Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B5F468F5D111EFA6073695762E951A.roa
File: 16B5F468F5D111EFA6073695762E951A.roa (raw, json)
Hash identifier: 4UdceZY7SwdmSunlITN0sWNJufBO58AcE6JcpYAq8M4=
Subject key identifier: 0E:34:9F:44:36:99:39:91:02:1B:80:D6:5D:9A:10:8B:53:9A:16:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B5F468F5D111EFA6073695762E951A.roa
Signing time: Fri 28 Feb 2025 12:39:45 +0000
ROA not before: Fri 28 Feb 2025 12:39:41 +0000
ROA not after: Sun 30 Mar 2025 12:39:41 +0000
asID: 203020
IP address blocks: 154.200.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92976 (0x16b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:39:41 2025 GMT
Not After : Mar 30 12:39:41 2025 GMT
Subject: CN=67c1ae91-ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:48:d0:f6:01:52:db:dc:2e:8e:8d:2b:17:
ec:ba:7e:cc:bd:43:57:23:31:02:8e:6c:01:01:32:
81:3c:bd:0d:36:59:b4:22:00:e2:f7:d2:f6:b6:93:
aa:a9:07:58:90:f5:06:49:20:77:d1:aa:28:e7:88:
72:89:b3:36:d1:d0:64:e7:24:c3:0d:69:c1:4a:e2:
85:ff:2c:44:62:67:42:be:fe:d1:3e:75:79:7f:86:
e1:0a:ff:65:39:e0:85:e8:0a:08:8a:d8:b0:0a:59:
7c:ab:30:ee:34:b6:25:81:b3:2b:b7:48:fc:74:c5:
ae:b3:32:33:25:db:6a:db:2a:12:42:63:b8:62:9a:
bc:e4:9b:7b:7e:c8:ca:d9:78:60:2d:77:b0:c2:ff:
9e:f6:e8:1d:53:10:87:8b:ec:76:0f:79:16:0c:69:
03:5b:d3:7a:4f:f5:48:fa:83:f6:9b:7c:6d:e9:c2:
65:bf:ef:68:4d:9f:d8:43:0c:16:b9:33:e4:38:e6:
22:80:06:65:ed:4c:7d:fa:f4:ed:22:1d:ab:06:4c:
08:f0:70:3a:0f:06:10:6f:00:84:d3:aa:c4:9f:e9:
4f:e8:72:7d:96:57:54:95:0d:95:8a:2e:9e:08:eb:
35:4b:eb:73:78:aa:76:31:7a:8b:52:95:04:07:ea:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:34:9F:44:36:99:39:91:02:1B:80:D6:5D:9A:10:8B:53:9A:16:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B5F468F5D111EFA6073695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
01:42:ea:b1:3e:e0:84:05:2b:e6:19:10:51:da:36:19:80:7c:
83:37:ef:d0:1e:7d:af:c5:42:a9:a2:21:e3:cd:8c:41:d1:2c:
e5:8c:65:22:33:06:ac:8b:57:a9:7e:f4:3a:81:38:b9:b1:c5:
52:54:1b:eb:8a:b9:ec:fc:ab:bf:7f:b6:01:4c:02:7a:a0:38:
c9:96:32:b0:b5:c2:87:87:95:c8:f3:20:25:0a:ba:d9:79:48:
62:3e:e4:32:ce:6a:6e:4f:8c:8d:da:da:b2:89:07:6a:fd:c7:
56:46:c5:00:94:5b:8f:b3:97:0d:17:d7:5d:54:cf:54:b7:90:
dc:6c:e8:1e:8d:88:9c:73:43:d4:d4:03:c1:28:2c:3f:a4:c2:
4f:cf:b1:ec:9a:f4:5c:e3:4f:50:7a:8c:75:51:30:c2:96:ed:
de:91:63:01:4e:54:53:aa:91:fd:92:22:23:72:9b:e4:bb:ad:
db:56:ef:d0:c4:d9:8b:26:ac:da:49:b1:6f:57:5c:1a:59:82:
4a:eb:47:c8:e0:d5:9e:1a:ad:7d:52:2b:70:a5:9f:6a:23:48:
37:5a:47:98:f4:a6:65:a7:79:26:cd:ae:8d:d2:2d:39:36:a7:
25:1d:12:88:dc:13:93:6a:71:7a:5d:e7:1d:4d:a2:09:b9:a6:
08:e5:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:42 2025 by rpki-client