:9d:
80:56:ec:58:0b:88:cd:09:d4:96:10:68:83:17:79:
4a:d5:b7:16:9d:cc:c3:23:33:fd:cd:1c:0f:c2:63:
9e:0b:1b:dd:46:19:66:85:a4:b7:4f:ca:84:bf:bd:
32:aa:04:8b:b1:fb:41:37:e1:68:9a:65:bd:2c:1f:
66:0b:18:27:31:21:d4:34:e9:5c:12:d6:5b:ad:67:
0f:11:85:d9:59:52:95:b9:ee:bb:6e:34:11:fd:2f:
2d:bb:3f:32:8f:ea:e1:3d:a1:7a:de:e5:47:38:62:
fa:fb:22:8c:0e:d1:3a:c7:84:99:ee:47:85:f8:0a:
7d:c7:fe:54:2f:59:f2:65:86:1d:e8:3a:90:5d:b4:
a1:a0:5c:5a:e3:2a:1f:85:ce:a1:e2:56:40:18:b1:
ce:f1:44:01:bf:a6:40:b3:4b:d3:78:99:fb:d8:e6:
4a:ed:d1:2f:5d:9d:06:17:86:0c:27:63:94:3b:81:
ac:dc:49:a3:df:ca:b0:fc:09:44:87:37:2d:3a:b8:
81:ce:b3:65:51:62:98:eb:e8:87:34:d3:aa:12:e7:
df:78:d8:2a:11:77:ae:b9:f7:72:62:53:f4:9f:89:
c9:7a:fa:85:0f:03:38:26:56:0a:a1:59:c4:cb:1b:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:61:22:41:CE:2F:D5:C3:14:D6:1A:C1:C4:30:7E:6D:07:86:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025ECD0070611F099D0ACA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.5.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5e:69:6e:c9:03:b2:9e:4e:6a:bf:2c:0f:e7:72:ed:a2:49:
d9:0e:78:30:db:8b:83:7b:d2:10:11:fd:e4:a8:d1:d7:44:67:
8b:90:04:64:80:02:82:58:1a:5e:d3:ac:bd:63:93:9a:05:bd:
05:ad:72:09:cd:79:f9:4b:ef:97:c6:ac:80:29:71:51:08:3f:
c5:d0:47:51:ee:09:cb:2d:13:f6:3d:7e:55:d4:4e:fe:dd:fa:
f9:ff:e7:07:31:01:fe:db:6f:88:fb:5b:e1:0b:cb:f0:30:f2:
c4:50:7c:58:4d:32:28:ab:5b:18:40:d2:66:5b:05:0d:69:2e:
d7:c8:41:5f:0d:9e:8f:66:af:f3:7d:e0:06:bf:ee:52:ee:4d:
8d:4b:c0:04:2c:57:55:e4:2f:c2:38:ef:57:7d:64:62:b9:0d:
fa:25:fd:c2:0c:3b:71:90:c8:3f:c0:55:9f:15:b3:28:a9:80:
16:7a:05:9e:14:6a:83:f8:62:fa:bc:c0:3e:64:6a:1a:9b:5a:
63:90:a3:7c:85:a9:28:21:48:2f:9d:61:a5:b8:31:b4:91:3f:
a6:73:b1:15:c1:78:2b:bd:1e:37:49:33:bb:b5:d7:0c:b8:e6:
f1:40:86:72:c4:e7:20:37:ef:ec:f9:3e:fd:35:88:84:f7:c7:
39:dc:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:50 2025 by rpki-client