Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A470858F33211EF929E0191762E951A.roa
File: 0A470858F33211EF929E0191762E951A.roa (raw, json)
Hash identifier: TCF1h3fELHRm9vCXoFCCIjGcdSKbiywE8Y6uq1m4/3o=
Subject key identifier: D4:86:45:58:89:4A:21:D1:9E:E4:8F:7A:48:AA:55:B2:EA:F8:32:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A470858F33211EF929E0191762E951A.roa
Signing time: Tue 25 Feb 2025 04:36:12 +0000
ROA not before: Tue 25 Feb 2025 04:36:08 +0000
ROA not after: Wed 26 Mar 2025 04:36:08 +0000
asID: 5065
IP address blocks: 154.94.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89385 (0x15d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:36:08 2025 GMT
Not After : Mar 26 04:36:08 2025 GMT
Subject: CN=67bd48bc-2165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:ef:48:de:d5:46:f8:f7:b3:2c:0d:35:34:
29:54:93:20:cc:ac:e2:30:b6:ea:ab:9d:6d:79:4b:
5b:18:76:6f:21:09:b2:ac:a5:cb:16:51:ed:16:d0:
3d:ad:f0:9d:64:95:94:ec:c4:50:9a:d8:0f:b5:ba:
7e:97:9d:7b:e3:e1:59:18:00:7d:66:cf:a1:20:06:
6f:f4:70:dc:c7:c3:6a:2f:67:5c:47:d1:13:d7:fd:
45:68:db:56:ff:d5:33:92:75:a6:ca:58:b6:ee:87:
c0:30:6f:21:06:a3:74:11:5f:2f:19:24:b9:48:00:
12:76:27:54:2a:3a:0f:b2:4c:61:d7:69:03:8e:bf:
ed:81:f4:73:08:1f:cc:3f:24:08:66:c7:f9:e5:a0:
12:59:22:da:f6:12:80:d4:19:b6:49:9a:5b:79:ac:
4a:9d:c1:48:36:6c:ed:d0:6c:2a:14:b9:81:ea:cb:
1e:0a:70:e2:22:a6:fb:8d:88:80:f2:0c:4b:ee:37:
47:e0:6e:02:cc:77:3e:08:d3:2d:d4:df:60:02:94:
63:dd:43:11:d9:69:2e:c8:ba:a0:7e:4d:5c:b3:17:
db:81:be:e8:a6:49:25:9a:f3:03:26:6d:ff:5e:58:
ec:f5:7e:67:4a:ad:03:19:0a:43:03:2d:31:02:37:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:45:58:89:4A:21:D1:9E:E4:8F:7A:48:AA:55:B2:EA:F8:32:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A470858F33211EF929E0191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:12:b2:09:15:a9:18:71:55:f2:5b:15:46:97:fc:86:d0:
f7:de:07:7d:c9:b7:60:a5:5e:bc:a1:29:8b:3b:86:92:58:ef:
34:8a:d5:ae:c0:48:3c:62:54:62:8d:4b:11:f5:bc:c5:5d:de:
cf:56:eb:41:10:c0:0d:2f:f1:cf:94:a5:51:62:1f:52:ec:af:
df:f2:80:38:60:49:4a:dd:c0:96:a9:6d:17:8f:88:6a:f0:20:
47:03:00:a0:5c:a7:bb:f6:21:e5:41:6c:76:b9:78:3a:f6:ac:
f8:15:c4:fc:e5:9a:66:08:1e:a3:44:03:95:40:52:0b:cd:9b:
35:50:3f:10:7f:8a:63:0c:af:cd:bc:d0:26:5d:67:ce:6b:7f:
87:ca:5d:b0:11:0b:58:56:4c:91:5d:40:a2:77:2e:0e:83:14:
c3:b7:e1:6d:39:9f:c6:75:37:da:25:ac:a2:b5:3c:e8:18:28:
c2:65:78:d2:00:7f:a0:26:f5:9e:2d:a0:e8:be:e1:b9:e1:ab:
3f:1c:42:ce:bd:5c:d7:18:23:ad:47:d8:d5:a1:a9:b2:01:f6:
47:be:96:06:54:3f:8a:6c:0f:69:86:44:39:5b:25:8b:53:9e:
46:19:56:ca:fa:9a:6f:cd:84:a5:7c:c1:0b:e5:ff:98:3c:7a:
1c:aa:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:06:45 2025 by rpki-client