Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CF2726F50C11EF97AFE54E762E951A.roa
File: 09CF2726F50C11EF97AFE54E762E951A.roa (raw, json)
Hash identifier: zGxfNx1CueM/aJF6sjD23jI0w0pzeBAED6wG6v9Zqgk=
Subject key identifier: 5A:3F:F7:19:2B:0B:AA:38:AD:6D:FD:D8:0B:C6:47:0A:38:76:86:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01686B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CF2726F50C11EF97AFE54E762E951A.roa
Signing time: Thu 27 Feb 2025 13:09:12 +0000
ROA not before: Thu 27 Feb 2025 13:09:09 +0000
ROA not after: Wed 26 Mar 2025 13:09:09 +0000
asID: 62240
IP address blocks: 154.196.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92267 (0x1686b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 13:09:09 2025 GMT
Not After : Mar 26 13:09:09 2025 GMT
Subject: CN=67c063f8-edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:6b:38:4d:84:32:26:68:cf:3c:c9:87:d0:
81:81:1c:71:23:c3:11:73:8c:71:f6:04:85:14:c2:
46:1f:06:b9:d2:65:23:38:f4:0c:51:b4:e8:75:99:
32:17:6a:c3:82:4f:67:5a:a5:e5:04:ec:e3:95:7f:
54:0e:d3:50:a1:8e:1f:85:4f:5b:ba:8c:23:49:b3:
fc:63:9c:23:2a:fd:80:71:a3:ef:75:d0:ce:ce:b7:
79:74:fb:12:75:82:2d:5f:b8:01:8d:3b:f5:61:c8:
e9:47:40:a4:d0:56:ae:64:f1:3a:c5:3f:10:c2:d0:
ac:92:de:35:53:1e:21:87:d7:18:b9:17:10:f4:1c:
7a:fe:09:5c:7d:02:a6:f6:0f:c5:b6:65:87:60:f9:
7c:17:f4:74:79:2a:b9:a5:1c:16:d9:ad:b5:28:3f:
20:43:88:c7:60:79:bb:f6:ab:f3:c7:1d:0b:90:eb:
c5:99:63:46:ce:52:91:fe:12:41:f2:0d:e4:47:75:
08:2a:70:8f:0e:fc:d5:65:7e:12:10:fb:22:5f:07:
54:31:a0:54:2e:e7:c9:9e:7d:d6:d1:3f:17:e3:11:
a5:99:42:05:64:77:2d:4d:e5:2a:bc:46:f1:2f:24:
43:58:4f:3c:0e:14:8c:8b:ea:66:7b:0d:ef:8d:e9:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:F7:19:2B:0B:AA:38:AD:6D:FD:D8:0B:C6:47:0A:38:76:86:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CF2726F50C11EF97AFE54E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.49.0/24
Signature Algorithm: sha256WithRSAEncryption
01:51:dc:ad:53:c8:2e:3b:14:23:b2:b0:ea:dc:17:50:15:1e:
a7:46:89:91:e6:aa:70:f0:69:ad:eb:dc:46:62:41:18:d7:9c:
d8:3e:e5:41:07:e8:97:9a:c0:d2:49:a4:ce:42:07:f6:17:7e:
52:c1:f0:a2:ff:3b:b4:6c:98:db:9b:bb:d7:7e:51:2b:c9:c0:
50:32:ae:07:4e:12:70:86:6b:03:ad:cf:53:6b:52:c3:97:b3:
dc:e9:ec:e5:de:14:cf:e2:b9:cb:5c:74:eb:e8:d9:b3:b1:86:
65:6e:ae:b3:8b:34:0c:c4:ce:c2:83:47:f8:c7:a7:2e:d5:cd:
f7:91:05:68:25:0d:b6:04:b1:fd:aa:85:17:f5:15:35:8c:e3:
f1:3d:8b:e6:1c:29:b7:19:35:d1:79:6a:2f:07:22:c7:67:60:
48:69:df:71:a4:70:82:4a:ac:0c:4a:a6:fd:bc:02:bf:69:b0:
7c:35:29:ce:04:c5:81:b3:10:9c:18:76:35:20:bf:fb:e3:e3:
d6:7e:29:40:a1:4f:f9:32:dc:de:9f:7b:2c:f3:e2:8d:10:fb:
e8:ef:94:a9:ee:b6:7e:aa:10:17:d6:3b:30:4c:3a:6c:0a:ba:
9f:be:1b:f9:cb:c8:f5:7a:fd:4d:ee:6c:18:e0:16:12:58:c1:
77:3b:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:25:04 2025 by rpki-client