Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2C112F82911EFB0255A8A762E951A.roa
File: 08A2C112F82911EFB0255A8A762E951A.roa (raw, json)
Hash identifier: 0EXTGV3I8pbPklI1R5xPIR6GqUG11xTJgv+y8ae03jU=
Subject key identifier: 8F:28:05:44:8E:08:7B:6D:1D:E5:AA:E2:F5:90:BD:10:89:2F:24:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2C112F82911EFB0255A8A762E951A.roa
Signing time: Mon 03 Mar 2025 12:14:19 +0000
ROA not before: Mon 03 Mar 2025 12:14:15 +0000
ROA not after: Wed 26 Mar 2025 12:14:15 +0000
asID: 62240
IP address blocks: 154.195.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94337 (0x17081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:14:15 2025 GMT
Not After : Mar 26 12:14:15 2025 GMT
Subject: CN=67c59d1b-c881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:85:27:df:90:77:77:3e:a3:05:09:72:57:
f7:36:05:91:f1:40:e7:f4:bc:db:9f:d0:8f:f2:c9:
78:76:7c:15:3c:3c:db:b8:73:bf:f3:e7:35:ea:cf:
0b:02:61:94:5d:39:9f:b8:4b:ba:a6:f0:1a:09:01:
1b:7d:72:c3:aa:0d:5b:a2:72:d0:56:ea:3f:b2:bc:
07:64:22:43:4c:a9:16:74:b3:49:f8:e5:1d:b2:d7:
bb:73:e8:44:f6:f7:9d:dc:36:4a:07:5b:3b:c8:75:
cc:5b:3e:81:e4:0d:42:aa:aa:e7:a8:36:1b:3a:8f:
d1:79:03:99:90:76:fa:a9:86:50:1d:ba:e0:25:e4:
56:a0:b3:16:58:5e:2a:3e:e5:d4:e9:47:2f:dc:7c:
9d:41:d3:f7:fc:6c:36:cd:b0:72:71:36:0e:ad:8a:
65:0d:f5:eb:6f:9a:7f:40:f2:e1:d8:53:f8:07:4f:
95:bf:c8:e1:65:dd:7d:ff:de:ff:ac:93:1f:45:82:
de:c4:50:55:9e:54:87:57:35:a7:e6:a8:55:3b:59:
49:4e:2e:a3:91:b8:96:34:7a:29:2b:39:38:0c:0f:
ce:56:bc:4c:25:f4:e2:86:dd:b1:ef:b7:f9:62:f1:
90:2e:8c:88:96:ac:01:0d:87:9b:30:dc:24:cc:ca:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:05:44:8E:08:7B:6D:1D:E5:AA:E2:F5:90:BD:10:89:2F:24:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2C112F82911EFB0255A8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.140.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9f:c7:64:74:28:8c:22:95:f0:db:5f:9f:e5:ea:dd:49:10:
16:a4:f8:85:a8:ab:f9:30:66:ea:de:90:f2:e8:14:da:fd:92:
56:f4:10:07:a3:e1:7d:eb:f1:f8:de:7e:7a:a1:bb:c6:a4:68:
32:b5:a2:63:18:20:ad:63:aa:16:2d:dd:a3:7b:a8:39:01:03:
d8:4a:31:a8:40:28:d1:be:09:45:f9:0d:4c:62:ef:7f:2f:ba:
bb:ac:a2:fd:39:ea:9a:21:d6:88:e5:b0:69:74:fc:b5:f2:d2:
92:8f:79:14:49:37:a2:8d:7f:a7:5e:d6:6f:ff:b9:4b:6c:1f:
38:dc:ce:0e:d4:9c:96:28:99:9d:fd:8d:bd:b3:7d:04:d1:6c:
95:58:b5:62:15:19:72:bf:e2:57:4f:c7:4c:8a:b0:43:6d:c7:
b9:79:45:cd:14:65:05:f7:64:c3:ca:a1:ff:ed:92:91:f5:ab:
88:49:9e:91:04:df:d3:4f:0d:2e:3c:0b:0b:ad:8b:66:a8:05:
5a:60:52:d8:10:e9:48:dd:c6:14:6a:64:8e:68:34:09:eb:91:
9f:92:7a:84:dc:14:18:96:fa:a4:a4:10:eb:2a:e3:7c:26:e5:
bd:08:b3:8e:2c:d5:b0:4f:32:bb:c0:62:20:1b:f9:79:78:da:
1b:3c:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:28:19 2025 by rpki-client