Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050E4C2EF59F11EFA174A5BE762E951A.roa
File: 050E4C2EF59F11EFA174A5BE762E951A.roa (raw, json)
Hash identifier: 2MWrg4HNHCSuSi1PA94If2XvoNxE8/oIJohrj9Oc5qQ=
Subject key identifier: 23:0F:81:DF:F7:C2:C5:6D:C8:97:2F:E4:BA:15:47:91:C0:DB:38:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050E4C2EF59F11EFA174A5BE762E951A.roa
Signing time: Fri 28 Feb 2025 06:41:20 +0000
ROA not before: Fri 28 Feb 2025 06:41:13 +0000
ROA not after: Sat 29 Mar 2025 06:41:13 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92627 (0x169d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:41:13 2025 GMT
Not After : Mar 29 06:41:13 2025 GMT
Subject: CN=67c15a90-8624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:eb:18:a3:7b:0e:a1:c9:24:3e:e2:71:3c:
18:7d:68:0b:50:ba:0b:40:64:7b:a4:fe:a6:1f:bd:
d9:7a:d5:88:b3:d7:af:cc:fd:72:14:d3:41:fc:cf:
79:c5:d8:39:7b:ff:7f:db:b6:a7:89:dd:99:6c:bc:
e5:c2:f2:09:10:df:b7:33:39:05:05:44:20:59:54:
dc:c4:b6:7c:c5:47:33:18:08:c8:39:5f:7f:1c:a5:
da:bd:6a:ab:ef:3c:7f:22:99:13:a4:ae:e6:cb:63:
a7:dc:04:e5:15:fe:8d:95:9b:dd:81:60:3c:55:24:
98:75:a8:9a:be:8a:9c:58:39:b9:0e:4c:61:59:35:
75:5d:0e:89:0d:b9:8b:d7:bf:8f:64:b0:8f:a1:c0:
99:f2:00:1d:43:44:6d:76:bd:fa:3f:d9:7c:02:4e:
84:8f:55:55:f6:f6:38:30:de:75:50:dc:98:2f:a5:
3c:40:80:af:92:32:2e:d6:ff:56:3a:a7:a9:4b:cb:
98:b1:ee:13:04:34:b5:e0:ce:52:2e:7f:aa:2a:3d:
63:9f:f3:29:27:93:08:e2:2f:f5:c3:ec:65:e8:fd:
83:38:0b:c2:d4:26:3d:84:0f:a4:6c:4d:9c:bd:3e:
c4:60:a4:03:8e:09:85:6d:ee:86:5e:c8:9d:84:0b:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:81:DF:F7:C2:C5:6D:C8:97:2F:E4:BA:15:47:91:C0:DB:38:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050E4C2EF59F11EFA174A5BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
35:81:c3:96:af:40:f2:47:f7:12:f2:86:a9:36:9b:85:98:6f:
07:d0:b5:61:ee:11:71:ce:af:45:ff:05:e0:3a:f5:4d:a7:da:
a7:87:c8:fe:1f:f3:28:d4:83:83:cb:b9:b8:4f:61:6b:42:2e:
2c:b8:09:92:ea:a3:f7:ac:cb:e2:69:7a:28:5e:f7:0e:4d:0a:
37:13:01:47:1d:e5:63:85:80:9b:8d:c8:0e:69:66:22:9e:12:
5a:9d:b9:7e:b8:d6:f1:70:40:1e:f7:8d:21:df:03:35:2e:cb:
2c:6f:7a:12:1e:b3:6f:15:6b:06:a4:33:de:8c:42:ec:ec:ea:
f9:2e:89:5d:d7:b5:e3:8d:e4:98:d1:1f:f0:61:da:67:c9:e4:
30:ef:92:24:ed:63:bc:c2:17:25:3c:fe:9e:d9:3a:ee:70:85:
90:13:d1:b4:ac:40:76:df:23:94:82:8e:0a:0d:97:92:0e:78:
5e:79:0f:99:3b:c6:03:96:74:1d:5f:a0:4c:86:11:8c:4a:fd:
93:29:71:a9:99:aa:b5:b9:80:99:93:c6:c8:a3:02:ea:9d:90:
17:5a:bd:11:db:26:ae:82:6b:76:9e:3a:44:51:2d:85:06:db:
77:e1:63:fb:5f:8e:2e:d1:c0:4a:ec:20:f8:93:2d:b4:af:c0:
ec:6f:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:30 2025 by rpki-client