Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0499B6CAF67B11EF8F8BCFA2762E951A.roa
File: 0499B6CAF67B11EF8F8BCFA2762E951A.roa (raw, json)
Hash identifier: 0ltpUspQJblDSERO167lvjMlUsNWEqlHjvXgmkN/X3I=
Subject key identifier: 7D:58:71:1B:C1:26:41:C6:96:6A:C3:BD:6D:24:F5:74:DD:76:65:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0499B6CAF67B11EF8F8BCFA2762E951A.roa
Signing time: Sat 01 Mar 2025 08:56:09 +0000
ROA not before: Sat 01 Mar 2025 08:56:05 +0000
ROA not after: Sat 29 Mar 2025 08:56:05 +0000
asID: 174
IP address blocks: 154.88.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93559 (0x16d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 08:56:05 2025 GMT
Not After : Mar 29 08:56:05 2025 GMT
Subject: CN=67c2cba9-759e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:e3:d1:37:67:c4:81:22:84:6b:ac:98:97:
01:f0:4a:f0:4c:32:30:34:c8:b1:d7:be:fe:c6:54:
67:52:0c:fd:87:fb:1d:57:26:6d:a4:da:34:f0:b3:
e9:53:1d:4d:d6:d2:74:ad:66:74:e6:1b:5e:06:70:
4b:38:b9:c8:94:4f:99:25:2d:25:83:5a:3b:02:42:
ed:84:bf:f1:a3:ef:78:c3:7b:c3:77:f4:9d:c8:b5:
f4:2e:c4:4b:d9:81:86:85:84:89:ba:6b:0d:32:6f:
7b:a8:bd:9b:cf:1a:c8:6d:c1:ff:a4:36:09:9b:86:
88:3e:0c:33:03:51:44:99:60:8f:e4:40:0e:4e:ff:
89:18:57:67:f0:70:0e:24:ac:99:a0:8a:e5:10:61:
a6:a8:74:c4:b4:5c:46:2e:2a:49:04:99:1f:90:12:
6a:0d:4f:0a:05:19:f7:dd:27:e6:bf:9e:b3:75:16:
75:c8:9c:50:7f:89:c0:f5:d5:ab:f8:4d:8e:25:b2:
8b:2f:7b:cd:5a:99:a1:73:b6:78:a3:9b:fb:75:9a:
65:60:e7:f7:11:28:06:2b:b9:cd:ce:1b:2c:67:3c:
5f:7e:f9:19:72:23:45:f9:8c:b9:9e:96:af:18:14:
be:ff:63:a9:74:0c:c8:2f:42:e9:13:fc:0d:bf:e5:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:71:1B:C1:26:41:C6:96:6A:C3:BD:6D:24:F5:74:DD:76:65:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0499B6CAF67B11EF8F8BCFA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.33.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9a:60:a5:dd:da:6b:05:54:14:04:72:b6:22:b8:9d:a4:b3:
6b:32:ca:93:81:13:f7:ff:aa:c2:25:9b:a1:1c:03:d7:c8:95:
bb:78:59:da:99:d2:21:6f:c2:e3:7f:57:dc:b2:86:93:6a:50:
78:9c:1b:fd:55:6d:d3:3e:63:72:fe:13:f7:4e:32:ea:fa:da:
41:8f:84:6d:08:ca:65:30:b6:35:db:36:61:2b:87:29:4b:88:
01:56:9a:d0:c8:34:71:30:c5:94:ca:c7:40:1e:ba:13:fb:19:
3f:4a:e6:5f:90:5f:d6:a2:f5:5b:f3:6d:b8:90:eb:84:bb:c5:
d6:2b:82:76:02:94:49:ec:dc:20:d2:3b:4e:f0:1a:c9:54:e4:
6a:95:8f:5e:38:48:57:65:b4:76:4d:6b:41:2f:2b:f3:8b:d1:
3c:eb:4d:89:56:66:00:b5:60:37:cd:9d:2f:a5:59:ae:be:88:
90:32:9b:ae:54:5b:a8:75:3a:7f:09:f0:84:87:7a:59:ff:fb:
2a:6d:99:a3:53:28:89:85:ed:2c:db:2d:84:6f:86:73:9c:b0:
e8:9c:a9:6e:79:d9:41:1e:e4:f8:88:7c:cd:aa:8a:82:b6:57:
96:4d:4f:29:b8:13:f8:77:61:ee:33:de:5b:cb:20:53:d1:fd:
65:7d:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:25:07 2025 by rpki-client