Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1859A5BAF82111EFAB863257762E951A.roa
File: 1859A5BAF82111EFAB863257762E951A.roa (raw, json)
Hash identifier: Oz2U3RlY8Kk9nwp1uow1lqmvzLw/D60ICvHtoQ0ZxCA=
Subject key identifier: 1A:CF:97:8A:54:56:9E:A0:77:D8:80:72:BE:F1:8F:87:90:62:41:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017065
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1859A5BAF82111EFAB863257762E951A.roa
Signing time: Mon 03 Mar 2025 11:17:30 +0000
ROA not before: Mon 03 Mar 2025 11:17:26 +0000
ROA not after: Mon 31 Mar 2025 11:17:26 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94309 (0x17065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:17:26 2025 GMT
Not After : Mar 31 11:17:26 2025 GMT
Subject: CN=67c58fca-5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:90:63:66:79:9a:5c:6f:4e:f5:eb:c3:2e:
88:b3:5d:c6:e6:ab:8f:f7:c6:8b:18:74:5e:5c:3d:
01:b9:d6:d2:7d:c3:c3:09:97:52:05:60:27:6b:8a:
fd:f3:22:37:a1:44:6b:0a:40:10:a8:ff:9f:96:aa:
57:f3:fd:a1:2a:5b:ba:ac:46:22:2b:5b:e3:26:e9:
6c:91:4c:b4:69:6f:5c:9e:e6:4d:78:e5:f0:83:fd:
9f:3f:ef:87:71:05:ef:4c:99:c9:d2:1c:c3:8c:ae:
29:89:c2:d2:d6:f5:10:da:dc:72:a3:02:13:b1:f7:
04:37:b6:10:93:e3:3e:ea:b8:0c:72:d8:7f:c2:19:
48:d7:e0:88:c7:05:1f:af:0d:44:7e:ac:02:f6:a9:
a9:fa:1b:06:10:44:0a:59:8e:db:b1:64:b7:8c:fa:
22:e7:e6:b6:e0:1b:52:b1:e7:0d:f0:17:93:66:37:
95:78:ba:a6:e3:9b:87:e5:c1:d5:ef:7a:6b:06:15:
2f:bf:d4:9f:4b:5b:e0:19:f6:c9:b5:13:cc:fc:fb:
97:f9:96:0b:d4:56:71:cb:69:18:a6:7b:b9:98:c4:
0a:af:96:52:5d:ff:65:d5:2d:a2:6e:7b:0e:80:44:
3b:72:c9:13:80:03:24:8a:e4:4c:de:cc:5f:6a:b6:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:97:8A:54:56:9E:A0:77:D8:80:72:BE:F1:8F:87:90:62:41:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1859A5BAF82111EFAB863257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b0:2b:9e:b5:ad:5a:2e:71:0a:b9:d0:65:1c:01:af:75:af:
de:8f:ca:82:b0:a4:dc:66:cd:ec:a4:38:5a:f4:8a:2e:23:1d:
7c:35:da:47:2e:38:a2:39:e7:09:4b:6e:88:bc:96:a8:f8:47:
63:e6:49:d1:e4:46:4e:25:3c:32:bb:23:b8:dd:33:12:56:0e:
7d:0f:9b:82:1e:60:d3:33:72:e1:17:d9:0d:d9:5b:55:1e:7d:
7a:ab:d1:ca:eb:f9:ce:be:95:ef:12:61:00:9f:06:60:ac:30:
fd:3e:a1:36:e5:aa:2a:1d:8b:ca:86:c5:fe:ae:3e:e0:27:40:
4b:a8:ec:9f:b9:86:bf:4c:25:07:49:62:af:75:50:a5:65:95:
76:1c:c5:b4:52:a1:ff:7d:35:c7:cb:39:96:d6:6e:e3:82:63:
4e:54:1b:59:4d:8d:60:2f:83:93:d4:16:f7:58:25:42:d2:7c:
06:ce:1d:03:98:13:30:05:ca:5c:cf:8e:7c:cf:5d:b1:d0:b7:
f9:28:ba:bf:e6:ed:d3:2c:d4:fe:35:17:1c:9d:36:fa:70:5c:
95:29:63:36:88:d0:27:82:15:9d:b3:59:72:0a:28:e7:d7:b5:
75:c2:7e:e1:b1:f6:7f:03:ef:58:2d:ab:e0:2d:ac:12:05:33:
70:fa:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:19:41 2025 by rpki-client