Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07A88116F6B711EFA23322B8762E951A.roa
File: 07A88116F6B711EFA23322B8762E951A.roa (raw, json)
Hash identifier: lBRHb5CYRXbcquBT7sB7pdXPKSPrz9D1HQTxfGC6fcE=
Subject key identifier: B3:A5:16:A8:AD:3F:6A:1A:EE:41:2F:14:8B:FE:E7:BF:F3:C8:00:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016ED3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07A88116F6B711EFA23322B8762E951A.roa
Signing time: Sat 01 Mar 2025 16:05:44 +0000
ROA not before: Sat 01 Mar 2025 16:05:40 +0000
ROA not after: Mon 31 Mar 2025 16:05:40 +0000
asID: 202656
IP address blocks: 154.219.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93907 (0x16ed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:05:40 2025 GMT
Not After : Mar 31 16:05:40 2025 GMT
Subject: CN=67c33058-e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:51:e6:fb:fa:1e:0b:b4:ae:d0:0a:d9:70:
8a:15:e2:70:94:fc:b3:1c:51:10:8b:7e:47:6a:66:
aa:5f:d9:dc:21:f1:d8:51:14:a6:35:72:46:21:85:
a6:7a:5f:99:f3:d8:21:57:8c:32:b3:ae:ce:67:cb:
e1:31:99:db:89:4b:e6:95:97:8d:89:a6:ea:a0:51:
59:76:8d:9b:5b:33:95:59:5b:b2:79:1b:df:be:5c:
b6:67:f6:57:7f:02:07:f3:ae:ae:ed:58:bc:4d:2a:
b2:dd:b7:8b:dc:43:6d:6f:a6:79:54:62:35:a1:16:
08:e2:b8:83:08:44:e3:76:4a:06:dc:19:ff:43:e6:
1e:e8:b0:f6:34:05:ef:30:54:be:81:8c:a1:a7:db:
13:6f:ba:fe:1e:b0:c1:c8:72:b6:3d:53:e5:e2:c2:
6b:0f:ba:3f:1b:e3:7c:30:3f:22:2a:42:a5:59:01:
df:04:08:68:dd:f7:f4:ff:df:09:06:83:b1:b9:44:
04:20:c1:46:5a:06:43:8f:0e:1c:62:8e:bb:31:30:
48:7c:09:e7:54:a5:6c:ae:81:db:bc:b4:3a:58:10:
ee:71:8e:08:94:0e:f4:d2:00:23:06:88:71:7d:58:
42:86:8c:6c:97:a4:4f:cf:ef:9c:31:8e:1d:9b:71:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:16:A8:AD:3F:6A:1A:EE:41:2F:14:8B:FE:E7:BF:F3:C8:00:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07A88116F6B711EFA23322B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.217.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a1:a3:df:7d:85:86:e2:aa:11:62:08:9b:05:e8:24:a3:d2:
9d:8b:a0:6d:23:c0:83:01:3c:1c:5e:c1:28:dd:30:39:8f:ce:
bd:53:eb:74:2a:d3:6c:4b:bf:7e:85:b2:d8:86:9b:3e:e5:45:
f6:94:72:4e:18:c0:85:8f:95:03:78:2c:d9:28:89:4f:8c:94:
0e:8d:50:6c:ea:7a:7e:91:e5:0e:8c:ad:57:0d:5e:79:9d:7a:
d3:56:0a:ec:4d:2c:39:88:40:5f:35:23:18:f6:57:63:aa:4b:
6e:07:14:42:4d:7f:f3:0b:60:e1:90:1c:49:2d:4b:69:31:ee:
5e:66:f8:eb:c9:01:27:03:bc:d6:fa:a0:ad:ed:37:73:59:5d:
c3:82:00:9d:32:0d:a3:16:af:f8:72:bb:87:4e:ba:76:d6:7b:
d1:22:55:49:fd:e2:92:32:90:dc:ba:f5:a5:99:5a:ea:66:a4:
3f:9f:32:41:6d:f8:ab:48:14:9d:95:5b:06:1a:f1:48:0c:ed:
d2:d4:a1:7d:5e:12:87:54:29:bb:5c:47:a1:da:e6:a6:a4:23:
c4:b5:29:9e:78:35:99:51:53:43:cd:4c:87:1c:8b:b1:45:a3:
aa:bd:94:ad:e9:f3:0b:54:e5:30:9f:a9:5c:62:78:39:de:ec:
60:59:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:41:14 2025 by rpki-client