Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028ECBB8F4D711EFA8C0E664762E951A.roa
File: 028ECBB8F4D711EFA8C0E664762E951A.roa (raw, json)
Hash identifier: jfypd+rurKvOzuWWSRZglSHnfokDYkZOZu2YVXD3ktE=
Subject key identifier: 43:C0:33:9E:31:4B:B5:D5:0C:6A:22:13:70:77:D8:A1:D2:0A:4D:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01667D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028ECBB8F4D711EFA8C0E664762E951A.roa
Signing time: Thu 27 Feb 2025 06:49:37 +0000
ROA not before: Thu 27 Feb 2025 06:49:33 +0000
ROA not after: Wed 26 Mar 2025 06:49:33 +0000
asID: 62240
IP address blocks: 154.195.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91773 (0x1667d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:49:33 2025 GMT
Not After : Mar 26 06:49:33 2025 GMT
Subject: CN=67c00b01-e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:99:bf:e9:dd:47:10:12:41:23:0b:ff:ab:
95:5b:51:38:a3:cc:73:1b:d2:f9:30:d6:54:cd:33:
b9:19:8b:f7:59:df:2d:89:1f:a8:86:42:e1:7c:39:
e7:09:b1:ab:03:59:67:21:42:05:7d:7f:53:f9:e5:
cf:e2:fb:5f:6c:6c:49:3d:a8:2d:fe:ea:6b:fe:0e:
6f:ed:fe:53:21:14:b1:a8:fe:82:2b:d9:34:fd:1b:
ec:e5:7e:04:3e:17:b8:99:c5:03:df:29:7e:e9:d5:
da:a6:02:a2:a3:e7:44:1d:39:a9:76:54:51:be:c5:
9f:0d:07:85:2e:c7:ea:3a:1c:a8:c0:55:96:6f:c3:
ae:b9:c7:a9:9e:15:61:44:ba:0c:a1:58:b6:6a:ad:
a9:fd:f2:8d:68:03:5f:98:85:a1:98:16:cd:13:36:
c6:b3:1c:d6:40:bf:1a:e8:e2:c5:94:d5:4b:5a:8d:
54:b9:7b:6d:76:ce:c9:a6:85:52:a0:57:99:4b:fc:
a4:cf:51:46:ab:4b:aa:b1:46:fc:9a:f2:d2:9e:b0:
c7:e6:93:ca:9f:fc:71:49:08:8a:50:8b:0a:d4:90:
4d:11:10:72:4d:c2:c6:0e:f0:b8:c9:66:cb:b0:f3:
3e:51:0b:c5:f6:36:8b:f1:d7:97:50:e0:00:46:ed:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:33:9E:31:4B:B5:D5:0C:6A:22:13:70:77:D8:A1:D2:0A:4D:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028ECBB8F4D711EFA8C0E664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.154.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c6:7b:27:0c:bd:2f:85:8f:43:9c:6d:6c:f8:2c:52:1b:ce:
5b:15:80:2a:85:f4:69:6b:c2:77:89:da:e0:97:80:6c:83:b1:
05:6f:bb:7a:11:2d:ff:8f:02:5f:76:ad:f1:77:42:0c:81:1f:
78:b3:cf:72:8b:e0:17:a5:30:cd:d2:58:3b:a4:0c:c0:f0:c6:
e1:02:ee:b5:d0:c2:a0:78:d3:5e:1c:e5:ee:a6:b2:b6:a5:66:
17:08:21:44:ab:43:32:58:1e:76:59:40:5e:37:51:35:f9:ee:
99:52:ea:ed:37:54:57:34:66:11:a5:85:b0:55:96:ea:2d:19:
de:91:06:49:99:9d:30:fd:34:8c:e2:ff:72:da:3d:a1:d6:8f:
94:bb:7a:5c:16:b3:a7:a9:1b:8f:f9:df:f0:e3:f0:66:61:b6:
7f:c2:42:46:07:fa:4d:ad:fd:99:32:b5:74:0e:cf:cb:86:4a:
79:e7:d9:84:03:43:c6:e5:cf:17:e4:0c:e4:1d:f5:bf:00:6b:
29:08:38:80:b8:d4:3b:ba:ac:11:f1:fd:cc:f2:33:fa:3c:3f:
7e:ad:13:2a:fa:8f:e2:d8:2a:1a:68:29:b5:41:1f:dc:0c:de:
e6:47:b0:e7:e5:e9:d3:16:9b:3e:fb:fc:e8:82:09:9d:97:db:
d9:90:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:12:31 2025 by rpki-client