Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A156F50F5B711EF96BED365762E951A.roa
File: 0A156F50F5B711EF96BED365762E951A.roa (raw, json)
Hash identifier: 3Oku3DpyqEvPwkE4idE28I4v5sLZ8bOs88HW2dCb7G0=
Subject key identifier: AD:DA:AC:70:54:F9:D2:95:04:A2:32:D4:B8:B3:16:C5:62:29:32:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016A51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A156F50F5B711EF96BED365762E951A.roa
Signing time: Fri 28 Feb 2025 09:33:17 +0000
ROA not before: Fri 28 Feb 2025 09:33:13 +0000
ROA not after: Mon 31 Mar 2025 09:33:13 +0000
asID: 398823
IP address blocks: 154.209.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92753 (0x16a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 09:33:13 2025 GMT
Not After : Mar 31 09:33:13 2025 GMT
Subject: CN=67c182dd-1c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:bb:62:3c:0a:d3:82:48:d9:9e:69:86:7c:
11:ee:ad:6f:5e:0c:4a:f3:e5:cf:03:f6:23:9c:df:
27:9f:ad:a2:81:4f:26:70:f8:cf:41:60:95:63:33:
b0:22:ee:25:cc:bd:9a:12:e5:e5:5e:c0:cc:ce:e9:
08:25:ef:11:bb:40:29:41:89:14:78:5f:a9:94:48:
33:c4:8d:15:74:59:a6:da:ec:ae:e3:32:ea:54:79:
69:76:86:af:4b:26:fa:6c:d1:ed:5e:2c:14:07:39:
89:e9:0b:ed:30:8c:e8:a8:8b:20:79:bd:de:97:f7:
b3:af:a5:d2:54:c8:dc:a4:5c:c1:23:87:18:ab:8a:
2b:b9:af:db:4c:63:e3:54:5d:97:e1:84:b6:07:52:
57:3a:84:d4:b6:66:34:64:ff:28:2f:a4:14:32:0d:
d4:ce:ce:7a:41:53:71:1e:cd:76:d4:8e:fb:0d:2a:
3f:fb:ea:67:c4:a4:a8:02:b8:d9:69:4d:f5:cf:ae:
30:3d:2e:bf:9a:5d:af:ec:92:22:e6:c3:d8:6d:ea:
45:31:3f:fd:16:bd:9d:b9:a0:17:ba:1e:db:0a:e8:
0c:f3:5b:b7:f5:9f:98:a8:ee:71:02:55:b1:3f:bb:
ed:58:b4:9e:8d:03:ae:0a:e2:c2:e5:10:81:3f:62:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:AC:70:54:F9:D2:95:04:A2:32:D4:B8:B3:16:C5:62:29:32:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A156F50F5B711EF96BED365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:04:d1:60:14:34:8b:46:f2:81:e9:aa:80:87:bf:a9:48:06:
c2:62:95:5f:c4:dd:88:8d:9b:74:6f:5f:39:60:cb:db:64:6f:
6d:e5:e5:2c:2a:49:eb:5d:4f:3a:1c:88:f2:c1:34:7f:64:af:
7a:4d:87:dd:62:2b:ca:8a:9d:c8:1c:1f:3c:54:c1:15:0a:88:
21:ac:43:e2:38:0e:12:29:af:f2:5a:b2:4d:5e:b7:4f:e5:f4:
2d:98:9b:df:83:43:41:ed:a6:a1:5a:de:44:76:b2:6b:0a:f4:
b4:7c:c1:6d:39:62:3a:f0:dc:19:c9:1a:c7:5f:b8:58:a9:40:
b6:02:51:03:00:9b:03:dc:45:69:eb:dd:88:8f:82:00:9a:d6:
f8:b0:ea:11:dd:2d:92:41:1d:de:75:8d:d1:c3:54:af:7a:ea:
0d:13:c2:4a:a4:66:ab:3e:92:be:a9:70:22:2d:63:4b:b5:a1:
ef:4c:03:a0:16:5c:56:06:64:7f:94:42:13:db:48:9e:4b:9f:
6c:3d:e4:6f:81:b5:da:cb:e7:27:4e:11:51:4d:0c:cf:84:b9:
a3:fe:4d:19:04:19:25:87:e2:60:43:47:65:3e:52:ff:31:0f:
57:53:42:24:53:33:8a:f4:83:a3:6b:e4:7f:32:18:9b:b0:b3:
9f:f6:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:06:46 2025 by rpki-client