Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0553A6FCF33311EFA5398499762E951A.roa
File: 0553A6FCF33311EFA5398499762E951A.roa (raw, json)
Hash identifier: PqHQfFmP3QiPzGy0Y5iIZTIdDEdRpYpI0OYdOX3sPys=
Subject key identifier: 5A:81:C8:88:3D:2D:ED:E0:F4:99:01:64:60:57:CC:B3:00:5F:B6:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0553A6FCF33311EFA5398499762E951A.roa
Signing time: Tue 25 Feb 2025 04:43:13 +0000
ROA not before: Tue 25 Feb 2025 04:43:09 +0000
ROA not after: Wed 26 Mar 2025 04:43:09 +0000
asID: 5065
IP address blocks: 154.94.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89397 (0x15d35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:43:09 2025 GMT
Not After : Mar 26 04:43:09 2025 GMT
Subject: CN=67bd4a61-eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:47:b9:4f:01:60:20:2c:26:b8:98:13:01:
b8:ee:ab:18:0b:eb:d3:12:70:b6:1a:cb:38:c5:bf:
de:f0:42:5e:ae:6f:a2:37:10:d8:df:17:6f:1a:90:
b5:36:42:f9:4b:64:bd:26:e5:1b:54:e0:8b:45:71:
fd:8c:58:62:d5:55:b9:66:8b:ab:42:6c:54:cc:73:
fd:3b:6a:29:49:d1:04:38:d0:8e:be:27:e3:57:12:
af:ff:77:36:7d:fe:1b:13:1e:df:69:ea:ba:7e:dc:
11:92:25:83:07:74:59:f4:8b:51:05:e1:ca:d9:d1:
dc:ab:22:56:53:0a:f3:ab:1e:93:b4:35:47:54:32:
6d:82:48:86:5d:29:b5:1e:79:1e:99:02:dd:4c:bf:
62:b5:72:17:e3:6d:09:0c:85:5b:3c:f5:b4:5e:77:
b9:75:2d:c7:77:b6:15:5f:23:3f:82:2d:64:93:63:
0f:de:82:63:d6:c4:bf:d0:c5:5a:49:47:ef:ef:46:
b7:b2:fb:94:24:52:d7:df:5d:36:2a:f4:e6:cf:04:
a5:1a:0c:79:95:10:d6:44:86:4a:6a:f0:84:4d:d7:
4e:5b:46:2e:73:e8:35:a1:8c:48:31:a9:0c:4c:72:
25:96:15:b2:83:60:17:4c:71:08:45:e3:0c:88:58:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:C8:88:3D:2D:ED:E0:F4:99:01:64:60:57:CC:B3:00:5F:B6:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0553A6FCF33311EFA5398499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.46.0/24
Signature Algorithm: sha256WithRSAEncryption
16:72:67:b6:72:91:50:a4:56:97:cc:d9:bb:46:0f:5d:ac:1b:
78:02:79:b9:00:88:14:e4:94:fd:3e:08:3c:a1:2c:80:a2:f3:
8f:cf:f3:35:85:a4:13:00:8f:50:f0:f9:12:57:58:60:6a:fd:
6d:e2:2b:18:a7:c5:5d:ce:77:df:c2:5b:ab:ce:4f:6b:0f:25:
a9:8c:7c:3d:31:5c:fa:c1:49:6a:e8:1c:77:7e:75:c2:36:1f:
08:4b:80:f8:cc:52:90:8f:73:1a:0f:fa:ad:f7:e4:44:19:9f:
e1:2c:d0:d0:8c:47:17:d1:80:a2:4d:39:85:fa:51:8f:f0:6d:
1d:a6:92:80:12:60:f8:ad:ab:cf:5c:95:26:e7:04:b1:16:dd:
6b:22:c1:a2:21:2d:e7:8c:6f:25:b4:dd:d2:f4:7a:36:51:95:
13:cd:9f:4f:eb:73:9f:42:a8:b3:13:95:fd:a1:5a:a7:ae:20:
46:67:37:7a:18:e6:0b:cf:cd:60:be:01:15:43:25:0d:8a:9c:
c2:a5:91:5b:d2:be:34:12:8d:49:56:82:e9:13:25:8c:11:f0:
e4:b4:7b:47:a3:6b:c5:1b:86:2d:da:c2:e7:4b:20:29:29:b3:
3c:6a:d4:e5:ec:3b:98:cb:e7:d7:a1:ff:17:46:6b:b2:3a:17:
fa:32:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:18:28 2025 by rpki-client