Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123008C2F1D811EF8A79A577762E951A.roa
File: 123008C2F1D811EF8A79A577762E951A.roa (raw, json)
Hash identifier: xdPkTYZMtuvcGW8xHWbAGCPbSTv77/QGEFoch747c1Q=
Subject key identifier: E9:B9:F0:7F:5D:19:FE:BC:A0:39:98:8C:2B:97:29:F2:13:3D:9D:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123008C2F1D811EF8A79A577762E951A.roa
Signing time: Sun 23 Feb 2025 11:19:39 +0000
ROA not before: Sun 23 Feb 2025 11:19:16 +0000
ROA not after: Wed 26 Mar 2025 11:19:16 +0000
asID: 395886
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88915 (0x15b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 11:19:16 2025 GMT
Not After : Mar 26 11:19:16 2025 GMT
Subject: CN=67bb044b-0be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:85:2c:ca:ae:61:ff:0e:38:91:ee:fd:42:
41:bc:9e:98:1c:05:d0:32:00:fb:ba:3c:71:33:cd:
38:64:e2:c0:96:f9:74:96:88:48:73:d2:ae:47:b8:
3d:8f:53:5e:1a:13:ba:75:d5:e4:ae:15:ee:88:29:
03:a9:40:88:db:f5:a0:b7:c0:5e:86:67:d1:28:1b:
28:fc:fa:50:4b:55:75:2e:c6:0f:f2:e6:18:2d:af:
3f:b9:27:7f:63:d6:9b:14:1e:83:8f:d0:49:53:d1:
93:84:92:de:18:ef:ab:c4:9c:8f:b1:82:f2:9d:be:
61:6a:51:fc:81:15:6b:21:9f:bf:b3:a9:40:7a:2b:
a2:a8:68:6d:9b:2b:9c:c2:8e:f5:cc:d9:22:e5:ea:
26:58:8a:f9:c1:f9:e7:30:20:c7:91:bc:99:d8:86:
4f:4d:c1:90:89:4c:9a:57:df:ad:cc:c2:67:1b:71:
2e:99:d4:c0:64:ac:c4:bd:7d:f3:9d:e2:05:5b:a6:
23:56:68:52:4b:dd:3f:c2:32:2b:c9:41:68:ad:76:
1d:61:f7:75:67:5d:d6:43:11:21:48:e7:5d:d0:b3:
67:2e:71:0f:e0:0b:21:f1:7a:d2:46:00:21:45:13:
0c:b3:f5:ee:7e:65:36:11:8f:14:ce:26:51:1f:88:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:F0:7F:5D:19:FE:BC:A0:39:98:8C:2B:97:29:F2:13:3D:9D:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123008C2F1D811EF8A79A577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:8d:d2:97:ba:b1:33:6b:f6:ff:01:31:81:a8:47:2a:a0:f9:
62:7f:fa:28:c0:a6:ed:83:21:35:74:a6:4e:86:67:40:3e:d8:
36:83:4e:53:b2:52:a9:49:4d:81:4c:07:cd:3e:b7:df:ae:60:
bd:60:59:ab:cc:56:51:4b:7f:f9:e6:fd:dd:fd:aa:dc:8d:6e:
2a:cb:82:a8:9d:96:9e:47:d2:a2:6b:22:23:c0:d0:ea:ad:a5:
da:6d:3e:9d:8a:d5:af:15:f3:01:9a:1f:e4:07:7c:72:d0:b2:
0f:6c:38:3e:2c:d0:3c:e5:a3:ee:03:e5:7a:fd:85:ed:e8:bb:
9e:42:e6:7e:03:98:79:38:8c:3a:b1:60:6b:5e:36:9f:c7:0b:
9f:e0:8b:8d:f6:7c:10:ad:bf:2e:fb:63:2b:79:7e:2f:ba:29:
a7:73:2f:33:b1:1c:83:f4:9e:8f:fa:05:24:5e:f7:21:83:63:
e8:72:b2:ed:63:4b:b6:d5:da:b7:5f:e8:fc:ba:bb:9a:c4:0e:
97:f9:47:ea:2e:02:c8:c9:01:9c:e6:9e:f4:ba:6b:b6:cb:9f:
5d:ec:1d:06:fd:37:59:41:26:87:e8:50:c8:35:dd:45:1e:05:
fb:94:b1:fa:86:8b:61:a8:91:95:6a:ec:25:88:d7:c0:be:36:
5f:ce:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:41:30 2025 by rpki-client