Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B1D6C0F5BA11EFA0416578762E951A.roa
File: 01B1D6C0F5BA11EFA0416578762E951A.roa (raw, json)
Hash identifier: FSjLFoPzmDBSn9+JVBiv+ah/JBPhTLQqmzg86WPXKv4=
Subject key identifier: 4C:06:55:D4:C6:F3:6B:C1:50:20:A2:52:BA:6F:0A:C3:A9:D2:89:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B1D6C0F5BA11EFA0416578762E951A.roa
Signing time: Fri 28 Feb 2025 09:54:31 +0000
ROA not before: Fri 28 Feb 2025 09:54:28 +0000
ROA not after: Mon 31 Mar 2025 09:54:28 +0000
asID: 54600
IP address blocks: 154.219.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92778 (0x16a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:54:28 2025 GMT
Not After : Mar 31 09:54:28 2025 GMT
Subject: CN=67c187d7-4cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:93:cc:da:be:ab:7d:96:10:f4:2a:63:c4:
42:a8:d5:68:0d:d6:fa:78:92:d4:89:6f:ea:83:c6:
44:bc:8c:35:59:2f:7d:7c:a9:40:16:ec:f9:87:74:
52:e1:12:ba:9d:e8:ad:7c:b2:52:73:22:f2:29:ba:
c9:dd:28:a3:b4:eb:dc:98:93:a4:f6:25:41:c8:7c:
5b:44:11:e2:bd:a2:f6:c3:9f:ea:21:a3:a7:ad:27:
db:1c:7e:cd:0e:79:64:a0:71:73:86:fe:a3:34:55:
64:f7:7e:c9:86:6b:55:ec:9a:ab:c7:67:78:fd:49:
69:0f:49:bb:13:32:22:70:b8:43:c1:5e:a9:2b:98:
eb:b7:43:2f:95:40:dd:87:5d:9c:1a:98:7c:43:aa:
6e:20:19:6b:fc:f9:5c:b3:ae:d5:b7:31:1e:d5:48:
24:e4:4d:7b:e1:6d:6c:7d:dd:ec:b1:71:6e:ee:ac:
c9:a7:2b:c7:e1:85:68:c9:c0:c6:8a:96:dc:d1:9d:
19:e8:0b:09:ff:6d:d3:5a:60:b9:28:ed:29:3f:a0:
f1:c6:9d:e8:e4:1e:ac:76:a7:ac:13:6e:73:f6:a0:
e7:e6:b2:4c:34:71:ae:ea:05:f5:22:32:b3:0d:24:
0e:28:89:fa:1b:7d:df:72:14:f7:e3:de:cb:f6:0f:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:55:D4:C6:F3:6B:C1:50:20:A2:52:BA:6F:0A:C3:A9:D2:89:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B1D6C0F5BA11EFA0416578762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:b6:af:fa:0f:65:37:a1:75:63:df:08:7e:87:64:aa:d6:a3:
dd:dd:c9:49:41:72:30:80:c5:75:d8:ea:09:11:d1:95:86:ea:
a0:77:54:36:b2:7b:4f:d9:30:5f:57:46:ab:32:ee:f5:84:28:
54:01:f4:92:be:fe:fc:97:2e:8f:59:15:b6:ef:9e:bc:98:c8:
77:2e:cc:80:3b:03:d5:af:84:f0:e2:28:76:37:1b:ae:eb:43:
23:97:97:3d:3c:5b:06:b6:6a:0c:64:c1:e3:6f:ec:c1:db:d7:
92:02:ce:db:c0:72:a3:44:f5:c6:c4:f5:0b:58:2a:7e:e9:7f:
8b:60:4b:9e:56:bf:d8:0d:80:4e:0e:6e:b2:b8:bc:24:10:54:
ce:c0:34:97:a5:9a:10:7a:bf:b4:46:3c:1f:fa:3c:32:3a:af:
96:b3:a2:b5:eb:d6:9c:40:1f:b4:75:ed:5c:a5:a5:8e:fd:ee:
3b:76:3f:4d:ec:1b:14:9f:77:92:89:83:13:2d:4e:ed:0c:47:
a9:14:78:0e:d2:3a:13:cb:8c:ac:ae:d8:5b:7b:f2:6e:50:2b:
32:88:37:22:ea:54:e6:cb:3c:79:49:ca:36:08:36:4c:4b:40:
82:4f:25:3e:3b:90:2a:6c:be:f6:c5:0c:22:87:b5:7b:f1:ae:
34:ce:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:15:08 2025 by rpki-client